Privacy policy
Privacy policy
Legal priority: This English translation is provided for information only. In the event of differences, the German privacy policy is authoritative.
1. Controller
André Hurzig, trading as ProFab-L, Sattelhofstraße 22, 04179 Leipzig, Germany; email info@profab-l.de; telephone +49 176 43 35 64 07. No data protection officer has been appointed because the statutory requirements for appointment are not met.
2. Scope and principles
This policy explains processing when you visit this website, make contact or enter into a business relationship. Processing follows the principles of lawfulness, purpose limitation, data minimisation, accuracy, storage limitation, integrity and confidentiality under the UK GDPR where applicable and the EU GDPR.
3. Hosting and server logs
The website and email service are hosted by STRATO AG, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany, under a data-processing agreement. On access, the server technically processes the requested resource, date and time, transferred volume, referrer, browser, operating system and IP address. The basis is Article 6(1)(f) GDPR: secure, stable delivery and defence against misuse. Identifiable log data are retained for no more than seven days and then anonymised, unless a security incident requires evidence to be retained.
4. Encrypted transmission
TLS encryption protects transmission between your browser and the server. Encryption cannot guarantee absolute security outside ProFab-L’s sphere of control. Please do not send unnecessary confidential information through the initial contact form.
5. Contact form
The Contact Form 7 form processes request category, name, email address and message as required fields; company, telephone and subject are voluntary. Processing is necessary to answer pre-contractual or contractual enquiries under Article 6(1)(b) GDPR, or is based on the legitimate interest in answering other enquiries under Article 6(1)(f) GDPR. The add-on does not store submitted messages in WordPress; the message is transmitted by email.
6. Local spam protection
The form uses a hidden honeypot and a signed start time to identify automated or implausibly fast submissions. No external CAPTCHA or spam service is used, and the mechanism does not use cookies or evaluate your IP address. The basis is Article 6(1)(f) GDPR: protecting the form and mail infrastructure against automated submissions.
7. Email and telephone enquiries
When you contact ProFab-L by email or telephone, the information you provide is processed to handle the request and any follow-up. The basis is Article 6(1)(b) GDPR for contract-related communication and Article 6(1)(f) GDPR for other legitimate business communication.
8. Prospects, clients and project data
Contact details, correspondence, requirements, offers, contracts, project documents and performance records are processed for acquisition, planning, delivery, documentation and settlement. The basis is Article 6(1)(b) GDPR and, for defensible documentation and efficient business organisation, Article 6(1)(f) GDPR.
9. Recipients and processors
Data are disclosed only where necessary: to hosting and email providers, tax advisers, banks, postal or logistics providers, and carefully selected project partners or public bodies where legally required. Processors are bound under Article 28 GDPR. No sale of personal data takes place.
10. International transfers and cloud services
Website and contact-form data are not intentionally stored in non-European cloud services by this website. If a project requires a tool involving a third-country transfer, its use and safeguards are assessed separately and communicated where required.
11. Retention and deletion
Data are retained only as long as needed for the stated purpose. Unsuccessful enquiries are normally deleted when no further communication or claim is expected. Contract and accounting records are retained for statutory periods, generally six, eight or ten years depending on the record and applicable German law. Data required for legal claims may be retained until limitation periods expire.
12. Accounting and statutory obligations
Invoices, booking records and tax-relevant documents are processed and retained to meet obligations under German commercial and tax law. The basis is Article 6(1)(c) GDPR. Data may be transmitted to tax authorities, advisers and auditors where required.
13. Backups and data security
Appropriate technical and organisational measures protect data against accidental loss, unauthorised access and alteration. Necessary backups may contain data until they are overwritten within the backup cycle. Access is restricted to authorised persons. Absolute security cannot be guaranteed.
14. Cookies, analytics and external resources
This website does not use analytics, advertising tracking or external CAPTCHA services through this add-on. The English pages load no third-party fonts, scripts, styles or embeds. Technically necessary data from WordPress or an authenticated administration session remain governed by the relevant system configuration.
15. Use of AI language tools
For selected internal drafting or language work, text may be processed with ChatGPT only after minimisation and, where appropriate, anonymisation. Confidential project data and personal data are not submitted without a suitable legal basis, necessity assessment and required safeguards. AI output is reviewed by a person and is not used for decisions producing legal or similarly significant effects within Article 22 GDPR.
16. Your rights and complaints
Subject to the statutory conditions, you have rights of access, rectification, erasure, restriction, data portability and objection, and the right to withdraw consent for the future. You may complain to a supervisory authority; for the controller’s establishment this is the Saxon Data Protection and Transparency Commissioner. To exercise a right, contact info@profab-l.de. This policy is reviewed when processing or legal requirements change.
Version: 18 September 2026. This translation is an informative working version and does not constitute legal advice.