Privacy Policy

Privacy Policy
of [Company Name] for the Website prostgear.com

1. Controller and Contact Details

The controller within the meaning of applicable data protection law (in particular the General Data Protection Regulation – GDPR) is:

[Company Name]
[Street and number]
[Postcode, City]
Germany

Phone: [phone number]
Email: [contact email]

If you have any questions about this Privacy Policy or data protection in general, you can contact us at any time using the contact details above.

If a Data Protection Officer is appointed:
Data Protection Officer:
[Name or contact point]
[Street, postcode, city]
Email: [DPO email]

2. General Principles of Data Processing

  1. We process personal data only to the extent necessary for providing this Website, responding to enquiries, maintaining technical security and – where applicable – preparing or performing contracts.
  2. The legal bases for processing are, in particular:
    • Article 6(1)(a) GDPR – your consent;
    • Article 6(1)(b) GDPR – performance of a contract or pre-contractual measures;
    • Article 6(1)(c) GDPR – compliance with legal obligations;
    • Article 6(1)(f) GDPR – legitimate interests, such as ensuring IT security, improving our Website, and communicating with interested parties. gdpr-info.eu+1
  3. We do not use personal data for automated decision-making, including profiling, within the meaning of Article 22 GDPR.

3. Provision of the Website and Server Log Files

  1. When you visit our Website, your browser automatically transmits information to our server. The following data may be collected temporarily and stored in log files:
    • IP address of the requesting device;
    • date and time of access;
    • time zone difference to Greenwich Mean Time (GMT);
    • requested URL and HTTP status code;
    • amount of data transferred;
    • website from which the request originates (referrer URL);
    • browser type and version, operating system.
  2. Processing of these log files is technically necessary to display the Website and to ensure stability and security. The legal basis is Article 6(1)(f) GDPR (our legitimate interest in operating a secure and reliable Website).
  3. Log files are usually stored for a short period (generally not longer than [e.g. 14–30 days]) and then deleted or anonymised, unless a longer storage is required for evidentiary purposes in the event of security incidents.

4. Cookies and Similar Technologies

  1. Our Website may use cookies or similar technologies (e.g. local storage) to provide essential functions (such as language settings, navigation, security).
  2. We distinguish:
    • Essential cookies that are necessary to operate the Website (e.g. session cookies). These may be used without your prior consent, based on our legitimate interests (Article 6(1)(f) GDPR).
    • Non-essential cookies (e.g. for comfort features or statistics), which we only use with your consent under Article 6(1)(a) GDPR.
  3. If we use a consent banner or tool, your choices will be stored and can be adjusted at any time. You can also configure your browser so that it rejects cookies or alerts you to them. Disabling cookies may limit the functionality of the Website.

5. Contact by Email or Contact Form

  1. When you contact us via email or via a contact form on the Website, we process the data you provide (e.g. name, email address, subject, message content, technical metadata) to handle your request.
  2. The legal basis is Article 6(1)(b) GDPR if the request relates to an existing or potential contractual relationship, and otherwise Article 6(1)(f) GDPR (our legitimate interest in properly responding to enquiries).
  3. We store communication data for as long as necessary to process your request and in accordance with statutory retention periods (e.g. under commercial or tax law) where applicable.

6. Hosting and Service Providers

  1. Our Website is hosted on servers provided by [hosting provider name, address, country]. In this context, the hosting provider processes the log file data and any technical data necessary to provide and secure the Website as our processor under Article 28 GDPR.
  2. We may engage additional IT service providers (e.g. for maintenance, security, backup). These providers only process personal data on our documented instructions and are bound by strict confidentiality and data protection obligations.

7. Data Recipients and Transfer to Third Countries

  1. We only share personal data with third parties where this is:
    • necessary for the performance of a contract or to carry out pre-contractual measures;
    • required by law;
    • covered by our legitimate interests; or
    • based on your explicit consent.
  2. If, in exceptional cases, personal data is transferred to recipients outside the EU/EEA (third countries), we ensure an adequate level of data protection, e.g. by:
    • an adequacy decision of the European Commission, or
    • appropriate safeguards such as EU standard contractual clauses.

8. Storage Periods

  1. We store personal data only for as long as necessary to fulfil the purposes described in this Privacy Policy or as required by statutory retention periods.
  2. When the purpose ceases to apply and no legal retention obligations exist, personal data is deleted or anonymised in accordance with our deletion concept.

9. Your Rights as Data Subject

You have the following rights regarding your personal data:

To exercise these rights, you can contact us using the contact details given above.

You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement (e.g. your local supervisory authority in Germany or another EU/EEA country). EUR-Lex+1

10. Data Security

We take appropriate technical and organisational measures to protect personal data against loss, destruction, access, alteration or distribution by unauthorised persons. These measures are continuously improved in line with technological developments and legal requirements.

11. Updates to this Privacy Policy

We may amend this Privacy Policy from time to time, for example if our processing changes or if legal requirements are updated. The current version is always available on this Website. You should review this Privacy Policy periodically.

Last updated: [date]

prostgear.com