Privacy policy

 

1. Controller
Die Messers GmbH, Neuenhaus 27A, 42929 Wermelskirchen, Germany
Email: info@die-messers.com • Phone: +49 173 1545739
Further mandatory information: see Legal Notice (Imprint).

2. General information on data processing
We process personal data only to the extent necessary to provide our website, content, and services. Legal bases: Art. 6(1)(a), (b), (f) GDPR. Recipients may include processors (e.g., hosting, CDN, consent tool). Transfers to third countries are based on adequacy decisions (in particular Israel) or the EU Standard Contractual Clauses.

3. Hosting, CDN & website provider
This website is provided and delivered via a website provider with a content delivery network. Technically necessary log data are processed (e.g., IP address, date/time, URL, referrer, user agent, status codes).
Legal basis: legitimate interest in secure, efficient operation (Art. 6(1)(f) GDPR).
Recipient: Wix.com Ltd., 40 Namal Tel Aviv St., Tel Aviv 6350671, Israel, as well as affiliated companies/sub-processors pursuant to Art. 28 GDPR.
Third-country transfer: Israel (EU adequacy decision); further international processing via Standard Contractual Clauses.
Storage period: log files generally 7–30 days; longer retention only in case of security incidents.

4. Consent management (cookie banner)
We use a consent tool to manage and document your consents for cookies/similar technologies. The tool sets technically necessary cookies to store your choices.
Legal basis: consent for services requiring consent (Art. 6(1)(a)), legitimate interest in compliant consent management (Art. 6(1)(f)).
Service provider: Wix.com Ltd. (see above).
Withdrawal: You can change your settings at any time via the “Cookie settings” link in the footer.

5. Contact (form/email)
When you contact us, we process the data you provide (e.g., name, email, message).
Purpose/legal basis: handling your request, pre-contractual/contractual communication (Art. 6(1)(b)), or our legitimate interest in efficient communication (Art. 6(1)(f)).
Storage period: until your request has been fully processed; statutory retention obligations remain unaffected.

6. Protection against abuse: Google reCAPTCHA
To protect our forms, we use Google reCAPTCHA (Google Ireland Ltd.; where applicable Google LLC/USA). The service analyzes interactions (including IP address, mouse movements, time spent) to detect bots.
Legal basis: consent via the cookie banner (Art. 6(1)(a)). Without consent, form functions may be limited.
Third-country transfer: USA; safeguarded by Standard Contractual Clauses.
Further information: https://policies.google.com/privacy

7. Embedded content (YouTube, Instagram, Facebook)
We embed content from the following providers:
– YouTube (Google Ireland Ltd./Google LLC, USA) – preferably in “enhanced privacy mode.”
– Instagram and Facebook (Meta Platforms Ireland Ltd./Meta Platforms, Inc., USA).
When loading, personal data (especially IP address) may be transmitted to the providers and cookies may be set.
Legal basis: consent (Art. 6(1)(a)) via the cookie banner (category “Marketing/External media”).
Third-country transfer: where applicable to the USA; safeguarded by Standard Contractual Clauses.
Withdrawal: possible at any time via cookie settings.
Info: Google/YouTube https://policies.google.com/privacy • Meta https://www.facebook.com/privacy/policy

8. Web fonts (provided via CDN)
For consistent display we use web fonts provided via our website provider’s CDN; transmitting your IP address is technically necessary for this.
Legal basis: consent (Art. 6(1)(a)), unless fonts are hosted locally.
Recipient: the website provider’s infrastructure (see no. 3); any third-country transfers as described there.

9. Cookies & similar technologies – overview
Essential cookies: for core functions (security, consent, hosting/CDN). Legal basis: Art. 6(1)(f).
Functional/marketing/external media: only with consent (Art. 6(1)(a)).
Specific providers, purposes, and storage periods can be viewed in the cookie settings.

10. Minors
Our services are not directed at children under 16. In this case, consent must be given by legal guardians.

11. Your rights
You have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20), and to object to processing based on Art. 6(1)(f) (Art. 21).
Consent may be withdrawn at any time with effect for the future (Art. 7(3)).
You may lodge a complaint with the competent supervisory authority, e.g., LDI NRW: https://www.ldi.nrw.de/

12. Security
TLS/HTTPS and appropriate technical and organizational measures protect your data.

13. Updates
We update this notice when services, legal requirements, or technologies change. The current version can always be found on this page.