Draft — pending final legal review. The final policy will be published once the technical stack (analytics, cookies, fonts, form services) is confirmed.
The controller responsible for processing personal data through this website is:
SSP Edelstahl GmbH
Campusallee 10 51379 Leverkusen Germany
Telephone: +49 2171 7768212
Email: info@ssp-edelstahl.de
Website: https://ssp-edelstahl.de/
Unless otherwise stated below, SSP Stainless Steel GmbH determines the purposes and means of processing personal data collected through this website.
We process personal data only to the extent necessary to provide and secure this website, respond to inquiries, prepare quotations, assess potential business relationships and comply with applicable legal obligations.
Personal data means any information relating to an identified or identifiable natural person.
The principal legal bases used for processing are:
When you visit this website, the hosting infrastructure may automatically process technical information necessary to display and secure the website. This information may include:
This processing is necessary to ensure the stability, functionality and security of the website, identify technical problems and prevent misuse or attacks.
The legal basis is Article 6(1)(f) GDPR. Our legitimate interests are the secure and reliable operation of the website and the protection of our information systems.
Server log files are generally retained for no longer than 30 days unless longer retention is necessary to investigate a security incident, establish or defend legal claims, or comply with a legal obligation.
This website is hosted using SiteGround services. In providing hosting, security, backup and related technical services, the hosting provider may process website and server data on our behalf.
SiteGround acts as a processor to the extent that it processes personal data according to our instructions. Appropriate contractual data-protection arrangements, including a data processing agreement where required, should be maintained with the hosting provider.
Depending on the hosting, infrastructure and content-delivery configuration, service providers or subprocessors may process data inside or outside the European Economic Area. Where a transfer to a third country takes place, it will be based on an applicable adequacy decision or appropriate safeguards in accordance with Articles 44–49 GDPR, such as the European Commission’s Standard Contractual Clauses.
If you contact us by email or telephone, we process the information you provide, such as your name, company, contact details and the content of your communication.
The data is processed to respond to your request, conduct business correspondence, prepare or perform a contract and maintain necessary records.
The legal basis is Article 6(1)(b) GDPR where your communication concerns a contract or pre-contractual measures. In other cases, the legal basis is Article 6(1)(f) GDPR. Our legitimate interest is the proper handling of business communications and inquiries.
The website provides contact, quotation-request and partnership forms. Depending on the form used, we may collect:
Please do not upload personal data, confidential information or documents that are not necessary for your request.
Form information is processed to:
The legal basis is Article 6(1)(b) GDPR where processing is necessary to respond to a request concerning a potential or existing contract. For general business inquiries and relationship management, processing is based on Article 6(1)(f) GDPR. Our legitimate interests are processing business inquiries efficiently and developing and maintaining commercial relationships.
Form submissions may be stored in the website’s administration system and forwarded to authorised recipients by email through the configured SMTP service.
Personal data is accessible only to persons and service providers who require it for the relevant purpose. Recipients may include:
We do not sell personal data.
Service providers that process personal data on our behalf are contractually required to process it only according to our instructions and to apply appropriate security measures.
We retain personal data only for as long as necessary for the purpose for which it was collected.
General inquiries that do not result in a business relationship are normally deleted no later than three years after the end of the calendar year in which the inquiry was completed, unless earlier deletion is appropriate or longer retention is required.
Where an inquiry leads to a contractual relationship, relevant information may be retained for the duration of the relationship and afterwards for the applicable statutory commercial, tax and limitation periods.
Data may be retained for longer where necessary to comply with a legal obligation or to establish, exercise or defend legal claims.
Uploaded files follow the same retention principles as the related inquiry.
This website may use technically necessary cookies or comparable technologies that are required for basic website functionality, security, language selection or administration.
Technically necessary technologies are used on the basis of the applicable German telecommunications and data-protection rules and, where personal data is processed, Article 6(1)(f) GDPR.
At the time of this policy, the public website is not intended to use analytics, advertising or marketing cookies. Such non-essential technologies will not be activated without any consent required by law.
If analytics, advertising, embedded media or other optional services are introduced later, this Privacy Policy and the website’s consent mechanism must be updated before those services are activated.
The website may contain links to external websites, including Google Maps. A connection to the external provider is established only when you follow such a link.
After leaving our website, the external provider is responsible for its own processing of personal data. Please review the provider’s privacy information before using the external service.
The presence of an external link does not mean that we control the provider’s data-processing practices.
We do not use personal data collected through this website for automated decision-making, including profiling, within the meaning of Article 22 GDPR.
We use appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.
The website uses encrypted HTTPS transmission. Nevertheless, no method of electronic transmission or storage can guarantee absolute security.
Subject to the applicable legal requirements, you have the right to:
Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
To exercise your rights, contact:
We may request additional information where reasonably necessary to verify your identity.
You have the right to lodge a complaint with a data-protection supervisory authority.
The supervisory authority responsible for our place of establishment is:
Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen
Kavalleriestraße 2–4
40213 Düsseldorf
Germany
Telephone: +49 211 38424-0
Email: poststelle@ldi.nrw.de
Website: https://www.ldi.nrw.de/
You may also contact another competent supervisory authority, particularly in the EU Member State of your habitual residence, place of work or the place of the alleged infringement.
You are not legally required to provide personal data through the website.
However, information marked as mandatory is required for us to process the relevant inquiry. If you do not provide this information, we may be unable to respond to or properly evaluate your request.
We may update this Privacy Policy where the website, services, legal requirements or processing activities change.
The version published on this website at the time of your visit applies. The date of the latest update appears at the beginning of this policy.