Privacy Policy

Controller

The controller for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

We are not legally required to appoint a data protection officer. For any privacy question, please write to the address above.

Overview: what this website does not do

So you can judge the scope of processing at a glance:

• There is no audience measurement, web analytics or user profiling.
• No tracking pixels, social media plugins or advertising networks are embedded.
• Fonts are served from our own server; there is no connection to Google Fonts.
• No consent-requiring cookies are set, which is why there is no cookie banner.
• Your data is not used for advertising and is never sold.

Hosting and server log files

This website is hosted by ALL-INKL.COM — Neue Medien Münnich, owner René Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany. The provider processes data on our behalf under a data processing agreement pursuant to Art. 28 GDPR.

When you open the website, the server automatically collects the data your browser transmits: IP address, date and time of access, the page requested, the volume of data transferred, the referrer URL, and browser and operating system details. This data is technically necessary to deliver the page and to keep it stable and secure.

The legal basis is Art. 6 (1) (f) GDPR; our legitimate interest lies in the secure and fault-free operation of the website. This data is not merged with any other data source.

This website also keeps an error log of its own. It records when a request led to a technical fault, including the address that was requested. IP addresses are not stored in this log. It serves fault-finding only; we delete it once it is no longer needed for that.

Contact form and email

If you write to us through the contact form, we process the details you enter — name, email address, optionally your company, the subject you select and your message — solely in order to handle your enquiry. The details are sent by email to our business address; they are not stored in any database on this website.

The legal basis is Art. 6 (1) (b) GDPR where your enquiry relates to entering into or performing a contract, and otherwise Art. 6 (1) (f) GDPR based on our legitimate interest in answering enquiries.

We keep your enquiry until it has been dealt with conclusively and no retention obligations prevent deletion; it is then erased. Statutory commercial and tax retention periods remain unaffected. To protect against automated submissions we limit how many messages one sender may submit. This applies to every form on this website and to signing in to our internal appointment overview. A keyed value is derived from your IP address and stored; the IP address itself is not stored. Values older than 24 hours are disregarded and are removed the next time an entry is written.

Job applications

You can apply to us by email from our careers page — either for an advertised position or on your own initiative. We process the data you send us yourself: your contact details, your CV, references and anything else you attach to your application.

The legal basis is Sect. 26 (1) BDSG in conjunction with Art. 6 (1) (b) GDPR: the processing is necessary for deciding whether to enter into an employment relationship. Where your application contains special categories of personal data — a disability, for instance — we process these on the basis of Art. 9 (2) (b) GDPR.

Your application is shared only within our company, with the people involved in the selection process. If we do not offer you a position, we delete your documents no later than six months after the process ends; that period exists so we can defend against possible claims under the German General Equal Treatment Act. If you would like us to keep your documents beyond that for future positions, you can give us your consent (Art. 6 (1) (a) GDPR), which you may withdraw at any time without giving reasons. If you are hired, your documents are transferred to your personnel file.

We do not pass your application to third parties or transfer it to a third country, and we use no automated decision-making, including profiling, in the application process.

Appointment booking for trade fairs

On our appointment page you can book a meeting at our trade-fair stand. For this we process your name and email address and, if you enter them, your company, phone number and what you would like to discuss. These details are stored in a file on our server so that a slot already taken cannot be booked twice; the file sits in a directory that the web server refuses to serve.

The legal basis is Art. 6 (1) (b) GDPR: the processing is necessary in order to hold the appointment you asked for.

You receive a confirmation by email containing a cancellation link. You can cancel the appointment yourself at any time through that link, which deletes your details immediately and completely. Otherwise we delete them automatically no later than 90 days after the event.

Your details are not passed to third parties, and no third-party calendar or booking tool is embedded in the page.

Cookies

This website sets one technically necessary session cookie, which protects the contact form against form abuse (CSRF protection) and is deleted when you close your browser. If you also choose a language or a display mode, we store that choice in two further cookies ('site_lang' and 'site_theme') with a lifetime of twelve months, so that it is still there on your next visit. These two cookies are only set after such a choice, not on merely opening a page. None of these cookies contains an identifier that would make you recognisable across websites, and no analysis of your behaviour takes place. You can delete the cookies in your browser at any time. The legal basis is Sect. 25 (2) no. 2 TDDDG in conjunction with Art. 6 (1) (f) GDPR. No consent is required for this.

Fonts and links to other websites

The typeface used is delivered from our own server. Visiting this website therefore establishes no connection to servers operated by Google or other font providers, and your IP address is not transmitted to them.

This website links to the websites of the companies within the Pacarada Group and to social media profiles. These are plain links; no provider content is loaded until you click one. Once you do, the privacy policy of the respective provider applies.

Your rights

You have the following rights regarding your personal data:

• Access to the data processed (Art. 15 GDPR)
• Rectification of inaccurate data (Art. 16 GDPR)
• Erasure (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Objection to processing based on legitimate interests (Art. 21 GDPR)

An informal message to the address given above is enough to exercise them.

Right to lodge a complaint

Without prejudice to any other remedy, you have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is:

Changes to this policy

We update this privacy policy whenever data processing on this website changes — for instance when new features are added. The version published here is the one that applies.

Version of this policy: 18 September 2026