Privacy Policy – fototronik.de | David Ebener

(as of January 16, 2026)


I. Data protection at a glance


1. General Information

This privacy policy informs you about the processing of your personal data on our website. Personal data is any information that can be used to personally identify you.


We place the utmost importance on protecting your data and treat it confidentially. You can find complete information in the following sections.


2. Data collection on this website


Directly from the user:

  • Information provided in contact forms
  • Contact us via email, telephone or fax


Automatically through IT systems:

  • IP address
  • Browser type and version
  • operating system
  • Referrer URL
  • Time of access
  • further system information


Purpose of processing

  • Provision and optimization of the website
  • Handling of requests
  • Analysis of user behavior
  • Marketing purposes (only with consent)


Your rights

  • Information about stored data
  • Correction or deletion
  • Restriction of processing
  • Revocation of granted consent
  • Objection to the processing
  • Right to lodge a complaint with the competent supervisory authority
  • Right to data portability


A notice: Consent can be easily withdrawn at any time; objections can be lodged at any time with effect for the future.


II. Hosting
1. Hosting provider:

IONOS SE, Elgendorfer Str. 57, 56410 Montabaur


2. Legal basis:

  • Article 6 paragraph 1 letter f GDPR (legitimate interest)
  • Article 6(1)(a) GDPR (consent) and Section 25 TTDSG (consent for access to end-user devices)


3. Data processing on behalf of the controller:

We have concluded a data processing agreement (DPA) with IONOS to ensure GDPR-compliant data processing.


4. Transfer to third countries:

Where data is transferred to third countries outside the EU/EEA, this will only be done on the basis of suitable safeguards (e.g. standard contractual clauses or EU-US Data Privacy Framework).


III. General Information and Mandatory Disclosures


1. Controller

David Ebener

Alter Muehlenweg 14

49504 Lotte

Germany


Phone:
+49 (0)5404 973 9611

Email: office@fototronik.de


The responsible body is the person who decides on the purposes and means of processing personal data.


2. Storage duration

Data will be deleted as soon as the purpose for which it was collected no longer applies, unless there are statutory retention periods.


Example:
Contact requests will be deleted after 24 months, unless longer is required by law.


3. Legal basis

  • Article 6 paragraph 1 letter a GDPR – Consent
  • Article 6 paragraph 1 letter b GDPR – Contract / pre-contractual measures
  • Article 6(1)(c) GDPR – legal obligation
  • Article 6 paragraph 1 letter f GDPR – legitimate interest
  • Section 25 TTDSG – Access to end devices only with consent


4. Recipients of personal data

  • External parties only when necessary for contract fulfillment, legal obligation, or legitimate interest.
  • Data processors only on the basis of a data processing agreement


5. Withdrawal of consent and objection

  • Consent can be withdrawn at any time.
  • Objection to processing for special reasons or direct marketing (Art. 21 GDPR)


6. Other rights

  • Right to lodge a complaint with a supervisory authority
  • Right to data portability
  • Right to information, rectification, erasure or restriction of processing


7. Safety

  • SSL/TLS encryption (“https://”)
  • You can object to unsolicited advertising emails at any time.
  • Internal and technical measures to protect personal data have been implemented (access control, encryption, pseudonymization/anonymization where possible).


IV. Data collection on this website


1. Cookies

  • Technically necessary cookies (e.g. for session management)
  • Analytics and personalization cookies (only with consent)
  • Session cookies are deleted after your visit.
  • Persistent cookies remain until deleted by the user.
  • Legal basis: Art. 6(1)(f) GDPR (necessary cookies) or Art. 6(1)(a) GDPR (consent) and Section 25 TTDSG (access to end-user devices)


2. Contact form

  • Saving the entries for editing
  • Legal basis: Art. 6(1)(b) GDPR (performance of a contract or pre-contractual measures) or Art. 6(1)(f) GDPR (legitimate interest); Art. 6(1)(a) GDPR where consent is given.
  • Deletion after purpose has ceased to exist


3. Email, telephone, fax

  • Storage for processing and possible follow-up
  • Deletion after completion or upon request


V. Social Media


1. Facebook & Instagram

(Meta Platforms Ireland Ltd.)

  • Data transfer only with consent
  • Legal basis: Article 6(1)(f) GDPR or Article 6(1)(a) GDPR in the case of consent.
  • EU-US Data Privacy Framework certified


A notice:
Meta data protection


2. YouTube

  • Enhanced privacy mode
  • Legal basis: Article 6(1)(f) GDPR or Article 6(1)(a) GDPR in the case of consent.


3. Spotify

  • Display of content
  • Legal basis: Article 6(1)(f) GDPR or Article 6(1)(a) GDPR in the case of consent.


Note regarding data transfer:
  Loading content establishes a connection to third-party servers; data may be transferred to these servers. Please refer to the privacy policies of these third-party providers.


A notice:
Social media will only be used after explicit consent.


VI. Analytics Tools and Advertising


1. IONOS WebAnalytics

  • Analysis of anonymized visitor numbers, behavior, devices
  • Cookies are not stored.
  • Legal basis: Art. 6 para. 1 lit. f GDPR
  • AVV is available


2. Marketing & Tracking

  • Use only with consent
  • Adaptation to current EU-US Data Privacy Framework standard.


VII. Plugins and Tools


1. Google reCAPTCHA

  • Protection against abuse and spam
  • Legal basis: Article 6(1)(f) GDPR or Article 6(1)(a) GDPR in the case of consent.


A notice:
Google Privacy


2. Other tools

  • Only with consent or legitimate interest
  • Data processing on behalf of a controller with data processing agreement (DPA), if require


VIII. Changes to the Privacy Policy

We reserve the right to amend this privacy policy to reflect legal changes or technical advancements. Please review the policy regularly.