Privacy policy

Controller

The controller responsible for processing personal data on this website within the meaning of the General Data Protection Regulation (GDPR) is:

Isoliertechnik Helge Pentzlin GmbH
Benzingeröder Chaussee 72
38855 Wernigerode
Managing director: Helge Pentzlin
Phone: +49 (0)3943 / 47193
E-mail: info@isoliertechnik-harz.de

This policy describes only what actually happens when you visit this website and when you contact us.

Hosting

This website is hosted by Hetzner Online GmbH in Falkenstein (Germany). The provider supplies the servers and, on our behalf, processes the data described under “Server log files”. The legal basis is Art. 6(1)(f) GDPR: we have an interest in providing the website securely and reliably. We have a data processing agreement with the provider under Art. 28 GDPR. The server log files are deleted after 7 days.

Server log files

When you visit the website, the web server automatically processes the IP address of your device, the date and time of the request, the URL requested and the details of your browser (user agent). We use this data to deliver the website, to keep it running reliably and to detect misuse. The legal basis is Art. 6(1)(f) GDPR.

Contact form

When you write to us through the contact form, we process your name, your e-mail address and your message. Company and phone number are optional. Without the required details we cannot deal with your enquiry.

To protect against automated misuse, your browser solves a small task before sending (ALTCHA, proof of work). No cookies are set and no data is sent to a CAPTCHA provider. To limit excessive requests in a short time, your IP address is processed briefly in the working memory of the contact service and is not stored permanently.

Your enquiry goes to the contact service of this website, which forwards it to us by e-mail. To send the e-mail, the contact service uses Resend (Resend, Inc., USA) as a processor under Art. 28 GDPR. Resend processes the data on servers in Ireland (EU).

You automatically receive a confirmation at the e-mail address you entered. It contains your details as a copy and is also sent through Resend.

The legal basis is Art. 6(1)(b) GDPR if your enquiry aims at a contract or pre-contractual measures, otherwise Art. 6(1)(f) GDPR (interest in dealing with your enquiry). We keep your enquiry for as long as it is needed to deal with it, and beyond that where statutory retention obligations require it.

Contact by e-mail or phone

When you write to us by e-mail or call us, we process your contact details and the content of your message or the conversation in order to answer your enquiry. The legal basis is Art. 6(1)(b) GDPR if the enquiry aims at a contract or pre-contractual measures, otherwise Art. 6(1)(f) GDPR. The retention period is the same as for the contact form.

Audience measurement with Umami

We measure the use of the website with the Umami software. The evaluation takes place on a server at analytics.ivy-s.de. Umami does not set cookies. It records the pages visited, the referring page, browser, operating system, device type, screen size, language, the approximate location and anonymous loading times. Your IP address is evaluated for this purpose but not stored. Umami also counts the sending of the contact form, failed attempts to send it (only the type of error, for example “server not reachable”) and clicks on the phone number, e-mail address, map link, contact page and language switcher, each with the place on the page where the click happened and, for the language switcher, the language chosen. The content of the enquiry, names and e-mail addresses are not transmitted. No personal profiles are created.

The legal basis is Art. 6(1)(f) GDPR: we have an interest in understanding how the website is used and in improving it. You can object to this (see “Your rights”).

Cookies

This website does not set any cookies.

Fonts

The fonts are delivered by this website itself. No connection to font providers is made when you visit it.

External links

On the contact page we link to our address at Google Maps. The map is not embedded. Only when you click the link does Google Maps open in a new tab and you transfer data, such as your IP address, to Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. This may also involve a transfer to Google LLC in the USA. Google processes the data under its own responsibility; we have no influence on this. You can find Google’s privacy information at policies.google.com/privacy.

The legal basis is Art. 6(1)(f) GDPR: we have an interest in making it easy for you to find the way to us. You can object to this (see “Your rights”).

Your rights

You have the following rights against us as the controller:

• Access to the personal data we hold about you (Art. 15 GDPR)
• Rectification of inaccurate data (Art. 16 GDPR)
• Erasure of your data (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Objection to processing based on Art. 6(1)(f) GDPR (Art. 21 GDPR)
• Withdrawal of consent given, with effect for the future (Art. 7(3) GDPR)
• Lodging a complaint with a supervisory authority (Art. 77 GDPR)

To exercise your rights, a message to the e-mail address or postal address given above is sufficient.

Competent supervisory authority

The authority responsible for our company is:

Landesbeauftragte für den Datenschutz Sachsen-Anhalt (State Commissioner for Data Protection of Saxony-Anhalt)
Otto-von-Guericke-Straße 34a
39104 Magdeburg
Postal address: PO Box 1947, 39009 Magdeburg
Phone: +49 391 81803-0
Website: datenschutz.sachsen-anhalt.de