Privacy Policy

 

Last updated: August 2026

 

1. General information

 

The protection of your personal data is important to us. This Privacy Policy explains which personal data is processed when you visit our website, contact us or submit a request for quotation, the purposes for which the data is processed and the rights available to you.

 

Personal data means any information that can be used to identify a person directly or indirectly, such as a name, email address, telephone number, IP address or the content of an enquiry.

 

2. Data controller

 

The controller responsible for processing personal data on this website is:

 

Florian Christoph Kreuzer
Polígono 16, Parcela 115
07510 Sineu
Spain

 

Email: florian@kreuzer.es
Telephone: +34 611 420 799

 

3. Access to the website and server log data

 

When you access this website, your browser transmits technically necessary information to the web server. In particular, the following data may be processed:

 

  • IP address of the accessing device
  • Date and time of access
  • Page or file accessed
  • Amount of data transferred
  • Browser type and browser version
  • Operating system
  • Referrer URL
  • HTTP status code

 

This data is processed to provide the website securely and reliably, to analyse errors and to detect and prevent misuse. The legal basis is Article 6(1)(f) GDPR. Our legitimate interest lies in the secure, stable and economical operation of this website.

 

4. Contacting us

 

If you contact us by email, telephone, contact form or another available means of communication, we process the data you provide in order to handle your enquiry. This may include your name, email address, telephone number, message and any other information you provide voluntarily.

 

If your enquiry relates to a quotation, a potential order or an existing contract, processing is based on Article 6(1)(b) GDPR. General enquiries are processed on the basis of Article 6(1)(f) GDPR. Our legitimate interest lies in handling and responding to your enquiry.

 

5. Product catalogue and requests for quotation

 

On our website, you can select products and submit a non-binding request for quotation. We use WordPress, WooCommerce and a request-for-quotation extension to provide the product catalogue and quotation request function.

 

When you submit a request for quotation, the following data may be processed:

 

  • Name
  • Email address
  • Telephone number, if provided voluntarily
  • Company and address details, if provided
  • Selected products and quantities
  • Your message and further details relating to the enquiry
  • Technical connection data

 

The data is processed in order to prepare and handle a quotation and to take steps prior to entering into a contract. The legal basis is Article 6(1)(b) GDPR. Mandatory fields are required so that we can process and respond to your request. Without this information, the request for quotation may not be submitted or processed.

 

The website currently serves to submit non-binding requests for quotation. Submitting the quotation list does not in itself establish a purchase contract, service contract or contract for work.

 

6. Contact via WhatsApp

 

Our website provides a link that allows you to contact us via WhatsApp. When you click the WhatsApp button, you will be redirected to WhatsApp or to the WhatsApp application installed on your device.

 

If you contact us via WhatsApp, the data you transmit, particularly your telephone number, profile information, message, timestamp and any attachments, will be processed by WhatsApp and by us. WhatsApp’s own privacy policy also applies to processing carried out by WhatsApp.

 

The use of WhatsApp is voluntary. You can also contact us by email or telephone. Processing by us is carried out for the purpose of handling your enquiry in accordance with Article 6(1)(b) GDPR or Article 6(1)(f) GDPR.

 

6.1 Remote support and remote access

 

If you request remote support or technical remote diagnostics, we process the information required to examine and work on the system. This may include system and device data, serial numbers, configurations, error messages, log data, screenshots, photographs and the contact details you provide.

 

Remote access is only carried out following prior agreement and your express authorisation. Access is limited to the scope and period required for diagnostics, configuration or troubleshooting. Processing is carried out in order to take steps prior to entering into a contract or to perform an existing engagement on the basis of Article 6(1)(b) GDPR.

 

Please do not send passwords, private keys, API keys, recovery codes or other access credentials through the contact form, unencrypted email, WhatsApp or chat. If access is required, we will agree on an appropriate secure transfer method. Temporary credentials should be changed or disabled after the support session has been completed.

 

7. Cookies and similar technologies

 

This website may use cookies or similar technologies. Technically necessary cookies are used, for example, for language selection, session management, security, storage of a quotation list or the technically correct display of the website.

 

Technically necessary cookies are used on the basis of Article 6(1)(f) GDPR and the applicable provisions governing the storage of information on terminal devices.

 

Where technically unnecessary cookies, analytics tools, marketing services or similar technologies are used, this will generally only take place after you have given your express consent. The legal basis is Article 6(1)(a) GDPR. You may withdraw your consent at any time through the cookie settings with effect for the future.

 

You can also delete or block cookies using your browser settings. Disabling technically necessary cookies may restrict certain functions of the website.

 

7.1 Google Analytics

 

We use Google Analytics 4 to compile statistics about the use of this website. The provider for users in the European Economic Area is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

 

After you give consent, Google Analytics processes information including pages viewed, technical device and browser characteristics, approximate location, interactions and traffic source. Google states that IP addresses of users in the EU, Switzerland and the United Kingdom are discarded before logging and are not stored.

 

Processing takes place only after your consent on the basis of Article 6(1)(a) GDPR in conjunction with Article 22(2) LSSI. Complianz blocks the analytics script until the relevant consent has been given. You can change your choice at any time through “Manage consent” with effect for the future.

 

User- and event-level data is retained for no longer than 14 months according to the retention setting in Google Analytics; aggregated reports may remain available for longer. Processing outside the European Economic Area cannot be completely excluded and takes place under the applicable legal transfer mechanisms. Further information is available in Google’s Privacy Policy.

 

8. Legal bases for processing

 

We process personal data in particular on the basis of the following provisions:

 

  • Article 6(1)(a) GDPR: consent, for example for optional cookies or voluntary processing
  • Article 6(1)(b) GDPR: steps prior to entering into a contract and performance of a contract
  • Article 6(1)(c) GDPR: compliance with legal obligations
  • Article 6(1)(f) GDPR: legitimate interests, such as secure website operation, prevention of misuse and handling of general enquiries

 

9. Recipients and processors

 

We only disclose personal data where this is necessary for the purposes described above or required by law. Possible recipients or categories of recipients include:

 

  • Hosting and server service providers
  • Email and telecommunications service providers
  • IT, website and maintenance service providers
  • Tax advisers, legal advisers and other professional advisers
  • Suppliers, manufacturers, shipping or logistics service providers, where necessary for preparing a quotation or performing a contract
  • Banks and payment service providers, where required in connection with a subsequent contract
  • Authorities and public bodies where required by law

 

Service providers that process personal data on our behalf are contractually bound in accordance with applicable data protection requirements.

 

10. Transfers to third countries

 

When external services are used, particularly international communication or platform providers such as Google Analytics or WhatsApp, it cannot be ruled out that personal data may be processed outside the European Economic Area.

 

Where data is transferred to a third country, this will only take place in accordance with the legal requirements, for example on the basis of an adequacy decision, appropriate safeguards or standard contractual clauses approved by the European Commission. Further information can be found in the privacy policy of the respective provider.

 

11. Storage period

 

We store personal data only for as long as is necessary for the respective processing purpose or for as long as statutory retention and documentation obligations apply.

 

  • Server log data is stored only for as long as necessary for security, error analysis and prevention of misuse.
  • Contact enquiries and requests for quotation are stored for as long as necessary to process them and respond to possible follow-up questions.
  • Data relating to contractual relationships is stored in accordance with statutory tax, commercial and civil-law retention periods.
  • Data processed on the basis of consent is stored until consent is withdrawn, unless another legal basis or retention obligation applies.

 

Once the processing purpose no longer applies and statutory retention periods have expired, the data will be deleted or anonymised.

 

12. Your data protection rights

 

Subject to the applicable legal requirements, you have the following rights in particular:

 

  • Right of access to the personal data we process about you
  • Right to rectification of inaccurate or incomplete data
  • Right to erasure of your data
  • Right to restriction of processing
  • Right to data portability
  • Right to object to certain types of processing
  • Right to withdraw consent with effect for the future
  • Right not to be subject to a decision based solely on automated processing that produces legal effects or similarly significantly affects you

 

To exercise your rights, you may contact us using the contact details provided in Section 2. Exercising your rights is generally free of charge. To prevent unauthorised disclosure of information, we may request suitable proof of identity.

 

13. Right to lodge a complaint with a supervisory authority

 

You have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data infringes applicable data protection law.

 

The Spanish supervisory authority responsible for the controller is:

 

Agencia Española de Protección de Datos (AEPD)
www.aepd.es

 

14. SSL or TLS encryption

 

For security reasons, this website uses SSL or TLS encryption. You can usually recognise an encrypted connection by the use of “https://” in your browser’s address bar.

 

15. Automated decision-making

 

No decision-making based solely on automated processing, including profiling, that produces legal effects concerning you or similarly significantly affects you takes place through this website.

 

16. Changes to this Privacy Policy

 

We reserve the right to amend this Privacy Policy if legal requirements, the services used or the processing of personal data change. The version published on this website at the relevant time shall apply.