Privacy Policy (GDPR, TDDDG)

1. General information and mandatory disclosures

1.1 Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

Oliver W. Storz
Nußbaumweg 47
71720 Oberstenfeld
Germany
Email: datenschutz@ows-pipes.de

1.2 Data Protection Officer

No Data Protection Officer has been appointed, as there is currently no legal obligation to do so under Article 37 GDPR given the current scope of the website. If you have any questions about data protection or want to exercise your rights, you can contact the controller at datenschutz@ows-pipes.de at any time.

1.3 Legal bases

I process personal data only when there is a legal basis. Relevant legal bases include in particular:

Article 6(1)(b) GDPR (pre-contractual measures when you make an enquiry about a pipe)
Article 6(1)(f) GDPR (legitimate interests, e.g., secure operation of the website, IT security)
Article 6(1)(a) GDPR (consent, only if truly voluntary and not strictly necessary)

Cookies and comparable technologies are additionally assessed under Section 25 TDDDG.

1.4 Recipients, processors

I use service providers that process data on my behalf (processors under Article 28 GDPR). This applies in particular to hosting.

1.5 General storage period

I store personal data only for as long as necessary for the purpose or as required by law.

1.6 TLS encryption

This website uses TLS encryption (HTTPS) so that data is protected during transmission.

2. Data collection on this website

2.1 Cookies

2.1.1 PHPSESSID (technically necessary session cookie)

A technically necessary session cookie (e.g. PHPSESSID) is used for the contact form so that the session functions reliably (e.g. form state, technical protection mechanisms).

Legal basis under GDPR: Article 6(1)(f) GDPR (technically necessary operation and protection against misuse)
Legal basis under TDDDG: Section 25(2) TDDDG (technically necessary for the service explicitly requested)
Storage period: End of the session or after browser logout/session timeout.

2.2 Server log files

2.2.1 Web server logs in the customer account (KAS)

The option to create and store regular web server log files in the ALL-INKL customer account is disabled. This means I do not store regular web server logs in my account.

2.2.2 Administrative security logs by ALL-INKL

Regardless of this, ALL-INKL logs access administratively with the full IP address in order to detect and defend against cyberattacks. I do not have access to these logs. According to ALL-INKL, this data is deleted no later than after 7 days.

Purposes: IT security, prevention of misuse, stability
Legal basis: Article 6(1)(f) GDPR (legitimate interest in security and defence against attacks)

3. Hosting

3.1 Hosting by ALL-INKL

This website is hosted by ALL-INKL. In doing so, ALL-INKL processes personal data that arises during the operation of a website (e.g. IP address for access, technical metadata, content of enquiries as part of technical provision).

Legal basis: Article 6(1)(f) GDPR (secure, efficient operation)
Processing: A data processing agreement (Article 28 GDPR) has been concluded with ALL-INKL.

4. Contact

4.1 Contact form

If you contact me via the contact form, I process the data you enter (e.g. name, email address, message, optional phone number) in order to process and respond to your enquiry.

Purposes: Processing and answering your enquiry, follow-up questions, communication
Legal basis: Article 6(1)(b) GDPR (pre-contractual measures based on your enquiry)
Storage period: until the enquiry has been completed. After that, I store data only if this is necessary to provide evidence/defend against claims or if the enquiry results in further cooperation. In practice, this often means: deletion as soon as no longer necessary, otherwise retention within the scope of usual limitation periods.

Note on the mandatory checkbox in the form

To submit the contact form, a mandatory checkbox is provided: "I have read the Privacy Policy." The processing of your details to handle your enquiry is based on Article 6(1)(b) GDPR and is permitted even without consent.

5. Analytics tools and advertising

I do not use any analytics tools (analytics/tracking) and do not use any advertising services.

6. Plugins and tools

6.1 Google Fonts (local)

Google Fonts are installed locally on the server. This means that no connection to Google servers is established to load fonts when you access the site.

Legal basis: Article 6(1)(f) GDPR (consistent, appealing presentation of the website)

6.2 Links to Facebook and Instagram (Meta)

This website contains only links to Facebook and Instagram. When you click a link, you leave this website. From that point on, Meta processes personal data under its own responsibility in accordance with its rules.

Legal basis for linking: Article 6(1)(f) GDPR (legitimate interest in public presence and communication)

Third-country transfer: With Meta, processing in the USA cannot be ruled out. Meta Platforms, Inc. is certified under the EU-US Data Privacy Framework.

7. Recipients of data

Recipients may include:

ALL-INKL (hosting, technical security logs) as a processor
Meta, if applicable (Facebook/Instagram) only if you actively click the links

8. Your rights

You have the following rights under the GDPR:

Right of access (Article 15 GDPR)
Right to rectification (Article 16 GDPR)
Right to erasure (Article 17 GDPR)
Right to restriction of processing (Article 18 GDPR)
Right to data portability (Article 20 GDPR)
Right to object to processing based on Article 6(1)(f) GDPR (Article 21 GDPR)
Right to withdraw consent (Article 7(3) GDPR), if you have given consent

To exercise your rights, simply send an email to datenschutz@ows-pipes.de.

9. Right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint with a data protection supervisory authority. The competent authority for Baden-Württemberg is the State Commissioner for Data Protection and Freedom of Information Baden-Württemberg (LfDI BW):

Postal address: P.O. Box 10 29 32, 70025 Stuttgart
Phone: +49 711 615541-0
Email: poststelle@lfdi.bwl.de

10. Changes to this Privacy Policy

I will update this Privacy Policy if the website changes technically or in terms of content, or if legal requirements change.

Effective date: October 2025