Privacy policy

Last updated: September 2026

In short

This website sets no cookies, measures no user behaviour and embeds no analytics, social media widgets or external fonts — all font files are served from our own server. That is why no consent banner appears: there is nothing to consent to.

Two kinds of data are processed: the technically necessary connection data when a page is retrieved — and whatever you enter into the contact form yourself, if you choose to use it. Both are set out below.

Controller

Rheinland Enterprises GmbH, Marktstraße 98, 56564 Neuwied, Germany. Represented by managing director Lothar Radermacher. Phone +49 (0) 2631 9 44 98 90, email info@rheinland-enterprises.de.

Visiting the website and server logs

The website is operated by Microsoft Ireland Operations Limited as processor, using the “Azure Static Web Apps” service in the West Europe region (Netherlands). When a page is retrieved, your browser transmits technically necessary data which is logged briefly: IP address, date and time, the address requested, the volume of data transferred, status code, browser type and operating system, and the previously visited page if your browser sends it.

This processing is necessary for the page to be delivered and to fend off attacks. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is secure and trouble-free operation. The data is not merged with other sources and is not used to build user profiles. A data processing agreement pursuant to Art. 28 GDPR is in place with Microsoft.

Contact form

You can send us a message using the contact form. Only the details you enter yourself are processed: name, email address and message are mandatory, telephone number and subject are optional.

The purpose is to handle your enquiry. The legal basis is Art. 6(1)(b) GDPR where the matter concerns the initiation or performance of a contract, otherwise Art. 6(1)(f) GDPR — our legitimate interest being the ability to answer enquiries. The details are not used for advertising and are not passed on to third parties.

The message is delivered to our mailbox as an email. Delivery is handled by “Azure Communication Services” of Microsoft Ireland Operations Limited as processor; the data location is set to Germany. The message stays in the mailbox for as long as it is needed to handle the matter, and beyond that for as long as commercial and tax retention periods require.

To keep the form from being abused automatically, three things are checked before sending, without involving third parties: an additional field invisible to human beings, the time between opening and submitting, and the number of submissions per IP address. The IP address is held in memory only briefly for this and is not stored permanently.

In addition, Cloudflare Turnstile checks before submission whether the request comes from a human being. The provider is Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. Your IP address is transmitted and assessed together with technical characteristics of your browser. Turnstile sets no cookies for advertising or recognition purposes and builds no cross-device profiles. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is the trouble-free operation of the form. A data processing agreement pursuant to Art. 28 GDPR is in place with Cloudflare; transfers to the USA are based on the European Commission’s standard contractual clauses, and Cloudflare is certified under the EU-US Data Privacy Framework. The check requires JavaScript; if it is switched off, you can still reach us by telephone, email or post.

Please note: the transmission of the form is encrypted in transit (HTTPS), but the subsequent email delivery is not end-to-end encrypted. Please do not send confidential details or documents through the form.

Contacting us

If you contact us by email or telephone, we process your details in order to answer your enquiry. The legal basis is Art. 6(1)(b) GDPR where the matter concerns the initiation or performance of a contract, otherwise Art. 6(1)(f) GDPR. We keep the correspondence for as long as it is needed to handle the matter, and beyond that for as long as commercial and tax retention periods require.

Encryption

The site is delivered exclusively over HTTPS. The transmission is therefore protected against eavesdropping.

Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection to processing based on a legitimate interest (Art. 21). An informal message to the address given above is sufficient.

You may also lodge a complaint with a supervisory authority. The authority responsible for us is the State Commissioner for Data Protection and Freedom of Information of Rhineland-Palatinate, Hintere Bleiche 34, 55116 Mainz, Germany.

No automated decision-making

No automated decision-making, including profiling within the meaning of Art. 22 GDPR, takes place.