Privacy policy

Protecting your personal data matters to us. This website can be used without providing any personal data. There is no registration, no newsletter, no customer account and no comment system. Below we explain, as required by Art. 13 GDPR, which data is processed when you visit this site.

The controller within the meaning of the GDPR is:

Aslams GbR
Frankfurter Straße 151 C
63303 Dreieich
Germany

Phone: +49 (0) 6074 239 8872
Email: info@aslams.de
Website: www.aslams.de

This website is hosted on servers of Hetzner Online GmbH, Industriestraße 25, 91710 Gunzenhausen, Germany, in a data centre within the European Union. A data processing agreement under Art. 28 GDPR is in place with the provider.

Every request automatically stores information in so-called server log files, transmitted by your browser: browser type and version, operating system, referrer URL, requested page, date and time of access, and the IP address. This data is technically necessary to operate and secure the website and is not merged with other data sources.

The legal basis is Art. 6 (1) (f) GDPR. Our legitimate interest lies in delivering the site without technical faults and in defending our systems against attacks. Log files are deleted after 30 days at the latest.

This website sets no cookies without your consent. Cookies are used solely for Google Analytics (see section 5), and only after you have explicitly agreed via the notice shown on your first visit. If you decline, no cookie is set.

Your cookie decision, and your light or dark theme preference if you use the toggle, are stored in your browser’s local storage. These are purely technical settings without any personal reference; they never leave your device and can be deleted at any time through your browser settings. Storing your cookie decision does not require consent under § 25 (2) no. 2 TDDDG, since its sole purpose is to respect your choice.

To evaluate how the site is used, we run Umami, an open-source analytics tool that we host ourselves on our own server. No data is passed to third parties and no data is processed outside the European Union.

Umami works without cookies and without cross-device recognition. It records the pages viewed, the referrer, approximate region, browser, operating system and device type, and individual interactions such as clicking a product link. IP addresses are used only for coarse geographic attribution and are not stored in clear text. This does not allow us to identify individual persons.

The legal basis is Art. 6 (1) (f) GDPR. Our legitimate interest lies in designing the site to meet its visitors’ needs. Since no information is stored on or read from your device, consent under § 25 TDDDG is not required.

If you have given consent, we use Google Analytics 4, a web analytics service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Without your consent no script from Google is loaded and no data is transmitted to Google.

Google Analytics sets cookies (in particular _ga and _ga_*, with a lifetime of up to two years) and records pages viewed, time on page, referrer, approximate location, browser, operating system and device type, as well as a pseudonymous user ID. Google Analytics 4 does not store IP addresses and uses them only for coarse location detection. Data may be transferred to servers of Google LLC in the United States. Google is certified under the EU-US Data Privacy Framework; the transfer is based on the European Commission’s adequacy decision and, in addition, on standard contractual clauses.

The legal basis is your consent under Art. 6 (1) (a) GDPR and § 25 (1) TDDDG. You can withdraw your consent at any time with effect for the future by clicking “Cookie settings” in the page footer and choosing “Decline”. The cookies set by Google Analytics are then deleted. Google retains the data for 14 months and deletes it automatically afterwards. Further information is available in Google’s privacy policy.

The fonts used on this website are served from our own server. There is no connection to Google Fonts or any other external provider, so your IP address is not transmitted to third parties for this purpose.

If you contact us by email, we process your email address and the information you provide in your message solely to handle your request. The legal basis is Art. 6 (1) (b) GDPR for enquiries relating to a contract, and otherwise Art. 6 (1) (f) GDPR.

Please note that email transmission can have security gaps. Your enquiry is deleted once it has been fully dealt with and no statutory retention periods apply.

This website links to our own and to third-party product sites. The links carry campaign parameters (UTM parameters) that let the destination recognise that the visit originated here. They contain no personal data. The operator of the destination site is responsible for processing there; that site’s privacy notice applies.

We process personal data only for as long as necessary for the respective purpose or as required by statutory retention and documentation obligations. Once the purpose no longer applies or a retention period expires, the data is routinely deleted or restricted.

You have the following rights against us:

The right of access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR), data portability (Art. 20 GDPR), and the right to object to processing based on legitimate interests (Art. 21 GDPR). Any consent you have given can be withdrawn at any time with effect for the future.

To exercise your rights, a message to info@aslams.de is sufficient.

Without prejudice to any other remedy, you have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your data infringes the GDPR. The authority responsible for us is the Hessian Commissioner for Data Protection and Freedom of Information (Der Hessische Beauftragte für Datenschutz und Informationsfreiheit), Postfach 3163, 65021 Wiesbaden, Germany.

No automated decision-making, including profiling, within the meaning of Art. 22 GDPR takes place.