Privacy and cookies
This is an English translation provided for convenience. The German version is the legally binding one; in case of discrepancies, the German version prevails. Zur deutschen Fassung
1. Controller
The controller for the processing of personal data is:
Dengel GmbHAlbert-Schweitzer-Strasse 84
67655 Kaiserslautern
Germany
Contact: through the contact form on this website
2. Provision of the website
The website is delivered via Cloudflare Pages. When it is accessed, the hosting provider processes technically necessary connection data. This may include in particular the IP address, the time of access, the address requested, browser information, operating system and security-related event data.
This processing serves the secure, stable and error-free provision of the website as well as the prevention of abusive access. The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure operation of the website.
Processor:
Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA
Storage period:
The data is processed until the contractual relationship with Cloudflare ends or until its processing is no longer necessary for the provision of the agreed services, whichever occurs earlier. Differing product-specific or statutory retention periods remain unaffected.
Transfer to third countries:
Cloudflare may also process personal data outside the European Economic Area, in particular in the USA. Transfers to the USA take place on the basis of Cloudflare's certification under the EU-U.S. Data Privacy Framework. Where its requirements are not met, the standard contractual clauses adopted by the European Commission are used, including the supplementary safeguards provided for in the Cloudflare Data Processing Addendum.
3. Contact form
If you use the contact form, we process the information you enter. First name, last name, email address and your enquiry are required. You may optionally provide a salutation, academic title, telephone number and country.
The information is used exclusively to review your enquiry and to answer it personally. Insofar as your enquiry serves to initiate a contractual relationship, the processing takes place on the basis of Art. 6(1)(b) GDPR. For other enquiries it takes place on the basis of Art. 6(1)(f) GDPR. Our legitimate interest lies in handling business and project-related enquiries.
Microsoft 365 and Microsoft Graph are used for transmission and processing.
Recipient:
Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland
Storage period:
Declined enquiries are deleted no later than six months after processing has been completed. Open enquiries are stored for the duration of the correspondence and for no longer than 24 months after the last contact. If a contractual relationship arises from the enquiry, the relevant data is stored for its duration and thereafter in accordance with the statutory retention periods. These are in particular six years for commercial and business letters and eight years for accounting records.
Transfer to third countries:
Microsoft may also process personal data outside the European Economic Area in the course of providing and supporting its services. Such transfers take place on the basis of the standard contractual clauses adopted by the European Commission and the supplementary protective measures provided for in the Microsoft Products and Services Data Protection Addendum. Microsoft is additionally certified under the EU-U.S. Data Privacy Framework, but does not base the transfer of personal data from the EU or the EEA on that certification.
Please do not submit any special categories of personal data or confidential information through the form that is not necessary for an initial contact.
4. Protection of the contact form
The form is protected against automated and abusive input by Cloudflare Turnstile. Turnstile is executed only in connection with the submission of the form.
In this context, the IP address, browser and device information, interaction data, the time and the result of the security check may in particular be processed. The processing serves to protect the form and our technical systems against spam and automated attacks. The legal basis is Art. 6(1)(f) GDPR.
Provider:
Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA
Storage period:
The verification tokens generated expire after 300 seconds and can only be used once. Beyond that, the processed data is stored only for as long as is necessary for the provision and security of the service.
The technically necessary access to browser and device information serves the security check and the protection of the contact form. The legal basis for this is § 25(2) no. 2 TDDDG.
5. Protection against misuse and rate limiting
To protect the contact form and the connected systems against automated or abusive requests, we technically limit submission attempts.
For this purpose, a pseudonymised identifier is derived from the IP address and processed temporarily together with the technical information required for the limitation. The IP address is not stored in plain text in the application's own storage.
Storage takes place only for the period required to detect and limit misuse. The rate-limit time window technically defined for this purpose is decisive. The data is then deleted automatically.
The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in protecting the contact form and the connected systems against automated or abusive use.
6. Cookies and local storage
This website does not set any cookies of its own and does not store any data in the browser's local storage or session storage. It uses neither analytics nor marketing cookies.
Cloudflare Turnstile is executed only in connection with the submission of the contact form and loads a script from challenges.cloudflare.com for that purpose. In the course of the security check, Turnstile may carry out storage operations of its own in the browser; these fall under the responsibility of Cloudflare. See section 4.
Technically necessary storage and security operations are used exclusively insofar as they are required for the provision of the website or the protection of the contact form.
7. Recipients
Personal data is disclosed only to bodies that need it for the purposes stated. The technical service providers used process data exclusively within the scope of the respective contractual and statutory requirements.
8. Storage period
We store personal data only for as long as is necessary for the respective purpose or as long as statutory retention obligations exist. The periods for hosting, the form, Turnstile and rate limiting are described in the respective sections.
9. Your rights
Subject to the statutory requirements, you have the right to information, rectification, erasure, restriction of processing and data portability. You may object to processing based on legitimate interests. Consent that has been given may be withdrawn with effect for the future.
To exercise your rights, please contact:
the contact form on this website or the postal address stated above.
10. Right to lodge a complaint
You have the right to lodge a complaint with a data protection supervisory authority.
Competent supervisory authority:
Der Landesbeauftragte fuer den Datenschutz und die Informationsfreiheit Rheinland-PfalzHintere Bleiche 34
55116 Mainz
Germany
Website: www.datenschutz.rlp.de
11. Status
Status: August 2026