Privacy Policy
The German version is legally binding — see Datenschutzerklärung.
1. Controller
The controller for data processing on this website is:
Plattenbrand GmbHGraf-Vieregg-Straße 2, 82327 Tutzing, Germany
Email: info@plattenbrand.de
2. Principle
This website is built as a static, cookieless site. We use no analytics or marketing cookies, no Google Analytics, no social-media plugins and no advertising trackers. For reach measurement we use only a self-hosted, cookieless statistics tool that collects no personal data on this website (see section 6). We process personal data only to the technically necessary extent (delivering the site, protection against misuse) and when you actively send us data via the contact form.
3. Hosting & server log files
This website is hosted with Cloudflare (Cloudflare, Inc., USA, and Cloudflare Germany GmbH). When the site is accessed, the provider automatically processes technically necessary access data (incl. IP address, date/time, requested resource, referrer, user agent) in order to deliver the site and ensure security (defence against attacks). The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in secure, trouble-free provision). A data processing agreement (Art. 28 GDPR) is in place with Cloudflare; transfers to the USA are based on the EU-US Data Privacy Framework or EU standard contractual clauses. Log files are stored only briefly and then deleted.
4. Contact form
When you send us a request via the form, we process the data you provide (e.g. name, company, email address, existing website, industry, project description, preferred timeframe) to handle your request and provide the requested service. The legal basis is Art. 6 (1) (b) GDPR (initiation/performance of a contract) or Art. 6 (1) (f) GDPR (legitimate interest in answering enquiries). We delete the data as soon as it is no longer required for the purpose and no statutory retention periods apply.
4a. File upload for customer projects
For ongoing enquiries and projects we provide a personal file upload, reachable only via an individual link (images, logos, PDF documents for your website). We process the uploaded files, your optional note and the usage-rights confirmation solely to build and maintain your website. The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures / performance of a contract). Files are stored on our own servers in Germany and deleted as soon as they are no longer needed for the project — at the latest six months after a project does not go ahead, and earlier on request (contact details in section 1).
5. Fonts
The fonts used are delivered locally from our own server (self-hosting). There is no connection to Google Fonts or other external font services; no data is transferred to third parties for this purpose.
6. Reach measurement (Umami, self-hosted)
For statistical analysis of how this website is used, we employ the open-source software Umami, which we host ourselves on our own servers in Germany (data centre of Hetzner Online GmbH). No data is passed on to third parties. Umami works without cookies and without persistent identifiers: it records, among other things, pages visited, referrers, browser and device type and the approximate country of origin. In addition, it records anonymous events about how the site is used — such as clicks on buttons and on phone and email links, the start and abandonment of the contact form, and the scroll depth reached. Only field names, counts, positions and a coarse time band (under 3 seconds, 3 to 10 seconds, or longer) are transmitted, never your entries. The IP address is not stored; it is only used transiently to derive a daily-rotating, anonymous identifier — it cannot be linked to a person, and no cross-site profiles are created. The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in analysing and improving our services). Since no information is stored on or read from your device, no consent is required under § 25 TDDDG.
Exception — preview pages for recipients of our letters: the above applies to plattenbrand.de. In addition, we run preview and demo pages (addresses under demo.plattenbrand.de) that we show to individual recipients of our letters. The personal link in the letter contains an identifier belonging to that one recipient, so use of these preview pages can be attributed to the respective recipient: we can see whether a recipient has looked at their preview. The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in measuring the success of our offer to this particular recipient). You can object at any time without any formality; a short message to info@plattenbrand.de is enough.
7. Cookies
This website uses no analytics or marketing cookies. The reach measurement we use (section 6) also works without cookies. Where technically strictly necessary cookies are used, this is based on § 25 (2) TDDDG (technically required) or Art. 6 (1) (f) GDPR. A cookie banner is therefore not required.
8. Letter campaign (postal advertising)
We write to selected companies by post and prepare a non-binding preview of their future website for that purpose. The following information also serves as the notice required by Art. 14 GDPR for data we did not obtain from you yourself.
Source of the data: exclusively publicly accessible sources — the company's own website including its legal notice, plus trade directories and the commercial register.
Data processed: company and contact details (company name, postal address, contact person where applicable) and information about the existing web presence.
Purpose: contacting business customers by post and creating the website preview.
Success measurement: the letter contains a personal link (QR code or short address) to our response page. When a recipient opens the response page via that link, the identifier it contains lets us see that the letter arrived and was opened. Only this identifier is transmitted; nothing is stored on your device. The legal basis is likewise Art. 6 (1) (f) GDPR (legitimate interest in measuring the success of our direct marketing).
Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in direct marketing towards businesses, cf. recital 47).
Recipients: we use the printing service provider LetterXpress to print and dispatch the letters; it processes the necessary data on our behalf (processing agreement under Art. 28 GDPR).
Storage period: if there is no response to our letter, we reduce the data after 36 months at the latest to a minimal record — just enough so that we do not write to the same company again — and delete the remaining details.
Right to object (Art. 21 GDPR): you can object to processing for advertising purposes at any time. An informal message to info@plattenbrand.de is enough; after that we will not approach you again.
9. Your rights
Under the GDPR you have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and a right to object (Art. 21). You can revoke any consent given at any time with effect for the future. You also have the right to lodge a complaint with a data protection supervisory authority — the authority responsible for us is the Bavarian State Office for Data Protection Supervision (BayLDA), Ansbach.
10. Changes
We adapt this privacy policy whenever the legal situation or the processing changes. The current version published here applies.