Responsible person

Șerban Elian Neghea

Im Brühl 38, 75443 Ötisheim

Contact information

Phone: +49 152 0154 7791

Email: [email protected]

Introduction

This privacy policy explains how we collect, use, and protect your personal data when you use our website. We are committed to safeguarding your privacy and ensuring that your personal information is processed in compliance with data protection laws. This policy provides transparency on what data we collect, how we use it, and the security measures in place to protect it. Additionally, it outlines your rights in relation to your personal data, including how you can access, update, or request the deletion of your information. By using our website, you consent to the collection and use of your personal data as described in this policy.

Your Rights Under GDPR

As a user, you have several rights under the General Data Protection Regulation (GDPR), which provide you control over your personal data. These rights include the right to access, correct, delete, and limit the processing of your data. If you wish to exercise any of these rights, please contact us using the contact details provided above.

• Right to Access: You have the right to request access to the personal data we hold about you, as well as to receive information on how we process that data. If you wish to exercise this right, please contact us at the email address provided.

• Right to Rectification: If the personal data we hold about you is incorrect or incomplete, you have the right to request that we correct or complete it. You can do so by contacting us directly.

• Right to Erasure ("Right to be Forgotten"): You have the right to request the deletion of your personal data, under certain circumstances. This includes cases where your data is no longer necessary for the purposes for which it was collected, or if you withdraw your consent and no other legal basis exists for processing.

• Right to Restriction of Processing: You may request the restriction of the processing of your personal data in certain situations, such as if you contest the accuracy of the data or if the processing is unlawful.

• Right to Data Portability: You have the right to receive the personal data we hold about you in a structured, commonly used, and machine-readable format, and to transmit that data to another service provider, where technically feasible.

• Right to Object: You have the right to object to the processing of your personal data at any time, including for marketing purposes. In such cases, we will cease processing your data unless there are compelling legitimate grounds for continuing the processing.

General Information on Data Processing

With this declaration, we fulfill our legal obligation to provide information and inform you about the storage of data, the type of data, its purpose, and our identity. We also inform you about the initial transfer and the type of data transmitted. Data processing on this website is carried out by Șerban Elian Neghea. If you have questions about data protection or wish to exercise rights or claims regarding your personal data, please email us at: [email protected]

This privacy policy explains how we collect, use, and protect your personal data when you use our website. It also details your rights regarding your data and how you can exercise them. Data processing on this website is carried out by Șerban Elian Neghea. Contact details can be found in the imprint of this website.

Scope of Processing of Personal Data

We generally only collect and use our users' personal data, such as your name, email address, IP address, etc., to the extent that this is necessary to provide a functional website and our content and services. The collection and use of our users' personal data generally only occurs with the user's consent. An exception applies in cases where prior consent cannot be obtained for actual reasons, and the processing of the data is permitted by law.

Legal Basis for the Processing of Personal Data

If we obtain the consent of the data subject for the processing of personal data, Art. 6 (1) (a) of the EU General Data Protection Regulation (GDPR) serves as the legal basis. If personal data is necessary to fulfill a contract to which the data subject is a party or to carry out pre-contractual measures, Art. 6 (1) (b) GDPR applies. Additionally, if the processing of personal data is required to fulfill a legal obligation to which our company is subject, Art. 6 (1) (c) GDPR serves as the legal basis.

In cases where vital interests of the data subject or another natural person require the processing of personal data, Art. 6 (1) (d) GDPR applies. Lastly, if processing is necessary to protect a legitimate interest of our company or a third party, and the interests, fundamental rights, and freedoms of the data subject do not outweigh the former interest, Art. 6 (1) (f) GDPR serves as the legal basis for processing.

Data Deletion and Storage Period

The personal data of the data subject will be deleted or blocked as soon as the purpose for which they were stored no longer applies. Data may also be stored if this has been provided for by the European or national legislator in EU regulations, laws, or other provisions to which the controller is subject. Data will also be blocked or deleted if a storage period prescribed by the aforementioned standards expires, unless there is a need to continue storing the data for the conclusion or fulfillment of a contract.

Inquiry by Email, Telephone, or Fax

Description and Scope of Data Processing

If you contact us by email, telephone, or fax, we will store and process your request, including any personal data such as your name, contact details, and the content of your inquiry, solely for the purpose of addressing and processing your request. We will not share this data with third parties without your consent. The data you send to us will remain stored until you request its deletion, revoke your consent to its storage, or when the data is no longer necessary for its intended purpose (such as after the request has been processed). However, mandatory legal provisions, particularly statutory retention periods, remain unaffected, and we will store the data for as long as required by law.

Contact by Email

If you contact us using the provided email address, we will save the personal data transmitted along with the email. This data is used exclusively for processing and responding to your inquiry. We will not share this data with any third parties in this context. Your data will only be used to facilitate communication and to process the inquiry you have submitted.

Contact by Phone

If you reach out to us by telephone, we will collect and process your personal data to assist you with your request in the best possible way. If you do not consent to the processing of your personal data during the call, please notify us at the beginning of the conversation, and we will respect your wishes. This will allow us to either proceed without using your data or, depending on the case, discontinue the conversation.

Contact via Contact Form

Description of Processing

We offer a contact form on our website that enables you to easily get in touch with us. When using the form, you will be required to provide your name, email address, and a message. Once you click the "Send" button, the information you provide will be securely transmitted to us using SSL encryption. The form can only be submitted if you have checked the box to confirm that you have read and accepted our privacy policy.

In addition to the information you submit, the following data is automatically stored when the form is sent: your IP address, the date and time of access, and the personal details entered in the form (e.g., first name, last name, email, and message). You can alternatively contact us directly via email if you prefer not to use the form, and we will process the personal data contained in the email for the purpose of responding to your inquiry. This data will not be passed on to third parties, and it will only be used to process the inquiry and for correspondence purposes.

Purpose of Processing

The data you submit via the contact form or email will be used solely to process and respond to your inquiry. Our goal is to provide a convenient and efficient way for you to reach us and to ensure that we handle your request promptly and accurately.

Legal Basis for Processing

The processing of your personal data is based on our legitimate interest in responding to and processing your request, in accordance with Art. 6 (1) (f) of the EU General Data Protection Regulation (GDPR). If your inquiry is aimed at concluding a contract, the additional legal basis for processing is Art. 6 (1) (b) of the GDPR.

Storage Period

We will delete your personal data as soon as it is no longer required for the purpose for which it was collected. Typically, this will happen once our communication has concluded and the matter raised in your inquiry has been fully resolved. If statutory retention periods exist, we will retain the data for the duration of those periods, after which the data will be deleted without delay once the retention period has expired.

Legal Basis for Data Processing

Consent

If you have provided us with explicit consent to process your personal data (e.g., by submitting your information through a form or other methods), we process your data based on Art. 6 (1) (a) of the General Data Protection Regulation (GDPR). This consent is always voluntary, and you can withdraw it at any time.

Legitimate Interests

If you contact us via email or other direct means, we may process your personal data based on our legitimate interest to respond to your inquiry, as outlined in Art. 6 (1) (f) of the GDPR. Our legitimate interest lies in ensuring that we handle your request and provide appropriate support or information.

Contractual Necessity

If your communication with us is aimed at entering into a contract or related to an existing contract, the processing of your data is necessary to fulfill the terms of the agreement, based on Art. 6 (1) (b) of the GDPR. This includes processing for purposes like providing services, delivering goods, or managing contractual obligations.

Purpose of Data Processing

The personal data you enter in the contact form or send via email is processed exclusively for the purpose of responding to and handling your inquiry. This is necessary for ensuring that we can provide an efficient communication channel and offer you the appropriate assistance. Additionally, data collected during the submission process helps prevent misuse of the contact form and ensures the security of our IT systems.

Duration of Storage

Your data will be deleted once it is no longer required for the purpose it was originally collected. This is usually the case when the communication has concluded, and the issue raised in your inquiry has been fully clarified. If statutory retention periods prevent immediate deletion, the data will be retained until the end of the retention period, after which it will be deleted.

Possibility of Objection and Removal

You have the right to withdraw your consent to the processing of your personal data at any time. If you contact us via email, you may object to the storage or further processing of your personal data at any time. In such a case, the conversation cannot continue, and all personal data that was stored during the course of contact will be deleted promptly.

In addition, you may object to the processing of your personal data based on our legitimate interests as outlined in Art. 6 (1) (f) of the GDPR. If you object, we will stop processing your data unless there are compelling legitimate grounds for continuing to process the data that override your rights and interests.

SSL or TLS Encryption

This website uses SSL (Secure Socket Layer) or TLS (Transport Layer Security) encryption to ensure the security of your data during transmission, particularly for confidential content such as orders or inquiries you send to us. You can recognize an encrypted connection by the "https://" prefix in the browser address bar and the lock symbol displayed in the browser's address line. When SSL or TLS encryption is activated, the data you send to us is protected and cannot be read by third parties during transmission. We support a minimum version of TLS 1.0, which is compatible with supported browsers up to the latest version.

Data Security

We take appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, or disclosure. These measures include using encryption protocols like SSL/TLS for secure data transmission and limiting access to authorized personnel only.

Data Collection on Our Website

Provision of the Website and Creation of Log Files

When you visit our website, the browser on your device automatically sends information to our website's server. This information is temporarily stored in a log file. The following data is recorded without your intervention and stored until it is automatically deleted:

• IP address of the requesting computer;
• Date and time of access;
• Name and URL of the retrieved file;
• Website from which access is made (referrer URL);
• Browser used and, if applicable, the operating system of your computer, and the name of your access provider.

Purpose of Data Processing

The above data is processed for the following purposes:

• Ensuring a smooth connection to the website;
• Ensuring comfortable use of our website;
• Evaluation of system security and stability;
• To check for errors encountered during navigation and to optimize the website for specific countries where visitors come from;
• For further administrative purposes.

Legal Basis for Data Processing

The legal basis for the data processing is Art. 6 Paragraph 1 Clause 1 Letter f of the GDPR. Our legitimate interest arises from the purposes for which the data is collected, as listed above. Under no circumstances do we use the data collected to draw conclusions about your personal identity.

Data Sharing with Third Parties

We do not share your personal data with third parties unless we have obtained your consent or are required to do so by law. In cases where third-party service providers are involved in the processing of your personal data (e.g., for payment processing, email communication), we ensure that these parties comply with the data protection laws and handle your personal data securely.

Cookies

We use cookies on our website. These are small files automatically created by your browser and stored on your device (laptop, tablet, smartphone, etc.) when you visit our website. Cookies do not cause any harm to your device and do not contain viruses, Trojans, or other malware. Information related to the specific device used is stored in the cookie. However, this does not mean that we automatically receive knowledge of your identity.

Purpose of Using Cookies

The use of cookies serves to make using our services more pleasant for you. For example, we use so-called session cookies to recognize that you have already visited individual pages on our website. These cookies are automatically deleted when you leave our website.

Additionally, we use temporary cookies to optimize user-friendliness, which are stored on your device for a specific period of time. If you visit our website again, it is automatically recognized that you have been here before, and the entries and settings you made are retained so that you do not have to enter them again.

We also use cookies to statistically record the use of our website and evaluate it in order to optimize our offering for you. These cookies enable us to recognize that you have visited our site before when you visit again. These cookies are automatically deleted after a defined period of time. Cookies are stored for a maximum of 1 year.

Legal Basis for Data Processing

The data processed by cookies is required for the purposes mentioned above to protect our legitimate interests and those of third parties in accordance with Art. 6 Paragraph 1 Clause 1 Letter f of the GDPR.

Cookie Settings

Most browsers accept cookies automatically. However, you can configure your browser settings so that no cookies are stored on your device, or you can be notified each time a new cookie is created. Please note that completely deactivating cookies may mean that you cannot use all the functions of our website.

Hosting

Our websites are hosted by an external service provider located in Düsseldorf, Germany. The personal data collected on our websites is stored on the hosting provider's servers. This may include IP addresses, contact requests, meta and communication data, contact details, names, website accesses, and other data generated via the website.

Our hosting provider processes your data within the framework of a contract for order data processing (AVV) and only to the extent necessary to fulfill its service obligations. The hosting provider will follow our instructions with regard to this data.

Additional Information

Links to Other Websites

Our website may contain links to external websites operated by third-party providers that are not affiliated with us. Once you click on these links and are redirected to the third-party site, we no longer have control over the processing of any personal data that might be transferred to that site (for example, your IP address or the URL from which you were referred). The behavior and practices of these third parties are beyond our control, and we cannot be held responsible for their data processing activities. We strongly encourage you to review the privacy policies of any external websites you visit.

Rights of the Data Subject

If your personal data is being processed, you are considered a data subject under the GDPR, and you have the following rights in relation to the data controller:

Right to Information

You have the right to request confirmation from the controller about whether personal data concerning you is being processed. If such processing is occurring, you can request the following information:

• The purposes for which your personal data is being processed, including the specific legal bases for processing;
• The categories of personal data being processed and the types of information stored;
• The recipients or categories of recipients to whom your personal data has been or will be disclosed, especially if the data will be shared with third parties, international organizations, or transferred to countries outside the European Union;
• The planned or expected duration for which your personal data will be stored, or if that information is not available, the criteria used to determine the retention period;
• The existence of a right to request rectification or erasure of your personal data, or to request restrictions on processing, and the process for exercising these rights;
• The existence of a right to object to the processing of your personal data, as well as the conditions under which such a right can be exercised;
• Your right to lodge a complaint with a supervisory authority if you feel your rights are not being respected;
• Information on the source of your personal data, especially if it was not collected directly from you;
• The existence of any automated decision-making, including profiling, as outlined in Article 22 (1) and (4) of the GDPR. This includes meaningful information about the logic behind such processes, the significance of the decisions made, and their likely consequences for you as the data subject.

Furthermore, you have the right to be informed whether your personal data will be transferred to a third country (outside the EU) or to an international organization, and if so, you can request details about the safeguards provided under Article 46 of the GDPR to ensure adequate protection of your data.

Right to Rectification

You have the right to request that the controller rectify any incorrect or incomplete personal data concerning you that is being processed. If the data is inaccurate or incomplete, the controller must carry out the rectification promptly, ensuring that your personal data is corrected or updated as needed.

Right to Restriction of Processing

You have the right to request the restriction of the processing of your personal data under certain conditions. These conditions include:

• If you dispute the accuracy of your personal data, and the controller is in the process of verifying the data's accuracy;
• If the processing is unlawful, and you oppose the erasure of your personal data but instead request the restriction of its use;
• If the controller no longer needs your personal data for the purposes of processing, but you require it to assert, exercise, or defend legal claims;
• If you have objected to processing based on Art. 21 (1) of the GDPR, and it has not yet been determined whether the legitimate interests of the controller override your reasons for objecting.

If the processing of your personal data has been restricted, these data may only be processed in the following circumstances:

• With your consent;
• For the establishment, exercise, or defense of legal claims;
• To protect the rights of another natural or legal person;
• For reasons of substantial public interest in the Union or a Member State.

If the restriction of processing has been applied to your personal data according to the above conditions, the controller will inform you before the restriction is lifted.

Right to Erasure

You have the right to request the controller to erase your personal data immediately, and the controller is obligated to comply with this request without undue delay if one of the following conditions applies:

• The personal data concerning you is no longer necessary for the purposes for which it was collected or otherwise processed;
• You withdraw your consent on which the processing is based according to Art. 6 (1) (a) or Art. 9 (2) (a) of the GDPR, and there is no other legal basis for the processing;
• You object to the processing pursuant to Art. 21 (1) of the GDPR, and there are no overriding legitimate reasons for the processing, or you object to the processing pursuant to Art. 21 (2) of the GDPR;
• The personal data concerning you has been processed unlawfully;
• The erasure of your personal data is necessary to fulfill a legal obligation under Union or Member State law to which the controller is subject;
• The personal data concerning you was collected in relation to information society services offered in accordance with Art. 8 (1) of the GDPR.

Information to Third Parties

If the controller has made your personal data public and is obliged to erase them pursuant to Art. 17 (1) of the GDPR, the controller must take appropriate measures, including technical ones, to inform other data controllers processing your personal data. This includes informing them that you, as the data subject, have requested the erasure of all links to, or copies or replications of, these personal data, taking into account the available technology and implementation costs.

Exceptions to the Right to Erasure

The right to erasure does not exist if the processing is necessary for any of the following reasons:

• To exercise the right to freedom of expression and information;
• To fulfill a legal obligation that requires processing under Union or Member State law to which the controller is subject, or to perform a task carried out in the public interest or in the exercise of official authority vested in the controller;
• For reasons of public interest in the area of public health pursuant to Art. 9 (2)(h) and (i) and Art. 9 (3) of the GDPR;
• For archiving purposes in the public interest, scientific or historical research purposes, or statistical purposes pursuant to Art. 89 (1) of the GDPR, insofar as the right to erasure is likely to render the achievement of the objectives of this processing impossible or seriously compromise it;
• To assert, exercise, or defend legal claims.

Right to Information

If you have asserted your right to rectification, erasure, or restriction of processing vis-à-vis the responsible party, the responsible party is obligated to inform all recipients to whom your personal data has been disclosed of the rectification, erasure, or restriction of processing. This obligation does not apply if informing the recipients proves impossible or would involve disproportionate effort.

You have the right to be informed by the responsible party of these recipients.

Right to Data Portability

You have the right to receive the personal data concerning you that you have made available to the controller in a structured, commonly used, and machine-readable format. Furthermore, you have the right to transmit this data to another controller without hindrance from the controller to whom the personal data was made available, provided that:

• The processing is based on consent in accordance with Art. 6 (1) (a) of the GDPR or Art. 9 (2) (a) of the GDPR, or on a contract in accordance with Art. 6 (1) (b) of the GDPR; and
• The processing is carried out using automated procedures.

In exercising this right, you also have the right to request that the personal data concerning you be transmitted directly from one controller to another, where technically feasible. This must not affect the freedoms and rights of other individuals.

The right to data portability does not apply to the processing of personal data that is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

Right of Objection

You have the right to object at any time to the processing of personal data concerning you that is carried out on the basis of Art. 6 (1) (e) or (f) of the GDPR, for reasons related to your particular situation. This also applies to profiling based on these provisions.

The controller will no longer process the personal data concerning you unless they can demonstrate compelling legitimate grounds for the processing which outweigh your interests, rights, and freedoms, or if the processing serves to assert, exercise, or defend legal claims.

If your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for such advertising. This also applies to profiling in relation to such direct advertising. If you object to the processing for direct marketing purposes, your personal data will no longer be processed for these purposes.

In connection with the use of information society services, you may exercise your right of objection through automated procedures that use technical specifications, in accordance with Directive 2002/58/EC.

Right to Revoke the Declaration of Consent under Data Protection Law

You have the right to revoke your consent to the processing of personal data at any time. The revocation of your consent does not affect the legality of the processing carried out on the basis of the consent prior to the revocation.

Right to Lodge a Complaint with a Supervisory Authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, particularly in the Member State of your residence, place of work, or the location of the alleged infringement, if you believe that the processing of your personal data infringes the GDPR.

The supervisory authority to which the complaint has been submitted will inform the complainant of the status and outcome of the complaint, including the possibility of a judicial remedy under Art. 78 of the GDPR.

Last updated: March 2025