Privacy policy

1. Controller

Karl Heinz Schäfer
Represented by: Dominic Mahrle
Hermannstraße 38
63263 Neu-Isenburg
Germany
Email: info@schaefer-sanitaer.de
Phone: 06102 2989004

2. Hosting and server log files

This website is hosted by Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA. The personal data collected on this website is stored on the host's servers. This may include IP addresses, contact enquiries, meta and communication data, contact details, names and website access data. A data processing agreement pursuant to Art. 28 GDPR is in place with the host.

When you visit the site, server log files are generated automatically from the data your browser transmits: the address requested, date and time of access, volume of data transferred, referrer, browser type and operating system, and the IP address. This data serves the secure and stable operation of the website, is not merged with other data sources and is deleted automatically after a short period. The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in trouble-free operation).

3. Contact form and email delivery

If you send us enquiries via the contact form, the details you provide in the form, including the contact details you enter there, are stored by us in order to process the enquiry and in case of follow-up questions. We do not pass this data on without your consent. The legal basis is Art. 6 (1) (b) GDPR (pre-contractual measures) or Art. 6 (1) (f) GDPR (legitimate interest in answering your enquiry).

Delivery is handled by the Resend service operated by Resend, Inc., 2261 Market Street #5039, San Francisco, CA, USA. The data you enter is transmitted to Resend in order to enable email delivery. You also receive an automatic acknowledgement at the email address you provided, which contains a copy of your message. A data processing agreement pursuant to Art. 28 GDPR is in place with Resend.

4. Cloudflare Turnstile (spam protection)

On our contact page we use Cloudflare Turnstile, a service by Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA, to prevent bots and spam. This may establish a connection to Cloudflare servers and process technical information (for example IP address, browser data). According to the provider, Turnstile does not set cookies for advertising or tracking purposes. The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in the security of our website).

5. Fonts, cookies and analytics

We do not use any analytics tools, audience measurement or advertising networks. Our website itself sets no cookies, which is why there is no consent banner.

The fonts used are served locally from our own server. Loading the page establishes no connection to Google servers and transmits no data to Google.

6. Recipients and transfers to third countries

The only recipients of personal data are the service providers named above, acting for us as processors: Vercel Inc. (hosting), Resend, Inc. (email delivery) and Cloudflare, Inc. (spam protection). These companies are based in the USA, so processing may take place in a third country.

The transfer is based on the European Commission's standard contractual clauses pursuant to Art. 46 (2) (c) GDPR, or on the respective provider's certification under the EU-US Data Privacy Framework pursuant to Art. 45 GDPR. No data is passed on to any other third party unless we are legally obliged to do so.

7. Retention period

We store personal data only for as long as is necessary for the respective purpose. Server log files are deleted automatically after a short period. Contact form enquiries are deleted once the purpose of processing no longer applies and no statutory retention periods stand in the way. If your enquiry leads to an order, the commercial and tax retention periods of six and ten years respectively under § 257 HGB and § 147 AO apply.

8. Your rights

Within the scope of the applicable statutory provisions, you have the right at any time to obtain free information about your stored personal data, its origin and recipients and the purpose of the data processing (Art. 15 GDPR), to rectification (Art. 16 GDPR), to erasure (Art. 17 GDPR), to restriction of processing (Art. 18 GDPR) and to data portability (Art. 20 GDPR).

Where we process data on the basis of legitimate interests pursuant to Art. 6 (1) (f) GDPR, you have the right to object to that processing on grounds relating to your particular situation (Art. 21 GDPR). Any consent you have given can be withdrawn at any time with effect for the future.

For this and for any further questions on the subject of personal data, you can contact us at any time at the address given above. Independently of this, you have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is the Hessischer Beauftragter für Datenschutz und Informationsfreiheit, Postfach 3163, 65021 Wiesbaden, Germany.

9. SSL/TLS encryption

For security reasons and to protect the transmission of confidential content, this site uses SSL/TLS encryption. You can recognise an encrypted connection by the browser address bar changing from „http://“ to „https://“.