Privacy Policy

1. Controller

The controller responsible for processing personal data on this website is:

Eduard Strek, Am Zeil 18, 73527 Schwäbisch Gmünd, Germany · Phone: +49 174 3513265 · Email: [email protected]

2. Hosting and content delivery network (Cloudflare)

This website is hosted by Cloudflare and delivered via Cloudflare's content delivery network (CDN). The provider is Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA. When you access the website, your requests are routed through Cloudflare's servers; Cloudflare processes in particular your IP address and the data listed under server log files in order to deliver the website and protect it against attacks.

The basis is our legitimate interest in providing our website securely, quickly and reliably (Art. 6(1)(f) GDPR). A data processing agreement (Art. 28 GDPR) is in place with Cloudflare. Data may be transferred to the USA. Cloudflare is certified under the EU-US Data Privacy Framework (Art. 45 GDPR); EU standard contractual clauses are used in addition. More information: https://www.cloudflare.com/privacypolicy/

3. Server log files

When you access this website, Cloudflare as hosting provider automatically collects information in so-called server log files that your browser transmits: browser type and version, operating system used, referrer URL, hostname of the accessing device, time of the server request and the IP address.

This data is not merged with other data sources and is not analysed by us. Processing is based on Art. 6(1)(f) GDPR for the technical provision and security of the website. Cloudflare stores the log files only as long as necessary for these purposes and deletes them afterwards.

4. SSL/TLS encryption

For security reasons and to protect the transmission of confidential content, such as your enquiries via the contact form, this website uses SSL/TLS encryption. You can recognise an encrypted connection by “https://” in your browser's address bar and the padlock icon. When encryption is active, the data you transmit cannot be read by third parties.

5. Contact form

When you send us an enquiry via the contact form, your details (name, email address, phone number and company where applicable, subject and message) are stored in order to process the enquiry and in case of follow-up questions.

The form is not sent via an external form service. Your details are transmitted to our own endpoint on this website, which is operated on Cloudflare (see section 2). There they are checked and delivered as an email to our mailbox via Zoho Mail (see section 7). Your details are not stored on the endpoint itself.

The legal basis is your consent (Art. 6(1)(a) GDPR) as well as our legitimate interest in answering your enquiry or the initiation of a contract (Art. 6(1)(b) and (f) GDPR). You may withdraw your consent at any time with effect for the future.

6. Spam protection with Cloudflare Turnstile

To protect our contact form against spam and automated requests, we use Cloudflare Turnstile. The provider is Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA. Turnstile is loaded only on the contact page and checks whether a request comes from a human or a bot.

For this purpose, Cloudflare processes in particular your IP address as well as technical information about your browser and device (e.g. browser type, language setting, screen properties) and signals about how the page is used. According to Cloudflare, Turnstile does not set cookies and does not use the data for advertising. The result of the check (a token) is transmitted to our endpoint together with your enquiry and verified there with Cloudflare.

The legal basis is our legitimate interest in protecting our contact form against misuse (Art. 6(1)(f) GDPR); access to information on your device is based on § 25(2) no. 2 TDDDG, as it is strictly necessary for sending the enquiry you requested. A data processing agreement (Art. 28 GDPR) is in place with Cloudflare. Cloudflare is certified under the EU-US Data Privacy Framework (Art. 45 GDPR). More information: https://www.cloudflare.com/turnstile-privacy-policy/

7. Contact by email (Zoho Mail)

If you contact us by email or an enquiry reaches us via the contact form, your details (email address, name, phone number where applicable and content of the message) are stored and processed in order to handle your enquiry.

We use Zoho Mail for our email communication. The provider is Zoho Corporation B.V., Beneluxlaan 4B, 3527 HS Utrecht, Netherlands. Your emails are stored on Zoho's servers in its EU data centre. A data processing agreement (Art. 28 GDPR) is in place with Zoho. More information: https://www.zoho.com/privacy.html

The legal basis is Art. 6(1)(b) GDPR where your enquiry relates to a contract or its initiation, and otherwise our legitimate interest in answering your enquiry (Art. 6(1)(f) GDPR). Your data is deleted as soon as it is no longer required for handling your enquiry and no statutory retention obligations apply.

8. Fonts (self-hosted)

This website uses only locally embedded fonts. There is no connection to third-party servers (e.g. Google Fonts); your IP address is not transmitted to third parties.

9. Cookies, local storage & tracking

This website does not use cookies and does not embed any third-party advertising or analytics services. No user tracking takes place.

The only exception is the concept demo “PULS. Studio” (/demos/fitness/): it stores the entry “puls_seen” in your browser's session storage (sessionStorage) so that the intro animation plays only once per session. The entry contains no personal data, is not transmitted to us or any third party and is deleted automatically when you close the tab. Storage is based on § 25(2) no. 2 TDDDG (German Telecommunications Digital Services Data Protection Act), as it is necessary to display the demo you requested.

10. Your rights

Within the framework of the applicable statutory provisions, you have the following rights at any time:

• Access to the data stored about you (Art. 15 GDPR)
• Rectification of inaccurate data (Art. 16 GDPR)
• Erasure of your data (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Objection to processing (Art. 21 GDPR)
• Withdrawal of consent with effect for the future
• Lodging a complaint with a data protection supervisory authority (Art. 77 GDPR)

The competent supervisory authority is: Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg, Lautenschlagerstraße 20, 70173 Stuttgart, Germany.

12. Currency of this policy

This privacy policy will be updated as soon as the legal situation or the services used on this website change.