Privacy policy

1. Controller

The controller responsible for processing personal data on this website is:

Erhardt ERKO GmbH
Siemensstraße 15
74722 Buchen (Odenwald)
Germany

Email: info@erhardt-erko.de
Telephone: +49 6281 5201-0

2. Data protection officer

You can contact our data protection officer at:

OK-Datenschutz · Oliver Kaulbach
Carl-Benz-Straße 4
74912 Kirchardt

Email: info@ok-datenschutz.de
Telephone: +49 172 6373911

3. Hosting and provision of the website

This website is hosted by lima-city, a service of TrafficPlex GmbH, Konsul-Smidt-Str. 90, 28217 Bremen, Germany.

When you visit our website, technically necessary data is processed. This may include:

• the IP address of the device accessing the website,
• the date and time of access,
• the page or file requested,
• the amount of data transferred,
• the HTTP status code,
• referrer information, where supplied by the browser,
• the browser and operating system used, or user agent,
• technical access, request and security information.

Processing this data is necessary to provide the website, maintain its stability and security, identify technical errors and prevent misuse or attacks.

The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is the secure, stable and functional operation of our website.

Where the hosting provider processes personal data on our behalf, this is governed by a data processing agreement under Article 28 GDPR.

4. Cookies, local storage and privacy settings

We do not use cookies for advertising. Cookies for statistical analysis using Google Analytics 4 are used only after your prior consent. Further information is provided in the section on web analytics and Google Analytics.

To store your privacy settings, your browser may save information in local storage. Only your selected setting, the version of the privacy settings and the expiry time are stored.

The setting is stored for up to 180 days. You can change your choice at any time using the Privacy settings link in the website footer. You can also delete stored website data through your browser settings.

Storing this information is necessary to respect your chosen privacy setting. Where information is stored on or read from your device for this purpose, the legal basis is Section 25(2)(2) TDDDG. Where personal data is processed, the legal basis is Article 6(1)(f) GDPR. Our legitimate interest is to implement and document your privacy settings technically.

The hosting provider may also use technically necessary protection mechanisms to detect and prevent automated or abusive access.

5. Contact and project enquiries

Our website may provide a contact or project enquiry form.

The following data may be processed:

• company,
• first and last name,
• email address,
• telephone number, if provided,
• the content of your message,
• information about your project,
• selected products and accessories,
• files you upload, where applicable.

Required fields are marked. Without the information requested in these fields, we may be unable to process your enquiry.

We use the submitted data solely to process your enquiry, clarify technical or commercial matters and, where applicable, prepare a quotation and initiate or perform a contract.

If your enquiry relates to initiating or performing a contract with you, the legal basis is Article 6(1)(b) GDPR.

Business enquiries, particularly where you act as a company contact, are processed under Article 6(1)(f) GDPR. Our legitimate interest is to handle and respond to business enquiries and maintain our business relationships.

Where statutory retention obligations apply, further storage may be based on Article 6(1)(c) GDPR.

Data is deleted when it is no longer needed for the enquiry or any subsequent contractual or business relationship, unless statutory retention obligations or other legitimate grounds require continued storage.

6. Uploading PDF files

Where a project enquiry form is available, you may optionally submit PDF documents.

Up to three PDF files may be uploaded, with a maximum of 10 MiB per file and 20 MiB in total.

The server checks the files, particularly their file type, basic file structure and size, and then processes them with your enquiry.

Uploaded files are not permanently stored in a publicly accessible area of our website. Temporary upload files are removed from the web server after technical processing is complete.

Where files subsequently become part of an email or a business process, their further retention follows the applicable operational and statutory retention periods.

Please submit only documents needed to process your enquiry. In particular, do not submit special categories of personal data under Article 9 GDPR unless this is necessary for your enquiry and has been expressly agreed with us.

7. Protection against spam and misuse

We use technical safeguards to protect our contact form and IT systems against automated enquiries, spam and other misuse.

These may process pseudonymised values derived from technical network and access information, together with request identifiers and timestamps.

Your message content and uploaded PDFs are not stored in the protection data used for this purpose.

Processing is based on Article 6(1)(f) GDPR. Our legitimate interest is to protect our website, IT systems and communication channels against spam, automated attacks and misuse.

The relevant protection information is normally removed from active records after 24 hours. Regular technical cleanup is also carried out. Technical faults may cause a slight delay in actual deletion.

The values used are pseudonymised and must not be considered anonymous.

8. Contact by email and telephone

If you contact us by email or telephone, we process the information you provide to handle and respond to your enquiry.

This may include your name, contact details, company information, message content and information you share during a conversation.

Enquiries relating to initiating or performing a contract are processed under Article 6(1)(b) GDPR.

Other business enquiries are processed under Article 6(1)(f) GDPR. Our legitimate interest is to handle business communications and maintain our business relationships.

Where statutory retention obligations apply, further storage is based on Article 6(1)(c) GDPR.

We operate our own mail server for business email communications; no external email service provider is used for this purpose. Website form enquiries are initially processed on the web server hosted by lima-city and forwarded by email from there.

9. Web analytics and Google Analytics

We use Google Analytics 4, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, to analyse use of our public website statistically. This helps us understand interest in our pages and services and how the website is used.

Google Analytics is loaded only after you expressly consent to statistics in our privacy settings. Without consent, or if you decline, neither the Analytics script nor Analytics measurement requests are sent to Google. Essential website functions and handling your enquiry are available independently of this choice.

Data processed and purposes

Data may include pages visited, access times and duration, device and browser information, screen characteristics, approximate geographical information and pseudonymous cookie identifiers. Selected usage events may also be recorded, such as service sections viewed, public data sheet downloads, contact clicks and successfully submitted project or accessory enquiries.

Our configured events do not transmit names, email addresses, telephone numbers, message text, drawings or uploaded PDF content to Google Analytics. Page addresses are sent without query parameters or fragments; email addresses and telephone numbers in contact links are not sent as event values. Successful enquiry tracking includes only the enquiry type, not its content.

Your IP address is processed technically when a connection is established. According to Google, IP addresses of users in the EU, Switzerland and the United Kingdom are not logged or stored in Google Analytics. This does not mean that all collected usage data is anonymous. Google signals and personalised advertising signals are disabled in our website integration.

Consent and withdrawal

The legal bases are your consent under Article 6(1)(a) GDPR and, for storing or reading information on your device, Section 25(1) TDDDG. You can withdraw consent at any time through Privacy settings in the footer. Withdrawal stops further Analytics collection by our website; Analytics cookies set by our integration are deleted where technically possible. The lawfulness of processing before withdrawal is unaffected.

Cookies and retention

After consent, Google Analytics uses in particular the cookies _ga to distinguish browsers and _ga_<measurement-ID> to identify the session. In our integration, the cookie lifetime is limited to 180 days; automatic extension with further use is disabled. Your consent decision is also stored in local browser storage for up to 180 days.

User and event data in the standard property are deleted according to the retention period configured in the Analytics account, which is no more than 14 months. Aggregated standard reports are not subject to this period. Google provides additional data deletion functions.

Recipients and transfers to the USA

Recipients may include Google Ireland Limited, Google LLC and subcontractors used by Google. Processing in the USA cannot be ruled out. Google LLC is certified under the EU-US Data Privacy Framework. Transfers covered by it are subject to a European Commission adequacy decision under Article 45 GDPR. Where necessary, Google also provides standard contractual clauses under Article 46 GDPR.

Google provides data processing terms. Further information is available in Google's privacy policy, the data processing terms and the information on international data transfers.

10. External content and services

Images, scripts and documents are generally supplied through our website infrastructure.

In particular, we currently do not embed external:

• Google Fonts,
• maps or mapping services,
• YouTube or other video embeds,
• social media feeds,
• CAPTCHA services.

System fonts are used to display the website.

Where our website links to external websites, a connection to the external provider is established only when you follow that link. The respective provider is generally responsible for data processing there.

11. Downloading enquiry drafts

Where our website offers an enquiry draft download, the file is saved on your device only when you expressly choose to download it.

The draft may contain your entered contact details, selections and the names of selected files. Uploaded PDFs themselves are not included in this text file.

Further storage and use of the downloaded file take place on your device and under your control.

12. Recipients of personal data

Within our company, only those departments that need personal data for their tasks receive access.

Personal data may also be transmitted to technical service providers we use, including:

• hosting and IT service providers,
• communication service providers, where actually used,
• other processors used to provide our systems.

Where legally required, providers processing personal data on our behalf are contractually bound under Article 28 GDPR.

13. Transfers to third countries

Transfers of personal data to recipients outside the European Union or European Economic Area take place only in accordance with Articles 44 et seq. GDPR.

14. Retention periods

We generally retain personal data only for as long as necessary for the relevant processing purpose.

Statutory retention obligations may also apply, particularly under commercial or tax law. After these periods expire, data is deleted unless another legal basis supports continued processing.

Longer retention may also be permitted where necessary to establish, exercise or defend legal claims.

Specific retention periods for particular processing activities are stated in the corresponding sections of this privacy policy.

15. No automated decision-making

This website does not involve decisions based solely on automated processing, including profiling, within the meaning of Article 22 GDPR.

16. Your rights

Subject to the statutory conditions, your rights include:

• access to the personal data we process under Article 15 GDPR,
• rectification of inaccurate or incomplete data under Article 16 GDPR,
• erasure of personal data under Article 17 GDPR,
• restriction of processing under Article 18 GDPR,
• data portability under Article 20 GDPR,
• objection to processing under Article 21 GDPR.

Where processing is based on consent, you can withdraw consent at any time with effect for the future under Article 7(3) GDPR. This does not affect the lawfulness of processing before withdrawal.

Right to object

Where we process personal data under Article 6(1)(f) GDPR, Article 21 GDPR gives you the right to object at any time on grounds relating to your particular situation.

17. Right to lodge a complaint with a supervisory authority

Under Article 77 GDPR, you may lodge a complaint with a data protection supervisory authority if you consider that processing your personal data infringes data protection rules.

The following supervisory authority is responsible in particular for our registered office:

The State Commissioner for Data Protection and Freedom of Information Baden-Württemberg
Heilbronner Straße 35
70191 Stuttgart

Telephone: +49 711 615541-0
Email: poststelle@lfdi.bwl.de

You may also contact another supervisory authority responsible for you.

18. Updates to this privacy policy

We update this privacy policy when our services, data processing on this website or legal requirements change.

The version published on this website applies.