PRIVACY POLICY
General information
We process users’ personal data in accordance with the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG). Processing is carried out to provide a functional website, to fulfil contractual or pre-contractual obligations, on the basis of legitimate interests and, where required, on the basis of given consent.
Your rights under the GDPR
You have the right to obtain information about the processing of your personal data and the right to rectification of inaccurate data. You also have the right to erasure, restriction of processing and data portability, provided the statutory requirements are met.
Where processing is based on your consent, you may withdraw this consent at any time with effect for the future.
Furthermore, where processing is based on Art. 6(1)(f) GDPR, you have the right to object at any time, on grounds relating to your particular situation, pursuant to Art. 21 GDPR.
You also have the right to lodge a complaint with a competent data protection supervisory authority.
To exercise your rights, you may contact the address stated in the legal notice or our data protection contact at [email protected] at any time.
Server log files
When accessing our website, the hosting provider automatically collects and stores information in server log files:
• Browser type and version
• Operating system
• Referrer URL
• IP address
• Date and time of access
Purpose: ensuring technical operation, stability and security
Legal basis: Art. 6(1)(f) GDPR
Retention period: max. 14 days
TECHNICALLY NECESSARY SERVICES
Cookies and consent management
This website uses cookies. Consent management is handled by Real Cookie Banner by devowl.io GmbH, Tannet 12, 94539 Grafling, Germany.
Processed data:
• Consent status
• Technical browser information
Purpose: compliance with documentation obligations under the GDPR and applicable national data protection and ePrivacy laws
Legal basis: Art. 6(1)(c) GDPR
Retention period: until deletion in the browser
Details on the functionality of Real Cookie Banner can be found here.
Cloudflare, Inc. (Content Delivery Network, JavaScript CDN and security services)
Provider: Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA
Processed data:
• IP address
• Technical header information
• Access data for static resources (e.g. JavaScript, CSS)
• Security-related metadata
Purpose: secure and performant provision of the website, delivery of static content via a global CDN and protection against attacks and misuse
Legal basis: Art. 6(1)(f) GDPR
Third-country transfer: USA
Transfer mechanism: EU–US Data Privacy Framework pursuant to Art. 45 GDPR, where applicable.
Otherwise Standard Contractual Clauses pursuant to Art. 46 GDPR
Retention period: in accordance with Cloudflare’s contractual policies on log and security data processing
Cloudflare, Inc. (Turnstile bot and abuse protection)
Provider: Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA
Processed data:
• IP address
• Browser and device information
• Interaction and risk signals
• Technical header information
Purpose: protection of forms and website functions against automated access, bots and abuse and ensuring technical availability
Legal basis: Art. 6(1)(f) GDPR
Third-country transfer: USA
Transfer mechanism: EU–US Data Privacy Framework pursuant to Art. 45 GDPR, where applicable.
Otherwise Standard Contractual Clauses pursuant to Art. 46 GDPR
Country selection (Elementor popup)
We use a technically necessary Elementor popup to control country selection. The selected option is stored locally in the user’s browser (local storage) to prevent repeated display and to provide the correct regional version of the website.
No personal data within the meaning of Art. 4(1) GDPR is processed. Storage takes place exclusively on the user’s device..
Legal basis: Art. 6(1)(f) GDPR
Legitimate interest: user-friendly and functional provision of the website
Retention: end of session or manual deletion of browser cache
Prospect One sp. z o.o. (jsDelivr CDN)
Provider: Prospect One sp. z o.o., Poland
Processed data:
• IP address
Purpose: technical delivery of JavaScript and CSS files
Legal basis: Art. 6(1)(f) GDPR
Cookies: none
Third-country transfer: no (EU)
Retention: in accordance with jsDelivr policies / short-term log storage
Wordfence Security
Provider: Defiant, Inc., USA
Processed data:
• IP address
• Access times
• Requested URLs
Purpose: protection against unauthorized access, Legal basis: Art. 6(1)(f) GDPR
Cookies: technically required
Third-country transfer: USA
Retention: p to 30 days in accordance with the provider’s contractual data processing terms
Transfer mechanism: Standard Contractual Clauses (Art. 46 GDPR)
unpkg
Provider: npm, Inc., 1999 Harrison Street #1150, Oakland, CA 94612, USA
Processed data:
• IP address
• Technical header data
Purpose: provision of JavaScript libraries
Legal basis: Art. 6(1)(f) GDPR
Legitimate interest: secure and efficient website provision
Retention: according to npm policies
Cookies: none
Third-country transfer: USA
Transfer mechanism: Standard Contractual Clauses (Art. 46 GDPR)
WEB ANALYTICS AND MARKETING SERVICES
The analytics and marketing services listed below are used only after consent has been given pursuant to Art. 6(1)(a) GDPR. Consent can be withdrawn at any time via the cookie settings.
Google Tag Manager from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, is used for the technical management and triggering of website tags. Google Tag Manager itself processes technical data (such as the IP address) to enable the integration of additional services, but does not store any permanent identifiers or user profiles.
Google services without Google Consent Mode
We do not use Google Consent Mode. Google services (e.g. Google Analytics, Google Ads) are controlled exclusively via the cookie banner and are only loaded after explicit consent.
Before consent is given, no Google tags are loaded, no data is transferred, no cookies are set and no cookieless signals or statistical modelling take place.
The processing of personal data by Google services is based exclusively on your consent in accordance with
Art. 6(1)(a) GDPR.
Google Analytics
Provider: Google Ireland Limited, Dublin, Ireland
Recipient: Google LLC, USA
Processed data:
• Usage data
• Device information
• Truncated IP address
Purpose: analysis of user behaviour and website optimisation
Cookies: yes
Third-country transfer: USA
Transfer mechanism: EU–US Data Privacy Framework
Retention: Retention period: 14 months
IP anonymization is enabled.
Google Ads
Provider: Google Ireland Limited
Recipient: Google LLC, USA
Purpose: conversion tracking, marketing and remarketing
Legal basis: consent
Third-country transfer: USA
Transfer mechanism: EU–US Data Privacy Framework
Leadinfo B.V.
Provider:
Leadinfo B.V., Rivium Quadrant 141, 2909 LC Capelle aan den IJssel, Netherlands
Data processed:
Shortened or anonymized IP address
Technical device and browser data
Date and time of access
Pages visited and duration of visit
Referrer URL
Company related information of the visitor
Purpose of processing:
Identification of companies visiting our website and analysis of user behavior to generate B2B sales opportunities and support our sales and marketing activities.
Legal basis:
Art. 6(1)(a) GDPR consent.
Processing takes place only after your explicit consent via our consent management tool in accordance with the GDPR and applicable ePrivacy regulations.
Withdrawal of consent:
You may withdraw your consent at any time with effect for the future via the privacy settings.
Retention period:
Data is stored for a maximum of 12 months or until you withdraw your consent, whichever occurs first, unless statutory retention obligations apply.
International data transfers:
If data is transferred outside the European Economic Area, this will only take place in compliance with Art. 44 et seq. GDPR and subject to appropriate safeguards.
Lead Forensics Ltd.
Provider: Lead Forensics Ltd., United Kingdom
Data processed:
Truncated IP address
Technical device and browser data
Date and time of access
Pages visited and visit duration
Referrer URL
Associated company information
Purpose of processing: Identification of companies visiting our website and analysis of user behavior for B2B lead generation and support of our sales and marketing activities.
Legal basis: Art. 6(1)(a) GDPR consent.
Processing takes place only after your explicit consent via our consent management tool in accordance with the GDPR and applicable ePrivacy laws.
Withdrawal of consent: You may withdraw your consent at any time with effect for the future via the Privacy settings or by contacting [email protected].
International data transfers: Data transfers to the United Kingdom are based on the adequacy decision pursuant to Art. 45 GDPR.
Retention period: Data is stored for a maximum of 12 months or until withdrawal of consent, whichever occurs first, unless statutory retention obligations apply
Responsible party:
ABRAMS Industries GmbH & Co. KG
Hannoversche Str. 38-46, 49084 Osnabrück / Germany
Managing Director:
Dipl.-Wi.-Ing. Dr. Jürgen Abrams
Contact Data Protection Officer:
[email protected]
