Privacy Policy
With this policy, we inform you in accordance with Art. 13 and 14 of the General Data Protection Regulation (GDPR) about the processing of personal data when you visit this website.
1. Controller
2. Data Protection Officer
Stefan Frings
Email: sfrings@datanet.de
3. Access data / server log files
When you access this website, the web server processes technically necessary data (IP address, date and time of the request, page accessed, volume of data transferred, user agent, referrer URL) in log files. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in the secure and stable operation of the website. The log files are deleted after 14 days at the latest, unless a security-relevant incident requires longer retention.
4. Consent and consent management (Section 25 TDDDG)
Beyond technically necessary operations, we use services that are only loaded after your explicit consent (opt-in). On your first visit, a consent banner appears in which you can accept or reject individual categories. Without consent, no statistics, marketing or external media services are loaded and no cookies required for these are set.
We distinguish the following categories:
- Necessary — technically required; stores, among other things, your privacy choice locally in your browser (Section 25(2) TDDDG).
- Statistics — audience measurement with Google Analytics 4.
- Marketing — Meta Pixel.
- External media — Google Maps map on the contact page.
For technical control we use Google Tag Manager with Google Consent Mode v2: by default, all storage and processing operations requiring consent are deactivated ("denied") and are only activated after your consent. The legal basis for services requiring consent is your consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) TDDDG. You can adjust or withdraw your consent at any time with effect for the future via the "Privacy settings" button (at the bottom right of the screen). The lawfulness of processing carried out until withdrawal remains unaffected.
5. Contacting us
If you contact us by email or telephone, we process the data you provide in order to handle your request (Art. 6(1)(b) GDPR for contractual or pre-contractual communication, otherwise Art. 6(1)(f) GDPR). The data is deleted as soon as it is no longer required to achieve the purpose and no statutory retention obligations prevent this.
6. Google Tag Manager
We use Google Tag Manager (provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). Tag Manager is a tool for managing website tags and does not itself set any cookies for analysis or marketing purposes. It is used to integrate the services mentioned below (Google Analytics 4, Meta Pixel) — but only after you have consented in the respective category (Google Consent Mode v2). Without consent, these tags are not executed. The legal basis is Art. 6(1)(a) GDPR and Section 25(1) TDDDG.
7. Google Analytics 4
After your consent to the "Statistics" category, we use Google Analytics 4, a service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). Google Analytics uses cookies or comparable technologies that enable a pseudonymous analysis of your use of the website (e.g. pages accessed, approximate origin, device used). Your IP address is processed in truncated/anonymised form by Google. The purpose is statistical evaluation to improve our offering. The legal basis is your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG). A transfer to the USA to Google LLC cannot be ruled out; the basis for this is the EU-US Data Privacy Framework or standard contractual clauses (Art. 46 GDPR). Further information: Google Privacy Policy.
8. Meta Pixel
After your consent to the "Marketing" category, we use the Meta Pixel, a service provided by Meta Platforms Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland). The pixel uses cookies or comparable technologies and makes it possible to measure the effectiveness of advertisements and to recognise website visitors (pseudonymously) for marketing purposes. The purpose is reach and conversion measurement. The legal basis is your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG). For certain processing operations, we and Meta are joint controllers (Art. 26 GDPR); otherwise Meta is independently responsible. A transfer to the USA to Meta Platforms, Inc. is possible; the basis is the EU-US Data Privacy Framework or standard contractual clauses (Art. 46 GDPR). Further information: Meta Privacy Policy.
9. Google Maps (contact page)
A Google Maps map is embedded on the contact page (provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). The map is only loaded after you have consented to the "External media" category or actively activated the map by clicking. Only then is data (including your IP address) transmitted to Google; this may involve a transfer to the USA (EU-US Data Privacy Framework or standard contractual clauses, Art. 46 GDPR). The legal basis is your consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) TDDDG; you can withdraw it at any time via the privacy settings. Further information: Google Privacy Policy.
10. Recipients and third-country transfer
Personal data is only transferred to third parties if this is necessary for the performance of a contract, there is a legal obligation, or you have consented. Service providers used to host this website process data exclusively on our behalf on the basis of a data processing agreement (Art. 28 GDPR). With the consent-based services (Google, Meta), a transfer to the USA may take place. Appropriate safeguards pursuant to Art. 46 GDPR (standard contractual clauses) or certification of the recipients under the EU-US Data Privacy Framework exist for these third-country transfers. The USA does not have a level of data protection fully equivalent to European law; in particular, access by US authorities cannot be entirely ruled out.
11. Your rights
- Access (Art. 15 GDPR)
- Rectification (Art. 16 GDPR)
- Erasure (Art. 17 GDPR)
- Restriction of processing (Art. 18 GDPR)
- Data portability (Art. 20 GDPR)
- Objection to processing based on Art. 6(1)(f) GDPR (Art. 21 GDPR)
- Withdrawal of consent given, with effect for the future (Art. 7(3) GDPR)
An informal notification to the contact details above is sufficient to exercise your rights.
12. Right to lodge a complaint with a supervisory authority
You have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia, Kavalleriestraße 2-4, 40213 Düsseldorf.
13. Status
Status of this privacy policy: July 2026.