Privacy Policy

• the EU General Data Protection Regulation (GDPR)
• the German Federal Data Protection Act (BDSG)
• the German Telecommunications and Digital Services Data Protection Act (TDDDG)

• Anonymised IP address
• Date & time
• Requested file and referrer URL
• Browser and operating-system information

We use necessary cookies and local storage and, only with your voluntary consent, Google Analytics. Without consent, the Google tag is not loaded and our Analytics integration sends no data to Google. Declining or closing the banner does not prevent you from using the website, contact forms or our services.

• Forms: A PHP session cookie (usually PHPSESSID) associates security tokens, form feedback and duplicate-submission protection with your session. It is configured as a session cookie.
• Privacy choice: Local Storage holds your choice and its timestamp under nlc.ga-consent.v1, valid for 180 days. After that, the choice is discarded on your next visit and requested again. It contains no Analytics user identifier.
• Appearance and language changes: Your chosen light/dark preference is stored locally under nlc.theme until you change it or clear browser data. When you explicitly switch language, a form draft may be temporarily held in Session Storage under nlc.languageDraft. It is removed immediately on the destination page and restored only within 60 seconds; otherwise storage ends at the latest with the browser tab session.

These storage operations support functions you request (Section 25(2)(2) TDDDG). Where personal data is processed, this is to handle your enquiry or provide a secure website (Article 6(1)(b) or (f) GDPR). Optional Analytics cookies and subsequent analysis require your consent under Section 25(1) TDDDG and Article 6(1)(a) GDPR. You can withdraw it at any time for the future using Privacy settings. Withdrawal does not affect the lawfulness of processing before withdrawal.

Provider and purpose: We use Google Analytics 4 from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. We analyse which pages and services visitors use and how they reach a contact or callback request, in order to improve the website.

Data processed: After consent, pseudonymous cookie identifiers, device and browser information, page views, engagement time, referring pages, link clicks, scroll depth and form events are processed. A successful enquiry is recorded only after acceptance by our mail transport. Our defined events contain no names, email addresses, phone numbers or message contents entered in forms. URL parameters and fragments are removed before page and link addresses are passed on. Your IP address is transmitted to Google for technical communication; according to Google, GA4 does not log or store it. Approximate location information can be derived from it.

Cookies: _ga recognises a browser; _ga_SLMTL1SMFV maintains session state for our data stream. Both are configured with a lifetime of 180 days; automatic renewal on subsequent visits is disabled in our integration. Browsers may limit this lifetime. Cookie lifetime is separate from retention of data already transmitted to Google.

Data retention: Our Google Analytics account is configured to retain user and event data for 14 months. Data whose retention period has expired is removed in Google’s monthly deletion cycle. This setting does not apply to standard aggregated reports.

Consent and withdrawal: The legal bases are Section 25(1) TDDDG and Article 6(1)(a) GDPR. Google Signals and advertising personalisation signals are disabled in our integration. Analytics stays off when Do Not Track or Global Privacy Control is enabled. You can withdraw consent using Privacy settings. We then stop further collection and remove Analytics cookies accessible to our website. This does not automatically delete data already sent to Google; you can contact us with privacy requests.

Recipients and international processing: Google processes the analytics data; Google LLC in the USA and other service providers engaged by Google may also be involved. Google describes its arrangements for processing and international transfers, including standard contractual clauses, in its Data Processing Terms. Further details are available in the Google privacy policy and Google Analytics privacy information.

• Right of access (Art. 15 GDPR)
• Rectification (Art. 16 GDPR)
• Erasure (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Objection to processing based on Art. 6 (1)(e/f) GDPR and to direct marketing (Art. 21 GDPR)
• Withdrawal of consent (Art. 7 (3) GDPR)
• Complaint to a supervisory authority (Art. 77 GDPR), e.g. the Data Protection Authority of North Rhine-Westphalia.