1. Controller

The controller responsible for data processing on this website pursuant to Art. 4 para. 7 GDPR is:

2. Hosting

This website is hosted by Netlify, Inc., 44 Montgomery Street, Suite 300, San Francisco, CA 94104, USA. When you visit our website, Netlify automatically collects server log files (IP address, browser type, operating system, referrer URL, time of access). This data is processed on the basis of Art. 6 para. 1 lit. f GDPR (legitimate interest in the secure and efficient provision of our website). Data may be transferred to the USA; Netlify uses standard contractual clauses (SCCs) as safeguards pursuant to Art. 46 para. 2 lit. c GDPR.

3. SSL/TLS Encryption

This website uses SSL/TLS encryption for security reasons and to protect the transmission of confidential content. You can recognise an encrypted connection by the “https://” prefix and the lock icon in your browser.

4. Data Collection and Processing

4.1 Contact Form

When you use our contact form, we collect and process the following data:

• Full name
• Company name
• Email address
• Inquiry content

This data is processed for the purpose of responding to your inquiry and establishing business contact. The legal basis is Art. 6 para. 1 lit. f GDPR (legitimate interest in responding to inquiries) or, if applicable, Art. 6 para. 1 lit. b GDPR (pre-contractual measures). Contact form submissions are transmitted via EmailJS, Inc. (USA); standard contractual clauses apply.

4.2 Business Data

In the course of our B2B operations, we process business-related data including:

• Contact information of business partners
• Order and transaction data
• Communication records
• Contractual information

This data is processed for the purpose of fulfilling contracts and conducting business operations. The legal basis is Art. 6 para. 1 lit. b GDPR (contract performance) and Art. 6 para. 1 lit. f GDPR (legitimate interest in business operations).

5. Third-Party Services

5.1 Google Fonts

This website uses fonts provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. When you visit a page, your browser loads the required fonts from Google servers, transmitting your IP address to Google. The legal basis is Art. 6 para. 1 lit. f GDPR (legitimate interest in a uniform and appealing presentation). Data may be transferred to the USA; Google uses SCCs as safeguards.

5.2 Mapbox

We use Mapbox (Mapbox, Inc., 740 15th Street NW, Suite 500, Washington, DC 20005, USA) for map displays. When loading map tiles, your IP address and usage data are transmitted to Mapbox servers. The legal basis is Art. 6 para. 1 lit. f GDPR. Standard contractual clauses apply for data transfers to the USA.

5.3 Iconify

We use Iconify for icon delivery via CDN. When icons are loaded, your browser connects to Iconify servers and your IP address is transmitted. The legal basis is Art. 6 para. 1 lit. f GDPR (legitimate interest in efficient website presentation).

5.4 EmailJS

Our contact form uses EmailJS (EmailJS, Inc., USA) to transmit form submissions. The data you enter in the contact form (name, company, email, message) is sent through EmailJS servers. The legal basis is Art. 6 para. 1 lit. f GDPR. Standard contractual clauses apply.

6. Cookies and Local Storage

This website uses local storage (localStorage) for two strictly necessary purposes: storing your language preference (mecanova-lang) and recording your consent choice (mecanova-consent). The legal basis is Art. 6 para. 1 lit. f GDPR (legitimate interest) in conjunction with § 25 para. 2 TTDSG.

With your explicit opt-in consent, we use Plausible Analytics (Plausible Insights OÜ, Estonia, EU) to understand aggregate visitor traffic. Plausible is cookieless and does not collect personal data or cross-site tracking identifiers. It records anonymous pageviews, referrer, country, and device type. The legal basis is Art. 6 para. 1 lit. a GDPR (consent) and § 25 para. 1 TTDSG.

You can withdraw your consent at any time via the "Cookie Settings" link in the footer. Withdrawal takes effect on the next page load and does not affect the lawfulness of processing carried out before.

7. Data Sharing

We do not share your personal data with third parties, except:

• When required by law or legal process
• When necessary to protect our rights or property
• With service providers who assist in our operations (under strict data processing agreements pursuant to Art. 28 GDPR)

8. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. Business-related data may be retained for longer periods in accordance with commercial and tax law requirements (§257 HGB: 6–10 years; §147 AO: 10 years).

9. Your Rights

Under the GDPR, you have the following rights regarding your personal data:

• Right of access (Art. 15 GDPR): You can request information about the personal data we hold about you.
• Right to rectification (Art. 16 GDPR): You can request correction of inaccurate data.
• Right to erasure (Art. 17 GDPR): You can request deletion of your data under certain circumstances.
• Right to restriction of processing (Art. 18 GDPR): You can request limitation of data processing.
• Right to data portability (Art. 20 GDPR): You can request transfer of your data to another controller.
• Right to object (Art. 21 GDPR): You can object to processing based on legitimate interests.
• Right to withdraw consent (Art. 7 para. 3 GDPR): If processing is based on consent, you can withdraw it at any time.

To exercise these rights, please contact us at info@mecanova.de.

10. Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data violates the GDPR (Art. 77 GDPR). The competent supervisory authority for our company is:

11. Data Security

We implement appropriate technical and organisational measures pursuant to Art. 32 GDPR to protect your personal data against unauthorised access, loss, destruction, or alteration. All data transmissions to and from this website are encrypted via SSL/TLS.

12. Changes to This Privacy Policy

We may update this privacy policy from time to time. We will notify you of any material changes by posting the new privacy policy on this page and updating the “Last updated” date.

13. Contact

If you have questions about this privacy policy or our data processing practices, please contact us: