1. Data protection at a glance
General information
The following information provides a brief overview of what happens to your personal data when you visit this website. Personal data means any data that can be used to identify you personally. For detailed information about data protection, please refer to our privacy policy below.
Data collection on this website
Who is responsible for data collection on this website?
Data on this website is processed by the website operator. You can find their contact details in the ‘Information about the controller’ section of this privacy policy.
How do we collect your data?
Some data is collected when you provide it to us. This may include, for example, information you enter into a contact form.
Technical data, such as your internet browser, operating system, IP address or the time of your visit, is processed automatically when you access the website to deliver its content and protect its operation.
What do we use your data for?
Technical data is used to provide and secure the website. We use information from contact and project enquiries to process your request and prepare a possible proposal. The website code does not include services for analysing your behaviour on a personally identifiable basis.
What rights do you have regarding your data?
You have the right at any time to obtain information free of charge about the source, recipients and purpose of your stored personal data. You also have the right to request its rectification or erasure. If you have consented to data processing, you may withdraw that consent at any time with effect for the future. In certain circumstances, you also have the right to request restriction of the processing of your personal data. You further have the right to lodge a complaint with the competent supervisory authority.
You can contact us at any time about this or any other data protection questions.
2. Hosting
We host the content of our website with the following provider:
Hostinger
The provider is Hostinger International Ltd., 61 Lordou Vironos Street, 6023 Larnaca, Cyprus (referred to below as Hostinger). For details, please see Hostinger’s privacy policy: https://www.hostinger.com/legal/privacy-policy.
The website is delivered from Hostinger servers in Frankfurt am Main, Germany. The mailbox that enquiries are forwarded to is also hosted by Hostinger. Our use of Hostinger is based on Article 6(1)(f) GDPR. Our legitimate interest is the reliable and secure provision of this website.
Data processing agreement
We have concluded a data processing agreement for use of the service named above. This agreement is required under data protection law and ensures that the provider processes the personal data of our website visitors only on our instructions and in compliance with the GDPR.
3. General information and mandatory disclosures
Data protection
The operators of this website take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with statutory data protection requirements and this privacy policy.
Various personal data is collected when you use this website. Personal data means data that can be used to identify you personally. This privacy policy explains which data we collect, what we use it for, and how and for what purpose it is processed.
Please note that transmitting data over the internet, for example when communicating by email, may involve security vulnerabilities. Complete protection of data against access by third parties is not possible.
Information about the controller
The controller responsible for data processing on this website is:
Prephacy Web Services GbR
Julius Bruch
c/o POSTFLEX PFX-114-449
Emsdettener Straße 10
48268 Greven
represented by Julius Bruch and Hjalmar Puscher
Email: info@prephacy.com
The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data, such as names, email addresses or similar information.
Retention period
Unless a more specific retention period is stated in this privacy policy, we retain your personal data until the purpose for processing it no longer applies. If you make a valid request for erasure or withdraw your consent to data processing, your data will be erased unless we have other legally permissible grounds for retaining it, such as retention periods under tax or commercial law. In the latter case, the data will be erased once those grounds no longer apply.
General information about the legal bases for data processing on this website
If you have consented to data processing, we process your personal data on the basis of Article 6(1)(a) GDPR or Article 9(2)(a) GDPR where special categories of personal data under Article 9(1) GDPR are processed. If you expressly consent to the transfer of personal data to third countries, processing is also based on Article 49(1)(a) GDPR. If you have consented to the storage of cookies or access to information on your device, for example through device fingerprinting, processing is additionally based on section 25(1) of the German Telecommunications Digital Services Data Protection Act (TDDDG). Consent may be withdrawn at any time. If your data is necessary to perform a contract or take pre-contractual steps, we process it on the basis of Article 6(1)(b) GDPR. We also process data on the basis of Article 6(1)(c) GDPR where this is necessary to fulfil a legal obligation. Processing may further be based on our legitimate interest under Article 6(1)(f) GDPR. The following sections of this privacy policy explain the legal bases applicable in each case.
Recipients of personal data
We work with various external parties in the course of our business. This sometimes requires the transfer of personal data to those parties. We disclose personal data to external parties only where this is necessary to perform a contract, where we are legally required to do so, for example when providing data to tax authorities, where we have a legitimate interest in disclosure under Article 6(1)(f) GDPR, or where another legal basis permits disclosure. When using processors, we disclose our customers’ personal data only on the basis of a valid data processing agreement. In cases of joint processing, a joint controllership agreement is concluded.
Withdrawal of your consent to data processing
Many processing operations are possible only with your express consent. You may withdraw consent you have already given at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.
Right to object to data collection in particular cases and to direct marketing (Article 21 GDPR)
WHERE DATA IS PROCESSED ON THE BASIS OF ARTICLE 6(1)(E) OR (F) GDPR, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION. THIS ALSO APPLIES TO PROFILING BASED ON THOSE PROVISIONS. THE LEGAL BASIS FOR EACH PROCESSING OPERATION IS SET OUT IN THIS PRIVACY POLICY. IF YOU OBJECT, WE WILL NO LONGER PROCESS THE PERSONAL DATA CONCERNED UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS THAT OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS, OR THE PROCESSING IS FOR THE ESTABLISHMENT, EXERCISE OR DEFENCE OF LEGAL CLAIMS (OBJECTION UNDER ARTICLE 21(1) GDPR).
IF YOUR PERSONAL DATA IS PROCESSED FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA FOR SUCH MARKETING. THIS ALSO APPLIES TO PROFILING TO THE EXTENT THAT IT IS RELATED TO DIRECT MARKETING. IF YOU OBJECT, YOUR PERSONAL DATA WILL NO LONGER BE USED FOR DIRECT MARKETING PURPOSES (OBJECTION UNDER ARTICLE 21(2) GDPR).
Right to lodge a complaint with the competent supervisory authority
In the event of a GDPR infringement, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, place of work or the place of the alleged infringement. This right is without prejudice to any other administrative or judicial remedy.
Right to data portability
You have the right to receive data that we process by automated means on the basis of your consent or in performance of a contract, either yourself or through a third party, in a commonly used, machine-readable format. If you request that data be transferred directly to another controller, this will be done only where technically feasible.
Access, rectification and erasure
Within the applicable statutory provisions, you have the right at any time to obtain information free of charge about your stored personal data, its source and recipients, and the purpose of processing, and where applicable a right to rectification or erasure. You may contact us at any time about this or any other questions concerning personal data.
Right to restriction of processing
You have the right to request restriction of the processing of your personal data. You may contact us at any time to do so. The right to restriction applies in the following cases:
- If you contest the accuracy of the personal data we hold about you, we generally need time to verify it. While we carry out that verification, you have the right to request restriction of the processing of your personal data.
- If your personal data has been or is being processed unlawfully, you may request restriction of processing instead of erasure.
- If we no longer need your personal data but you require it to establish, exercise or defend legal claims, you have the right to request restriction of processing instead of erasure.
- If you have objected under Article 21(1) GDPR, your interests must be balanced against ours. Until it has been determined whose interests prevail, you have the right to request restriction of the processing of your personal data.
Where processing of your personal data has been restricted, that data may, apart from storage, be processed only with your consent, for the establishment, exercise or defence of legal claims, to protect the rights of another natural or legal person, or for reasons of important public interest of the European Union or a Member State.
4. Data collection on this website
Cookies, fonts and external links
The website code does not set cookies or include analytics or tracking services. Fonts are loaded locally from our server; no connection to Google Fonts is made when loading them. External services, such as our social media profiles, are included as links. Only when you open such a link do you access the respective provider’s service, which is subject to that provider’s own data processing.
Server logs
When you access the website, the hosting provider processes technical connection data. This may include your IP address, the date and time, the requested address, HTTP status, amount of data transferred, browser, operating system and previously visited page (referrer). Processing serves to deliver the website, analyse errors and protect its operation. The legal basis is Article 6(1)(f) GDPR; our legitimate interest is reliable and secure operation.
Server logs and backups are retained in accordance with Hostinger’s policies only for as long as necessary for secure operation, error analysis and recovery. Further information is available in the Hostinger privacy policy. These logs are separate from the enquiry form’s abuse prevention mechanism described below.
Contact by email and enquiry form
When you submit the enquiry form, your information is transmitted over HTTPS to our server at Hostinger International Ltd. and forwarded to us by email. We process the contact and project information you provide, your name, email address, message and preferred reply channel, and your confirmation of the privacy information, to handle your enquiry. You may optionally provide a phone number and attach up to three files (PNG, JPG, WebP or PDF). Attachments are only sent to us by email and are not stored on the web server. Where your enquiry concerns a contract, the legal basis is Article 6(1)(b) GDPR. For other enquiries, processing is based on Article 6(1)(f) GDPR and our legitimate interest in responding to incoming requests. Required fields are marked in the form; without them, the enquiry cannot be submitted through the form. Submission does not place an order. Data is erased once it is no longer needed to process the enquiry or pursue a possible contract, provided no statutory retention obligations prevent erasure.
To prevent mass submissions, the form handler creates a SHA-256 hash of your IP address and stores it on the server together with request timestamps. This is a pseudonymous identifier, not guaranteed anonymisation. Only timestamps from the last hour are evaluated for rate limiting. Older entries are cleaned up when the form endpoint is called again; without a further call, files may remain for longer. The legal basis is Article 6(1)(f) GDPR; our legitimate interest is protecting our form against abuse.
Contact via WhatsApp
If you contact us through a WhatsApp link or request a WhatsApp reply in the enquiry form, we process your phone number and the content of the communication to handle your enquiry. For enquiries relating to a contract, the legal basis is Article 6(1)(b) GDPR. For other enquiries, it is Article 6(1)(f) GDPR and our legitimate interest in responding through your preferred channel. WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, is responsible for WhatsApp. WhatsApp also processes data for its own purposes; this may involve transfers to third countries, particularly the United States. Further information is available in the WhatsApp privacy policy. The retention criteria for enquiries set out above apply to our storage of correspondence. You can also contact us by email or through the enquiry form.
Source: https://www.e-recht24.de
Last updated: October 2026