Privacy Policy

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

2. Collection and Processing of Personal Data

We only collect personal data when you send us an inquiry via the contact form. The following data is collected:

• Name
• Phone number
• Email address
• Company name
• Subject and content of inquiry

No further collection, storage or processing of personal data takes place on this website in connection with contacting us. We do not use cookie-based tracking or analytics tools that build personal or cross-device profiles. For anonymous traffic measurement, we use only the self-hosted, cookie-less analytics service Umami — see Section 3.

3. Web Analytics (Umami)

We use the open-source web analytics service Umami on our website to statistically evaluate how our website is used and to continuously improve our offering. Umami runs exclusively on our own server (umami.ehg-steinberg.de); no data is transmitted to third parties or to servers outside the EU.

Umami operates without cookies and without persistent, personal identifiers. Only anonymous, aggregated usage data is collected, such as pages viewed, referrer, browser type, screen resolution, language setting and — derived from the IP address, which is not itself stored — the approximate country of origin. This does not allow conclusions to be drawn about individual people, and no individual user profiles are created.

Because no cookies are set and no information is stored on or read from your device, no separate consent is required. The legal basis for this processing is our legitimate interest in the needs-based design and optimization of our website pursuant to Art. 6(1)(f) GDPR.

4. Purpose of Data Processing

The data you provide will be used exclusively to process your inquiry. It will not be passed on to third parties.

5. Legal Basis

Processing of the data from the contact form is carried out on the basis of Art. 6(1)(b) GDPR where your inquiry relates to the performance of a contract or pre-contractual measures. In all other cases, processing is based on our legitimate interest in handling customer inquiries pursuant to Art. 6(1)(f) GDPR. For the legal basis of the web analytics, see Section 3.

6. Retention Period

Your data will be deleted as soon as it is no longer required for the purpose for which it was collected. This is generally the case once the relevant inquiry has been fully processed, unless statutory retention obligations apply.

7. Your Rights

You have the following rights regarding your personal data:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to object to processing (Art. 21 GDPR)
• Right to data portability (Art. 20 GDPR)

To exercise your rights, please contact us at the address above.

8. Right to Lodge a Complaint

You have the right to lodge a complaint with a data protection supervisory authority regarding the processing of your personal data. The competent authority is:

9. Up-to-date Nature of this Privacy Policy

This privacy policy is currently valid and was last updated: September 2026.