Privacy policy

1. Privacy at a glance

General information

This policy explains which personal data we process when you visit this website or contact us. Personal data is information relating to an identified or identifiable person. Details are provided in the following sections.

Data collection on our website

• Who is responsible? ProDyne GmbH operates the website and is the data controller. Our contact details appear in Section 2 and the legal notice.
• How do we collect your data? Technical access data is generated automatically when you visit the website. You provide other information yourself, for example by sending an email using a mailto link.
• What do we use your data for? Access data is used to deliver and secure the website. Information from enquiries is used to address your request and any follow-up questions; statutory retention obligations remain unaffected.

2. Data controller

ProDyne GmbH
Meiersberger Strasse 37
D-40882 Ratingen
Germany

Represented by managing director Andreas Brauwers.
Telephone: +49 (0) 2102 / 13533 - 0
Email: solution@prodyne.de

Please also use this contact address for privacy questions and requests concerning your personal data.

3. General information and mandatory disclosures

TLS encryption (HTTPS)

This website uses HTTPS with TLS encryption to protect data transmitted between your browser and our web server. You can identify an encrypted connection by “https://” in the address and the connection information shown by your browser. Encryption protects data against interception and alteration in transit on this connection. It does not provide end-to-end encryption for messages sent through a separate email application.

No cookies or tracking

The website code contains no analytics or marketing services, social media plugins, external maps or video players. Images and animation files are delivered with the website. The animation runs in your browser and the website code does not send input to an AI service.

The public website uses no cookies and does not store settings persistently in local browser storage. There are no contact forms, visitor analytics or advertising trackers. Email contact is provided exclusively through mailto links.

When you first access the homepage, JavaScript can select the English version based on your browser’s preferred language. This check runs locally without a location lookup, external service, cookie or browser-storage entry. You can switch languages at any time using the links in the header; your selection is represented by the page URL.

Your rights as a data subject

Subject to the applicable legal conditions, you have the following rights:

• Access (Article 15 GDPR): Information about the processing of your personal data and a copy of that data, generally free of charge.
• Rectification (Article 16 GDPR): Correction of inaccurate data and completion of incomplete data.
• Erasure (Article 17 GDPR): Deletion of your data unless a statutory exception applies, such as retention obligations or processing necessary for legal claims.
• Restriction (Article 18 GDPR): Restriction of processing, for example while disputed data accuracy is being checked.
• Data portability (Article 20 GDPR): Receipt of data you have provided in a structured, commonly used and machine-readable format where automated processing is based on consent or a contract; direct transmission to another controller on request, where technically feasible.

You may withdraw consent at any time with effect for the future. The lawfulness of processing before withdrawal remains unaffected (Article 7(3) GDPR).

Right to object: Where processing is based on Article 6(1)(f) GDPR, you may object on grounds relating to your particular situation. Continued processing requires the statutory exceptions under Article 21 GDPR to apply. You may object to processing for direct marketing at any time.

To exercise your rights, contact solution@prodyne.de.

Right to lodge a complaint

You may complain to a data protection supervisory authority, in particular in your place of residence or work or the place of an alleged infringement (Article 77 GDPR). For ProDyne in North Rhine-Westphalia, the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia is a competent point of contact:

LDI NRW
Postfach 20 04 44
40102 Düsseldorf
Germany
LDI NRW contact and complaint options

4. Data collection on our website and infrastructure

Web hosting on a dedicated Hetzner server

We host our website on a dedicated server provided by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. The physical server is located at Hetzner’s data centre in Nuremberg, Germany.

When you visit the website, the server automatically records access data transmitted by your browser in server log files. Where supplied by the browser, this includes:

• IP address of the accessing device
• Date and time of access
• Name and URL of the requested file
• Referring website (referrer URL)
• Browser type and version, and operating system information

Legal basis: Article 6(1)(f) GDPR. Our legitimate interest is in the technically reliable presentation, stability and security of our website, particularly the prevention and investigation of cyberattacks. No usage profiles are created.

Processing on our behalf: We have concluded a data processing agreement with Hetzner pursuant to Article 28 GDPR. It governs the processing of data on our behalf in accordance with our instructions and the provider’s data protection obligations. Our website and its server log files are stored on the server in Germany identified above.

Retention: Server log files are retained for one month and then automatically deleted. Individual data may be retained longer where necessary to investigate a specific security incident or establish, exercise or defend legal claims. Such separately preserved data is deleted when the relevant purpose no longer applies and no statutory retention obligation prevents deletion.

Contact by email (mailto link)

If you contact us using an email address provided on this website (mailto links), we store the information in your email, including the contact details you provide (name, email address, message content and any attachments), to process your enquiry and answer any follow-up questions.

The mailto link opens your email application. A message is sent only when you send it there; this website has no contact form. Providing information is voluntary. Without sufficient contact details and information about your request, we may be unable to respond.

Legal basis: Processing is based on Article 6(1)(b) GDPR if your enquiry relates to performing a contract with you or is necessary for pre-contractual measures. In all other cases, processing is based on our legitimate interest in handling enquiries effectively (Article 6(1)(f) GDPR).

Data recipients / cloud hosting (Microsoft 365): We use Microsoft 365 / Exchange Online to receive, process and store email. The provider is Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. Its parent company is Microsoft Corporation, One Microsoft Way, Redmond, WA 98052, USA. Technical delivery information is processed alongside messages and contact details.

Relevant customer data at rest is stored in German data centres. We have concluded a data processing agreement pursuant to Article 28 GDPR with Microsoft. It governs processing of personal data on our behalf in accordance with our instructions and Microsoft’s data protection obligations. Further details are available in the Microsoft Data Protection Addendum (DPA).

Storage in Germany does not entirely exclude processing or access outside the European Economic Area, particularly in the USA. Microsoft Corporation is certified under the EU-US Data Privacy Framework. Transfers to Microsoft Corporation within the scope of this certification may rely on the European Commission’s corresponding adequacy decision. The framework is not a guarantee against access by public authorities. Microsoft provides information about possible cross-border processing in its EU Data Boundary documentation.

Retention: Data you send by email remains with us until you request deletion or the storage purpose no longer applies, for example once your enquiry has been resolved. Deletion requests are implemented subject to the statutory conditions. Mandatory legal provisions, particularly commercial and tax retention obligations for business emails, remain unaffected. Where such obligations require continued retention, processing is based on Article 6(1)(c) GDPR.

For telephone enquiries, we also process the contact details and information you provide to address your request. The legal bases and retention criteria described above apply accordingly.