Privacy Policy

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

Velorialux GmbH
Am Markt 10
06536 Südharz, Germany
Represented by the Managing Director Pawel Riabkow
Email: paschariaba@icloud.com · Phone: +49 163 2404086

2. Data protection officer

We have appointed a data protection officer. Their contact details will be published here. Until then, please use the contact details above for any data protection questions.

3. Hosting and server log files

When you visit this website, the server processes technically necessary access data (e.g. IP address, date and time, page requested, browser and operating system information) in order to deliver the website and ensure its security and stability. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in operating the website securely and reliably.

Details of the hosting provider, server location and log file retention are currently being finalised and will be added here before final publication.

4. Contact form and project inquiries

If you contact us via the contact form, by email or by phone, we process the data you provide (company name, contact person, email address, optional telephone number, requested service, project location, optional expected project start and project description) solely to handle your inquiry.

The legal basis is Art. 6(1)(b) GDPR where your inquiry relates to entering into or performing a contract, and otherwise Art. 6(1)(f) GDPR (legitimate interest in responding to business inquiries).

Providing the data marked as required is necessary for us to process your inquiry. Without it, we cannot process your request via the form; alternatively, you can contact us by email or phone. There is no statutory or contractual obligation to provide this data.

To prevent abuse, the server validates all input, uses an invisible check field and briefly limits the number of requests per IP address. Form data is transmitted to our server in encrypted form (HTTPS) and forwarded from there to the system used to deliver emails. The email delivery provider will be named here before final publication.

5. Recipients and processors

Within our company, your data is only accessible to those who need it to process your inquiry. Where we use service providers for hosting or email delivery, this is done on the basis of a data processing agreement pursuant to Art. 28 GDPR. The specific providers will be named here before final publication.

6. Retention period

We store your inquiry for as long as necessary to process it. The data is then deleted unless statutory retention obligations (in particular under German commercial and tax law) apply.

7. Transfers to third countries

Whether data is processed outside the European Union or the European Economic Area for hosting or email delivery depends on the service providers yet to be selected. The relevant information and safeguards under Art. 44 et seq. GDPR will be added here before final publication.

8. Your rights

Subject to the statutory requirements, you have the right to:

• access (Art. 15 GDPR)
• rectification (Art. 16 GDPR)
• erasure (Art. 17 GDPR)
• restriction of processing (Art. 18 GDPR)
• data portability (Art. 20 GDPR)
• object to processing based on Art. 6(1)(f) GDPR (Art. 21 GDPR)

To exercise your rights, simply contact us using the details above.

9. Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), in particular in the member state of your habitual residence, place of work or place of the alleged infringement. The authority responsible for our company is the State Commissioner for Data Protection of Saxony-Anhalt (Landesbeauftragter für den Datenschutz Sachsen-Anhalt).

10. Data security

This website is delivered exclusively via an encrypted connection (HTTPS/TLS). Credentials for email delivery are stored only on the server and are never sent to your browser.

11. Cookies and local storage

This website does not use any analytics, tracking or marketing services and does not set any cookies itself. Fonts are served from our own server; no external font services are used.

So that form entries are not lost when you switch language, the website stores a draft of your input in your browser's session storage (sessionStorage). This entry never leaves your device, is deleted after successful submission and is removed automatically when you close the tab. The legal basis is § 25(2) no. 2 TDDDG (strictly necessary for the service you requested).

A cookie banner is therefore not required. Should services requiring consent be introduced in future, we will obtain your consent beforehand.

12. Changes to this privacy policy

We will update this privacy policy whenever the website or the services used change. The version published here applies.