Privacy Policy

You may visit our website without providing personal information. Each time a webpage is accessed, the web server automatically stores a server log file containing, for example, the name of the requested file, your IP address, the date and time of access, the volume of data transferred and the requesting provider. These access data are evaluated solely to ensure trouble-free operation of the website and to improve our offering. This serves our overriding legitimate interests in presenting our offering correctly, following a balancing of interests, pursuant to Article 6(1)(f) GDPR. All access data are deleted no later than seven days after the end of your visit.

Hosting: services for hosting and displaying the website are provided in part by service providers processing data on our behalf. Unless otherwise explained in this Privacy Policy, all access data and all data collected through forms provided on this website are processed on their servers.

When you contact us, we collect personal data to process your enquiry pursuant to Article 6(1)(b) GDPR if you voluntarily provide it, for example through a contact form, live-chat tool or email. Required fields are marked as such because we need the data to process your enquiry.

After your enquiry has been fully processed, your data are deleted unless you have expressly consented to further use pursuant to Article 6(1)(a) GDPR or we reserve the right to use data beyond this extent where permitted by law. Once your customer enquiry has been fully completed, further processing is restricted and the data are deleted after the retention periods under tax and commercial law have expired pursuant to Article 6(1)(c) GDPR.

To make our website attractive and enable certain functions, we use technologies including cookies. Cookies are small text files automatically stored on your device. Some are deleted when the browser session ends (session cookies), while others remain on your device (persistent cookies).

Consent is not required for technologies that are strictly necessary to provide the expressly requested digital service. Storing or accessing information on your device for functions that are not strictly necessary requires your consent. Any consent you provide remains in force until you adjust or reset the settings.

You can change your cookie consents at any time using the ‘Manage consent’ link in the footer.

Address search (Photon / photon.komoot.io) — If you use the optional EU-wide address search or plausibility check, only the address components entered for this purpose (search text or street, building number, postal code, city and country code) are transmitted through our server to the Photon service. Names, email addresses and telephone numbers are not transmitted. Manual address entry remains available at all times. Photon processes OpenStreetMap address data under the ODbL; result lists directly attribute OpenStreetMap contributors and Photon.

Google Analytics — For website analysis, data such as IP address, time of visit, device and browser information and usage information are collected automatically and used to create pseudonymous usage profiles. For visits from the EU, the IP address is first processed on a server located in the EU and shortened or deleted before onward transmission.

Google reCAPTCHA — We use Google reCAPTCHA to protect our forms against automated misuse, such as spam and bot access. Data including your IP address, device and browser information and interaction behaviour are transmitted to and evaluated by Google for this purpose.

First-party usage tracking — We also operate our own self-hosted reach measurement without disclosure to third parties. We record a session identifier, device, referrer and UTM information, event type (such as a page view or basket action) and timestamp; for signed-in customers, we additionally associate the event with the customer account. The purpose is to analyse website usage. Processing takes place only if you consent to the ‘Analytics’ category in the cookie banner. You may withdraw your consent at any time using the ‘Manage consent’ link in the footer.

The services named above are offered by their respective providers (Google Ireland Ltd.). Processing is based on a data-processing agreement or your consent pursuant to Article 6(1)(a) GDPR. You may withdraw your consent at any time with future effect.

Our website uses social buttons for social networks. They are embedded only as HTML links, so no connection to the provider’s servers is established when our website is opened. The relevant social-network website opens only when you click a button.

Where you have given the relevant social-media operator your consent, your data are automatically collected and stored for market-research and advertising purposes when you visit our presence on those platforms. Further information about processing by each provider is available in its own privacy policy.

As a data subject, you have the right of access (Article 15 GDPR), rectification (Article 16 GDPR), erasure (Article 17 GDPR), restriction of processing (Article 18 GDPR), data portability (Article 20 GDPR) and the right to lodge a complaint with a supervisory authority (Article 77 GDPR).

Right to object: where we process personal data to safeguard overriding legitimate interests following a balancing of interests, you may object to that processing with future effect. Where processing is carried out for direct-marketing purposes, you may exercise this right at any time.

For questions concerning the collection, processing or use of your personal data, or to exercise rights of access, rectification, restriction, erasure or withdrawal of consent, contact us directly using the details in the Legal Notice.