Privacy policy

1. Controller

The controller responsible for data processing on this website is:

Full provider details are set out in our Impressum.

2. Scope and legal bases

We process personal data only where a legal basis permits it. Depending on the situation, that basis is your consent (Art. 6 (1) (a) GDPR), the performance of a contract or steps prior to entering into one (Art. 6 (1) (b) GDPR), a legal obligation (Art. 6 (1) (c) GDPR), or our legitimate interest in operating a secure, functioning website (Art. 6 (1) (f) GDPR).

This website is an information site. There is no user account, no online checkout and no newsletter — the only data you actively provide is what you send us via the contact form or by email.

3. Hosting and server log files

This website is hosted and delivered on Cloudflare Pages, a service of Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA (EU representative: Cloudflare Germany GmbH, Rosental 7, 80331 Munich). Cloudflare also operates as our content delivery network and reverse proxy, and our domain is managed there. Cloudflare acts as our processor under a data processing agreement pursuant to Art. 28 GDPR.

Each time a page is accessed, the requesting IP address, date and time of the request, the page or file requested, referrer URL, browser type and version, operating system and the volume of data transferred are processed. This is technically necessary to deliver the site over an encrypted connection and to defend against attacks and automated abuse. The legal basis is Art. 6 (1) (f) GDPR — our legitimate interest in a secure, reliably available website. Cloudflare stores this connection data only for a limited period for security and operational purposes; we do not maintain or evaluate server log files ourselves, and we do not merge this data with other sources.

Because Cloudflare is a US company, data may be processed on servers outside the EU. Cloudflare is certified under the EU–US Data Privacy Framework, so transfers are covered by the European Commission's adequacy decision; the EU standard contractual clauses apply in addition. Cloudflare's privacy policy: cloudflare.com/privacypolicy.

4. Encrypted transmission (SSL/TLS)

This site uses TLS encryption for all traffic. You can recognise an encrypted connection by the "https://" prefix in the address bar. While encryption is active, the data you transmit cannot be read by third parties.

5. Contact form and email enquiries

If you contact us via the contact form or by email, we process the details you provide — name, company, email address, and the content of your message — solely in order to handle your enquiry and any follow-up questions.

The legal basis is Art. 6 (1) (b) GDPR where your enquiry relates to a contract or to pre-contractual steps such as a quotation, and otherwise Art. 6 (1) (f) GDPR based on our legitimate interest in responding to enquiries addressed to us. We keep this correspondence until the purpose ceases to apply — typically once your enquiry is fully resolved — unless statutory retention periods under commercial or tax law require us to keep it longer.

6. Cookies

We use only technically necessary cookies and local storage entries — to remember your language selection, and the __cf_bm cookie which Cloudflare sets to distinguish human visitors from bots. Both are strictly necessary for the service you requested, so no consent is required under § 25 (2) no. 2 TDDDG; the legal basis for the associated processing is Art. 6 (1) (f) GDPR.

We do not set marketing, retargeting or profiling cookies, and we do not use web analytics. Should we introduce non-essential cookies or third-party tracking in future, we will ask for your consent beforehand via a consent banner, and you will be able to withdraw that consent at any time with the same ease.

7. Google Fonts

This site loads the typefaces Sora and IBM Plex from Google servers (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). When a page opens, your browser connects to those servers, which necessarily discloses your IP address and the page you are viewing to Google. Data may be transferred to servers in the USA.

Where we obtain your consent, the legal basis is Art. 6 (1) (a) GDPR and — for the transfer — Art. 49 (1) (a) GDPR; you may withdraw consent at any time. Google's own privacy information is available at policies.google.com/privacy.

8. Recipients and transfers to third countries

We pass personal data to third parties only where necessary: to processors acting on our instructions under Art. 28 GDPR (hosting, email), to service partners involved in fulfilling a contract, and to public authorities where we are legally obliged to do so. We do not sell personal data.

Where a service involves processing outside the EU/EEA, we rely on an adequacy decision by the European Commission, on the EU standard contractual clauses, or on your explicit consent.

9. Your rights

Under the GDPR you have the following rights in respect of your personal data. To exercise any of them, it is enough to email info@hydrochromtech.com.

Where processing is based on consent, you may withdraw that consent at any time with effect for the future (Art. 7 (3) GDPR). Where it is based on Art. 6 (1) (f) GDPR, you have a right to object.

You also have the right to lodge a complaint with a supervisory authority. The authority responsible for us is the Berliner Beauftragte für Datenschutz und Informationsfreiheit, Alt-Moabit 59–61, 10555 Berlin.

10. No automated decision-making

We do not use automated decision-making or profiling within the meaning of Art. 22 GDPR. Providing personal data is neither legally nor contractually required — without the details in the contact form, however, we cannot answer your enquiry.

11. Changes to this policy

We update this policy when our website or the applicable legal position changes. The version published here always applies.