Privacy policy

1. Controller

For full company details, see the legal notice.

2. The short version

• No cookies and no comparable storage technologies are used.
• We use Cloudflare Web Analytics for reach measurement — a cookieless, privacy-first service: it sets no cookies, stores no personal data and does not identify individual visitors. No advertising or cross-site tracking tools are embedded.
• The only external request is the Cloudflare Web Analytics beacon described in section 4. There is no Google Fonts, no Google Analytics, no social-media pixel and no embedded video.
• The WhatsApp, Telegram and Zalo icons on this website are local graphics, not embedded widgets. Nothing at all is transmitted to those services until you actively click one.
• No user accounts, no newsletter, no contact forms: we only receive personal data when you choose to write or call us.

3. Server log files

When you open a page, our hosting provider's servers automatically record technical data that your browser transmits. This typically includes:

• the IP address of the requesting device,
• date and time of access,
• the page or file requested and the amount of data transferred,
• the browser type and version, and the operating system,
• the referring page, if you followed a link.

Purpose: delivering the website, ensuring technical stability and security, and defending against attacks and misuse.
Legal basis: Art. 6(1)(f) GDPR — our legitimate interest in operating a secure, functional website.
Retention: log data are kept only as long as needed for security and troubleshooting and are deleted or anonymised shortly afterwards, normally within days to a few weeks.

4. Web analytics

For anonymous reach measurement we use Cloudflare Web Analytics. It is a cookieless service operated by Cloudflare, Inc.: no cookie is set, no personal data is stored, no visitor is identified and no data is used for advertising. Only aggregated statistics are produced, from which no individual can be identified. The legal basis is our legitimate interest in understanding how our website is used (Art. 6(1)(f) GDPR). Cloudflare acts as our processor.

5. Contacting us

If you contact us by email, WhatsApp, Telegram, Zalo or telephone, we process the data you provide — typically your name, company, country, contact details and the content of your message — in order to answer your enquiry and, where applicable, to prepare an offer and process an order.

Legal basis: Art. 6(1)(b) GDPR (performance of a contract or steps prior to entering a contract) and Art. 6(1)(f) GDPR (legitimate interest in responding to business enquiries).
Retention: we keep enquiry data as long as necessary to handle the matter, and beyond that only as long as statutory retention obligations require (for business and tax records). Data that is no longer required is deleted.

Please do not send us credentials, payment card data or other sensitive information through chat or email.

6. External services you reach by clicking

Our contact buttons are simple links. When you click one, your browser opens the respective service, and from that moment on data is processed under that provider's own terms — including, depending on the service and your location, transfer of data outside the European Economic Area. We have no influence on that processing and receive only the messages you decide to send us.

Please read the privacy policies of those providers before using them if you have concerns about data transfer to third countries. If you prefer to avoid this entirely, simply use the email address above — it is delivered to our own mailbox.

7. Recipients and processors

We do not sell personal data and we do not pass it on for advertising. Data may be processed on our behalf by:

• Hosting: Cloudflare, Inc. / Cloudflare Germany GmbH — the website is served through Cloudflare's content delivery network, which processes connection data as a processor under Art. 28 GDPR;
• IT and communication service providers that operate our email and messaging systems;
• Advisors and authorities, where we are legally obliged or entitled to disclose data.

8. Transfers to third countries

Our hosting and messaging infrastructure may involve processing outside the EU/EEA, in particular in the United States and in Asia. Where a transfer takes place, it is based on an adequacy decision of the European Commission (for example the EU–US Data Privacy Framework for certified US recipients) or on the European Commission's Standard Contractual Clauses together with additional technical and organisational safeguards.

9. Your rights

Under the GDPR you have the right to:

• obtain access to the personal data we hold about you (Art. 15),
• have inaccurate data corrected (Art. 16),
• have data erased (Art. 17),
• restrict processing (Art. 18),
• receive your data in a portable format (Art. 20),
• object to processing based on legitimate interests (Art. 21),
• withdraw any consent you have given, with effect for the future (Art. 7(3)),
• lodge a complaint with a supervisory authority (Art. 77) — in the EU member state of your residence, place of work or the place of the alleged infringement.

To exercise any of these rights, write to [email protected].

10. Security

This website is delivered over HTTPS (TLS), so data transmitted between your browser and our server is encrypted. Access to enquiry data is limited to the staff who need it to answer you, and our systems are protected against unauthorised access. No transmission over the internet can be guaranteed to be completely secure, however.

10. Automated decisions and profiling

We do not use automated decision-making, including profiling, that produces legal effects or significantly affects you.

11. Changes to this policy

We update this policy when our processing changes or the legal situation requires it. The version published on this page at the time of your visit applies. The date of the last update is shown below.

Related

Legal notice · Datenschutzerklärung (Deutsch)

Last updated: 25 September 2026