Privacy Policy

Responsible Entity

The responsible entity within the meaning of data protection laws, in particular the EU General Data Protection Regulation (GDPR), is:

Pressta-Eisele GmbH
Bergstraße 9
D-56859 Bullay

Telefon: +49 6542 9362-0
Email: info@pressta-eisele.de

Managing Directors: Thomas Berg, Jan Hunke
Commercial Register: HRB 3224, Koblenz
VAT ID: DE 149277438

External Data Protection Officer

Our external data protection officer is:

Alexander Schulz
KARST IT GmbH
Email: A.Schulz@karst-it.de
Phone: +49 2632 9459-0

Your Rights as a Data Subject

You can exercise the following rights at any time using the contact details of our external data protection officer:

• Information about your data stored by us and its processing
• Correction of inaccurate personal data
• Deletion of your data stored by us
• Restriction of data processing, if we are not yet allowed to delete your data due to legal obligations
• Objection to the processing of your data by us
• Data portability, if you have consented to data processing or have concluded a contract with us

If you have given us consent, you can revoke it at any time with effect for the future.

You can contact the supervisory authority responsible for you at any time with a complaint. Your competent supervisory authority depends on the federal state of your residence, your work or the alleged violation. A list of supervisory authorities (for the non-public sector) with addresses can be found at: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html

Purposes of Data Processing by the Responsible Party and Third Parties

We only process your personal data for the purposes stated in this privacy policy. Your personal data will not be transmitted to third parties for purposes other than those stated. We only share your personal data with third parties if:

• You have given your express consent
• Processing is necessary for the execution of a contract with you
• Processing is necessary to fulfill a legal obligation
• Processing is necessary to protect legitimate interests and there is no reason to assume that you have an overriding interest worthy of protection in not disclosing your data

Deletion or Blocking of Data

We adhere to the principles of data avoidance and data minimization. We therefore only store your personal data for as long as is necessary to achieve the purposes stated here or as provided for by the various storage periods stipulated by law. After the respective purpose ceases to apply or these periods expire, the corresponding data is routinely blocked or deleted in accordance with legal regulations.

SSL Encryption

To protect the security of your data during transmission, we use state-of-the-art encryption methods (e.g. SSL) via HTTPS.

Cookie Consent Management

This website uses its own cookie consent management system. Your decision is not stored in a cookie, but in your browser's local storage (localStorage), under the keys "pressta-cookie-consent" and "pressta-cookie-preferences". This data remains exclusively in your browser; it is transmitted neither to our server nor to any third party.

The only information stored is the cookie categories you have selected (necessary, analytics, marketing), the time of your decision (for consents given before this record was introduced, instead the point in time from which the period stated below runs — the actual time of decision is not available to us there and is not entered retroactively), the version of the privacy policy to which your consent relates, and a randomly generated identifier for the respective consent event. This information serves solely to document your consent pursuant to Art. 7 (1) GDPR. The random identifier is generated locally in your browser, is newly assigned with every new decision, and is not linked to any attribute identifying you nor to your IP address; it is therefore expressly not a persistent recognition identifier. We do not maintain any server-side consent log — the data never leaves your browser. No personal data is processed in this context.

Period of validity: Your consent is valid for twelve months from the time of your decision. After that it expires: the cookie banner automatically appears again so that you can make a new decision. Until you do, the default setting applies once more — all optional categories are rejected; the analytics and marketing cookies based on the expired consent are deleted and the expired record of consent is removed from your browser's local storage. The same happens if we change this privacy policy substantively, for example if purposes, recipients or services used are added or removed: in that case, too, we ask for your consent again rather than relying on a decision that related to an earlier version. For consents given before this record was introduced, which therefore have no stored timestamp, the twelve-month period starts when this website is first accessed after the changeover.

Important note on withdrawal: Because your consent is not stored in a cookie, deleting your cookies or clearing your browser cache does not withdraw it — the decision stored in localStorage remains in place. The intended and simplest way to withdraw consent is the "Cookie settings" link in the footer of every page: there you can change your selection or reject all optional categories at any time with effect for the future. Alternatively, you can specifically delete the two localStorage keys named above via your browser's site or developer settings; merely clearing the browser cache is not sufficient.

If you deselect a category, our website actively deletes the cookies and browser storage entries set on that basis: withdrawing the "Analytics" category deletes the Google Analytics cookies ("_ga", "_ga_…"); withdrawing the "Marketing" category deletes the Google Ads and Tawk.to entries ("_gcl_…", "TawkConnectionTime", "twk_…"). Categories you continue to allow remain untouched. From the moment of withdrawal, no further data is transmitted to the providers concerned.

We cannot delete cookies that were set on a third-party domain ourselves — this applies to "test_cookie" and "IDE" on the doubleclick.net domain. For technical reasons (the browser's same-origin policy), these can neither be read nor deleted from our website. However, they are not set again after your withdrawal, because the associated Google code is then no longer loaded. You can additionally remove these cookies yourself at any time via your browser's cookie settings.

Storing and reading the consent data in your browser is strictly necessary in order to provide the service you have expressly requested and therefore does not require consent, pursuant to Sec. 25 (2) No. 2 TDDDG. The legal basis for storing this technically necessary consent data is Art. 6 para. 1 lit. c) GDPR in conjunction with Art. 7 para. 1 GDPR (obligation to document consents).

Overview of Cookies and Storage Technologies Used

The following overview lists the cookies and the browser storage (localStorage) entries used on this website. Entries in the "Analytics" and "Marketing" categories are only set after you have accepted the respective category in the cookie banner. The storage periods for third-party services are based on the information provided by the respective providers, who may change these values.

If you click on one of our Google ads, an additional cookie from the "_gcl_*" family (e.g. "_gcl_aw") may be set; for details see the section "Google Ads Conversion Tracking". We embed Google Maps and YouTube using a two-click solution: only when you actively click the respective placeholder is content loaded from Google, which may set cookies or store and read information on your device. Which identifiers Google sets in that case is outside our control; for details see the sections "Google Maps" and "YouTube Videos".

Google Analytics 4

This website uses Google Analytics 4 (GA4), a web analytics service provided by Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland. GA4 is activated only upon your explicit consent and processes data only if you have accepted the "Analytics" category in the cookie banner.

We use GA4 to collect the following anonymized usage data: page views (per visited page), and specific conversion events — specifically: clicks on the "Request Quote" button (on product pages), contact form submissions, newsletter sign-ups, and callback requests. IP addresses are anonymized before transmission (IP anonymization is enabled). No advertising data, demographic features, or remarketing lists are used. The data transmitted to Google is stored in accordance with the retention period configured in Google Analytics and is then deleted automatically.

Processing is based on your consent pursuant to Art. 6 para. 1 lit. a GDPR in conjunction with Sec. 25 (1) TDDDG. You can withdraw your consent at any time via the "Cookie settings" link in the footer; alternatively by specifically deleting the localStorage key "pressta-cookie-preferences" (deleting cookies or clearing the browser cache is not sufficient). After withdrawal, the Google Analytics cookies that have been set are deleted and no further data is transmitted to Google.

Data transfer to the USA is based on the EU-US Data Privacy Framework (DPF), to which Google is a certified participant; additionally, Google relies on EU standard contractual clauses. Details on the standard contractual clauses can be found here: https://privacy.google.com/businesses/controllerterms/mccs/

Browser Opt-out

Additionally, you can prevent Google Analytics from collecting your data by installing the browser plugin at the following link: https://tools.google.com/dlpage/gaoptout?hl=de

More information on how Google Analytics handles user data can be found in Google's privacy policy: https://support.google.com/analytics/answer/6004245?hl=de

Order Processing

We have concluded a data processing agreement with Google and fully implement the requirements of the German data protection authorities when using Google Analytics.

Google Ads Conversion Tracking

This website uses Google Ads conversion tracking, a service provided by Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland. The Google Ads code is only loaded if you have accepted the "Marketing" category in the cookie banner; without this consent, no script is loaded and no cookie is set (Google Consent Mode v2, see below). Once consent has been given, we use conversion tracking to measure whether our Google Ads advertisements lead to inquiries via our website: when the contact form, a callback request, or a catalog/brochure request is successfully submitted, a conversion event is transmitted to Google and a conversion cookie (e.g. "_gcl_aw") is set. The conversion cookie is generally valid for 90 days. The conversion data transmitted to Google is stored and aggregated there in accordance with Google's retention periods.

For the contact form and the catalog/brochure request — both of which contain an email field — the email address you provide is additionally transmitted to Google in pseudonymized form (SHA256 hash, no plain-text transmission) to enable more accurate conversion attribution (so-called "enhanced conversions"). Google may match the transmitted hash value against existing Google accounts. The callback form does not contain an email field; no enhanced conversion attribution takes place there. We do not receive any information from Google that would allow us to identify you personally; we currently do not use this tracking for remarketing (no personalized ad delivery to previous website visitors).

The legal basis is your consent pursuant to Art. 6 (1) (a) GDPR in conjunction with Sec. 25 (1) TDDDG. This consent is based on Google Consent Mode v2: before any consent is given, all four consent signals (ad_storage, ad_user_data, ad_personalization, analytics_storage) default to "denied" — only once you accept the "Marketing" category are the advertising-related signals set to "granted" and tracking activated. You can withdraw your consent at any time with effect for the future via the cookie settings (link in the footer); from the moment of withdrawal, no further conversion data is transmitted to Google. Data transfer to the USA is based on the EU-US Data Privacy Framework (DPF), to which Google is a certified participant; additionally, Google relies on EU standard contractual clauses.

Further information on how Google Ads handles user data can be found in Google's privacy policy: https://policies.google.com/privacy

Contact, Callback, Catalog and Service Requests

When you contact us via one of our forms (contact, callback, catalog/brochure request, service request), we process the data you provide — depending on the form, e.g. name, company, email address, phone number, address and the content of your enquiry — in order to handle and answer your request. The data is forwarded by email to the responsible department of Pressta-Eisele GmbH.

The legal basis is Art. 6 (1) (b) GDPR (initiation or performance of a contract) or Art. 6 (1) (f) GDPR (legitimate interest in answering enquiries). The data is deleted as soon as it is no longer required for the purpose and no statutory retention periods apply.

Applications (Online Application Portal)

Our careers page includes an application portal that is operated on our own infrastructure (intern.pressta-eisele.de); no external applicant management service provider is used. When you apply via the portal, we process the data you provide — in particular your name, contact details, your application documents (e.g. cover letter, CV, references) and the information you enter in the application form — exclusively for the purpose of conducting the application procedure.

The legal basis is Sec. 26 (1) of the German Federal Data Protection Act (BDSG) (processing for the purpose of deciding on the establishment of an employment relationship). Within Pressta-Eisele GmbH, the recipients of the data are the HR department and the specialist staff involved in the respective selection process; the data is not passed on to external third parties.

Your application data will be deleted no later than six months after completion of the application procedure, provided that no employment relationship is established and no statutory obligations prevent deletion. Longer storage — for example, for consideration in future job openings (talent pool) — only takes place if you have expressly consented to this (Art. 6 (1) (a) GDPR). You can revoke such consent at any time with effect for the future. In the event of employment, the data will be transferred to the personnel file.

Email Delivery and Newsletter (Resend)

We use the service Resend (Plus Five Five, Inc., 2261 Market Street #5039, San Francisco, CA 94114, USA) to send emails — both the notifications from our forms (contact, callback, catalog/brochure and service requests) and our newsletter. The data required for delivery (in particular email address and message content) is processed; a transfer to the USA takes place. This transfer is based on the EU-US Data Privacy Framework (DPF), under which the provider is certified; additionally, the transfer is supported by the EU Commission's standard contractual clauses. A data processing agreement is in place with Resend.

Newsletter with double opt-in

When you sign up for our newsletter, we use the double opt-in procedure: after registering you first receive an email asking you to confirm your subscription via a link. Only after your confirmation are you added to the distribution list. The legal basis is your consent pursuant to Art. 6 (1) (a) GDPR. You can unsubscribe at any time via the unsubscribe link in every newsletter email.

Further information on data protection at Resend: https://resend.com/legal/privacy-policy

Live Chat (Tawk.to)

We offer a live chat provided by tawk.to inc., 187 East Warm Springs Rd, SW18, Las Vegas, NV 89119, USA. The chat is loaded only if you have accepted the "Marketing" category in the cookie banner — without your consent, no Tawk.to code is loaded and no cookie is set. When used, your chat input, IP address, browser/device information and a session cookie are processed, among other things.

The legal basis is your consent pursuant to Art. 6 (1) (a) GDPR in conjunction with Sec. 25 (1) TDDDG. This involves a transfer to the USA, which is based on the EU Commission's standard contractual clauses. You can withdraw your consent at any time via the cookie settings (link in the footer) with effect for the future. Further information: https://www.tawk.to/privacy-policy/

Google Maps

This website embeds map material from the Google Maps service, provided by Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland. The map is not loaded automatically: when you open the page, you initially only see an inactive placeholder with a corresponding notice; in this state, no connection to Google is established and no data is transmitted to Google. Only when you actively click on the placeholder is the map content loaded from Google servers.

When the map is loaded, your IP address, the address of the page you are visiting, and browser and device information, among other things, are transmitted to Google; Google may set cookies or access information stored on your device. If you are signed in to your Google account at the same time, Google may attribute the visit to your account. We have no influence on the further processing of this data by Google.

The legal basis is your consent pursuant to Art. 6 (1) (a) GDPR in conjunction with Sec. 25 (1) TDDDG, which you give by actively clicking on the placeholder. The consent applies to the respective loading process; as long as you do not load the map, no data is transmitted to Google. Data transfer to the USA is based on the EU-US Data Privacy Framework (DPF), to which Google is a certified participant; additionally, Google relies on EU standard contractual clauses.

Further information on how Google handles user data can be found in Google's privacy policy: https://policies.google.com/privacy

YouTube Videos

This website embeds videos from the YouTube platform, provided by Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland. A two-click solution applies here as well: when you open the page, only an inactive preview element with a corresponding notice is displayed, which does not establish a connection to YouTube and does not transmit any data to Google. Only when you actively click on the preview element is the video loaded from YouTube servers and played.

In addition, the videos are embedded in so-called privacy-enhanced mode via the domain youtube-nocookie.com. According to Google, in this mode no information about visitors is stored before they play the video. Nevertheless, when the video is loaded and played, data is transmitted to Google — including your IP address, the address of the page you are visiting, and browser and device information; access to information stored on your device (e.g. local storage) is also possible. If you are signed in to your Google or YouTube account, Google may attribute the retrieval to your account. We have no influence on the further processing of this data by Google.

The legal basis is your consent pursuant to Art. 6 (1) (a) GDPR in conjunction with Sec. 25 (1) TDDDG, which you give by actively clicking on the preview element. The consent applies to the respective loading process; as long as you do not load the video, no data is transmitted to Google. Data transfer to the USA is based on the EU-US Data Privacy Framework (DPF), to which Google is a certified participant; additionally, Google relies on EU standard contractual clauses.

Further information on how Google handles user data can be found in Google's privacy policy: https://policies.google.com/privacy

Hosting

This website is hosted by Replit, Inc. (USA). Replit provides the infrastructure required to operate the site as well as object storage for uploaded files, acting as our data processor. The servers used to deliver this website are located in the United States of America: our Replit account is configured for the "North America" region, and Replit states in its own privacy policy that its services are primarily hosted in the United States. This website is not hosted within the European Union.

When the website is accessed, technically necessary server log data (e.g. IP address, date and time of access, requested resource, amount of data transferred, referrer, and browser and device details) is processed, which is required to deliver and secure the website. The legal basis for this is Art. 6 (1) (f) GDPR; our legitimate interest lies in the secure and efficient operation of the website. Since the website is necessarily delivered via the US servers mentioned above, this data is processed in the USA — irrespective of whether you have consented to any cookie category.

A data processing agreement pursuant to Art. 28 GDPR is in place with Replit: Replit's Data Processing Addendum automatically forms part of the contractual terms without requiring a separate signature. Replit is not certified under the EU-US Data Privacy Framework (DPF). The transfer to the USA is therefore based on Art. 46 (2) (c) GDPR: the Data Processing Addendum incorporates the European Commission's standard contractual clauses pursuant to Implementing Decision (EU) 2021/914, Module Two (controller to processor). Replit has appointed DataRep as its representative in the Union pursuant to Art. 27 GDPR.

We point out that despite these safeguards it cannot be entirely ruled out that US authorities may access the transferred data on the basis of US law. A level of protection fully equivalent to European requirements can therefore not be guaranteed for this transfer.

Hosting Platform Cookie ("GAESA")

When this website is accessed, the hosting platform sets a cookie named "GAESA" via the HTTP "Set-Cookie" response header. Despite its name, this cookie does not originate from a Google advertising or analytics service. It is set server-side by the hosting infrastructure and is also delivered when no JavaScript is executed in your browser — for example on a plain request for /robots.txt or /favicon.ico.

The cookie value consists of an identifier of the server instance handling your request together with a timestamp. It serves solely to route your subsequent requests to the same server instance (load balancing, known as session affinity). The identifier designates the server instance, not you as a visitor: no user-related identifier is assigned, no usage profile is created, and it does not enable individuals to be recognized across pages or sites. The storage period is 30 days. We cannot configure it, because the hosting platform treats the "Set-Cookie" response header as a reserved header and does not permit changes to it.

Storing and reading this cookie is strictly necessary in order for us to provide the service you have expressly requested — the delivery of this website. It therefore does not require consent, pursuant to Sec. 25 (2) No. 2 TDDDG; no cookie banner is required for it. Insofar as personal data is processed in this context, the legal basis is Art. 6 (1) (f) GDPR (legitimate interest in the stable and secure operation of the website).

Login Service for the Administration Area (Clerk)

To secure the internal administration area of this website (editorial login for maintaining website content), we use the authentication service Clerk provided by Clerk, Inc. (USA). The service is loaded and executed exclusively when the administration area (/admin) or the sign-in pages are called up. When you visit the public pages of this website it is neither loaded nor called; no Clerk cookies are set and no data is transmitted to Clerk. Only within the administration area are technically necessary cookies or comparable identifiers for session management set, and connection data processed (including IP address, browser and device information, and time of access); for signed-in administrators, additionally the login data (in particular email address and name). Registration is not available to website visitors; the login is reserved exclusively for authorized employees of Pressta-Eisele GmbH. This service is not used to track website usage for advertising or analytics purposes.

The legal basis is Art. 6 (1) (f) GDPR; our legitimate interest lies in securing the administration area against unauthorized access and in the secure management of website content. Insofar as information is stored on or read from your device in this context, this is strictly necessary in order to provide this service (Sec. 25 (2) No. 2 TDDDG); no consent is required for this.

Data transfer to the USA is based on the EU-US Data Privacy Framework (DPF), under which Clerk is certified; in addition, the EU Commission's standard contractual clauses have been agreed for cases in which a transfer cannot be based on the DPF. A data processing agreement is in place with Clerk.

Further information: https://clerk.com/legal/privacy and https://clerk.com/legal/dpf

Changes to Our Privacy Policy

We reserve the right to adapt this privacy policy so that it always complies with current legal requirements or to implement changes to our services in the privacy policy, e.g. when introducing new services. The new privacy policy will then apply to your next visit.

Questions to the Data Protection Officer

If you have questions about data protection, please write an email to our external data protection officer Alexander Schulz (KARST IT GmbH) at A.Schulz@karst-it.de or contact him by phone at: +49 2632 9459-0.

The privacy policy was created using the privacy policy generator from activeMind AG.