We hereby inform you in accordance with the legal requirements of data protection law (in particular pursuant to the new Federal Data Protection Act (BDSG) and the European General Data Protection Regulation “GDPR”) about the nature, scope and purpose of the processing of personal data by our company. This privacy policy also applies to our websites and social media profiles. For the definitions of terms such as “personal data” or “processing”, we refer to Art. 4 GDPR.

Name and contact details of the controller Our controller (hereinafter referred to as the “controller”) within the meaning of Art. 4 No. 7 GDPR is: Bodo Oepen GbR, Paulstraße 91, DE-52353 Düren, This email address is being protected from spambots. You need JavaScript enabled to view it.

Data Protection Officer Bodo Oepen Paulstraße 91 DE-52353 Düren This email address is being protected from spambots. You need JavaScript enabled to view it.

Types of data, purposes of processing and categories of data subjects Below we inform you about the nature, scope and purpose of the collection, processing and use of personal data.

1. Types of data we process Usage data (access times, visited websites, etc.), inventory data (name, address, etc.), contact data (telephone number, email, fax, etc.), payment data (bank details, account data, payment history, etc.), contract data (subject of the contract, term, etc.), content data (text entries, videos, photos, etc.), communication data (IP address, etc.).

2. Purposes of processing pursuant to Art. 13(1)(c) GDPR Contract performance, evidentiary purposes / securing evidence, technical and economic optimization of the website, enabling easy access to the website, fulfilment of contractual obligations, contacting in the event of legal complaints by third parties, fulfilment of statutory retention obligations, optimization and statistical evaluation of our services, improvement of user experience, user-friendly design of the website, marketing / sales / advertising, creation of statistics, prevention of spam and abuse, customer service and customer care, handling of contact requests, provision of websites with functions and content, security measures, uninterrupted and secure operation of our website.

3. Categories of data subjects pursuant to Art. 13(1)(e) GDPR Visitors/users of the website, customers, interested parties. The data subjects are collectively referred to as “users”.

Legal bases for the processing of personal data Below we inform you about the legal bases for the processing of personal data:

  1. If we have obtained your consent for the processing of personal data, Art. 6(1)(a) GDPR is the legal basis.
  2. If the processing is necessary for the performance of a contract or for the implementation of pre-contractual measures carried out at your request, Art. 6(1)(b) GDPR is the legal basis.
  3. If the processing is necessary for compliance with a legal obligation to which we are subject (e.g. statutory retention obligations), Art. 6(1)(c) GDPR is the legal basis.
  4. If the processing is necessary to protect the vital interests of the data subject or another natural person, Art. 6(1)(d) GDPR is the legal basis.
  5. If the processing is necessary to protect our legitimate interests or those of a third party and your interests or fundamental rights and freedoms do not override these, Art. 6(1)(f) GDPR is the legal basis.

Disclosure of personal data to third parties and processors Without your consent, we generally do not disclose data to third parties. Should this nevertheless occur, the disclosure is made on the basis of the legal grounds mentioned above (e.g. disclosure to online payment providers for contract performance, by court order, or due to a legal obligation to disclose data for criminal prosecution, to avert danger or to enforce intellectual property rights).

We also engage processors (external service providers, e.g. for web hosting of our websites and databases) to process your data. Any disclosure of data to processors is carried out in accordance with Art. 28 GDPR. We carefully select our processors, regularly monitor them and have reserved the right to issue instructions regarding the data. The processors must have implemented appropriate technical and organizational measures and comply with the data protection provisions of the new BDSG and the GDPR.

Data transfer to third countries The adoption of the European General Data Protection Regulation (GDPR) has created a uniform data protection standard in Europe. Your data is therefore primarily processed by companies to which the GDPR applies. Should processing nevertheless take place through third-party services outside the European Union or the European Economic Area, these providers must comply with the special requirements of Art. 44 ff. GDPR. This means processing takes place on the basis of special safeguards, such as an adequacy decision by the European Commission or the use of officially recognized standard contractual clauses.

Insofar as we obtain your explicit consent for the transfer of data to the USA pursuant to Art. 49(1)(a) GDPR due to the invalidity of the so-called “Privacy Shield”, we expressly point out the risk of secret access by US authorities and the use of the data for surveillance purposes, possibly without legal remedies for EU citizens.

Deletion of data and storage period Unless expressly stated otherwise in this privacy policy, your personal data will be deleted or blocked as soon as the consent you have given is revoked, the purpose for storage no longer applies, or the data are no longer necessary for that purpose — unless further retention is required for evidentiary purposes or statutory retention obligations apply (e.g. commercial retention obligations for business letters pursuant to § 257(1) HGB – 6 years; tax retention obligations pursuant to § 147(1) AO – 10 years). Once the statutory retention period expires, your data will be blocked or deleted unless storage is still necessary for the conclusion or performance of a contract.

Existence of automated decision-making We do not use automated decision-making or profiling.

Provision of our website and creation of log files

  1. If you use our website purely for informational purposes (i.e. without registration or any other transmission of information), we only collect the personal data that your browser transmits to our server. When you visit our website, we collect the following data: • IP address • Internet service provider of the user • Date and time of access • Browser type • Language and browser version • Content of the request • Time zone • Access status / HTTP status code • Data volume • Referring websites • Operating system
  2. These data are not stored together with other personal data of yours.
  3. These data serve the purpose of delivering our website to you in a user-friendly, functional and secure manner with all functions and content, as well as for optimization and statistical evaluation.
  4. The legal basis is our legitimate interest pursuant to Art. 6(1)(f) GDPR.
  5. For security reasons, we store these data in server log files for 30 days. After this period, the data are automatically deleted unless retention is required for evidentiary purposes in the event of attacks on the server infrastructure or other legal violations.

Cookies

  1. We use cookies when you visit our website. Cookies are small text files that your browser stores on your computer. When you return to our website, these cookies transmit information that allows us to automatically recognize you. This also includes so-called “user IDs”, where user information is stored in pseudonymized profiles. When you first access our website, we inform you via a notice about our privacy policy regarding the use of cookies for the purposes mentioned above and how you can object to this or prevent storage (“opt-out”).
  2. The following types of cookies are used: • Necessary / essential cookies: Cookies that are strictly necessary for the operation of the website (e.g. login, shopping cart, language selection). • Session cookies: Cookies that recognize repeated use by the same user (e.g. to maintain login status). They are deleted when you close the browser or log out. • Persistent cookies: Cookies that remain stored after the browser is closed. They are used for login storage, reach measurement and marketing purposes and are automatically deleted after a defined period.
  3. Third-party cookies (especially from advertisers): You can configure your browser settings to reject third-party cookies or all cookies. Please note that you may then not be able to use all functions of this website. For more information, please refer to the privacy policies of the respective third-party providers.
  4. Data categories: User data, cookie, user ID (including visited pages, device information, access times and IP addresses).
  5. Purposes of processing: Technical and economic optimization of our web offers and enabling easier and secure access to our website.
  6. Legal bases: If we process your personal data via cookies on the basis of your consent (“opt-in”), Art. 6(1)(a) GDPR applies. Otherwise, we have a legitimate interest in the effective functionality, improvement and economic operation of the website (Art. 6(1)(f) GDPR). If cookies are set for contract initiation (e.g. orders), Art. 6(1)(b) GDPR also applies.
  7. Storage period / deletion: Data are deleted as soon as they are no longer necessary for the purpose for which they were collected. For website provision, this is the case when the respective session ends. You have full control over cookies via your browser settings. You can deactivate or restrict cookie transmission at any time and delete already stored cookies (manually or automatically). If cookies are disabled for our website, not all functions may be available.
  8. Information on deleting cookies by browser:
  9. Objection and “opt-out”: You can generally prevent the storage of cookies by selecting “do not accept cookies” in your browser settings. You can object to the use of third-party cookies for advertising purposes via the following opt-out pages: https://optout.aboutads.info (USA) http://www.youronlinechoices.com/de/praferenzmanagement/ (Europe)

Use of blog functions / comments

  1. You can post public comments in our blog. You may use a pseudonym instead of your real name. The email address is mandatory; all other information is voluntary.
  2. When you post a comment, we store your IP address together with date and time (deleted after 30 days). This serves our legitimate interest in defending against claims by third parties in the event of the publication of illegal or untrue content. We store your email address to contact you if third parties legally object to your comments.
  3. Legal bases: Art. 6(1)(b) and (f) GDPR.
  4. We do not review comments before publication. In the event of objections by third parties, we reserve the right to delete comments. We do not pass on data to third parties unless necessary to pursue our claims or there is a legal obligation (Art. 6(1)(c) GDPR).
  5. Data are deleted as soon as they are no longer necessary for the purpose of collection or contract performance.

Contact via contact form / email / fax / post

  1. When you contact us via contact form, fax, post or email, your details are processed for the purpose of handling your inquiry.
  2. Legal basis: If you have given consent, Art. 6(1)(a) GDPR. Otherwise, Art. 6(1)(f) GDPR (legitimate interest in responding to inquiries, evidentiary purposes and compliance with retention obligations). If the contact aims at concluding a contract, Art. 6(1)(b) GDPR also applies.
  3. We may store your details in our CRM system or a comparable system.
  4. Data are deleted as soon as they are no longer necessary. For contact form and email inquiries, this is the case when the conversation is concluded. Inquiries from users with an account or contract are stored for up to two years after contract termination. Statutory archiving obligations (6 years commercial, 10 years tax) are observed.
  5. You may revoke your consent at any time or object to storage.

Contact by telephone

  1. When you contact us by telephone, your telephone number is processed and temporarily stored/displayed for handling the inquiry. Storage serves liability, security and economic reasons (proof of call and possibility of callback). We block numbers used for unauthorized advertising calls.
  2. Legal basis: Art. 6(1)(f) GDPR; additionally Art. 6(1)(b) GDPR if aimed at contract conclusion.
  3. The device cache stores calls for 30 days. Blocked numbers are reviewed annually.
  4. You can prevent number display by calling with caller ID suppressed.

YouTube videos

  1. We have embedded YouTube videos from youtube.com on our website using the embedded function. YouTube is operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
  2. We use the “enhanced privacy mode” so that no cookies are used to personalize video playback. Video recommendations are based solely on the currently playing video. When you start a video, you consent to YouTube tracking that you have accessed the respective subpage/video on our website and using this data for advertising purposes.
  3. Purpose: User-friendly offer, optimization and improvement of our content.
  4. Legal bases: Consent (Art. 6(1)(a) GDPR) or legitimate interest (Art. 6(1)(f) GDPR). For contract-related services: Art. 6(1)(b) GDPR.
  5. Data transfer to the USA. Google may create user profiles and use the data for advertising, market research or website optimization.
  6. Storage period: Cookies up to 2 years or until deleted by you.
  7. You have a right to object to the creation of user profiles directly with Google: https://adssettings.google.com/authenticated

8.–9. Further information: YouTube Terms of Use and Google Advertising Privacy Policy. General Google Privacy Policy: https://policies.google.com/privacy.

Social media plugins

We use the “two-click solution” Shariff from heise.de on our website. No personal data is transmitted to social network providers until you actively activate the plugin. Activation constitutes your consent. You can revoke consent at any time by deactivating the slider.

Facebook We use Facebook plugins (Facebook Ireland Ltd., Dublin) in Shariff’s two-click solution. When activated, a connection to Facebook servers in the USA is established. Further information: https://www.facebook.com/about/privacy/ and https://www.facebook.com/ads/preferences/.

Instagram We use Instagram plugins (Facebook Ireland Ltd., Dublin) in Shariff’s two-click solution. Further information and opt-out: https://help.instagram.com/519522125107875.

Rights of the data subject

  1. Right to withdraw consent / right to object You may withdraw your consent at any time. You may object to processing based on legitimate interest at any time. You may object to processing for advertising and data analysis purposes free of charge at any time.
  2. Right of access (Art. 15 GDPR)
  3. Right to rectification (Art. 16 GDPR)
  4. Right to erasure (Art. 17 GDPR)
  5. Right to restriction of processing (Art. 18 GDPR)
  6. Right to data portability (Art. 20 GDPR)
  7. Right to lodge a complaint with a supervisory authority (usually in your country of residence, work or place of alleged infringement).

Data security We have implemented appropriate technical and organizational measures to protect your personal data. All data transmitted between your browser and our server is encrypted via a secure SSL connection.

Status: 08.05.2026

We use cookies

We use cookies on our website. Some of them are essential for the operation of the site, while others help us to improve this site and the user experience (tracking cookies). You can decide for yourself whether you want to allow cookies or not. Please note that if you reject them, you may not be able to use all the functionalities of the site.

Imprint
CookieHint and Consent by reDim GmbH