Privacy policy

This notice explains how personal data is processed when you visit this ZEIG HERZ website or contact us. It has been prepared on the basis of the functions used on this website and the company information provided on ullrich.info.

1. Data controller

2. Website operation and hosting

When you visit the website, the web server processes technical connection information required to deliver the website. This may include your IP address, date and time, requested files, status code, referring page, browser type and operating system. Processing is carried out to deliver content, diagnose errors and protect the service. The legal basis is generally Article 6(1)(f) of the GDPR. Hosting providers may process this data on our behalf.

The retention period for server logs depends on the actual hosting configuration and must be verified with the hosting provider.

3. Contact by email or telephone

If you email or call us, we process your contact details and the content of your enquiry to respond to it. Where this relates to entering into or performing a contract, processing is based in particular on Article 6(1)(b) GDPR; for general enquiries it is based on Article 6(1)(f) GDPR.

4. Fonts (Google Fonts)

The website loads Google Fonts from external servers. The provider in Europe is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. In particular, your IP address may be transmitted to Google. For details about data processing, see Google’s privacy policy. Before the website goes live, it should be checked whether the fonts need to be hosted locally or a legally compliant consent solution is required.

5. Cookies, analytics and embedded services

The current website package does not contain proprietary analytics or advertising tracking scripts. The site uses locally hosted JavaScript libraries for its design and navigation. General statements about cookies or embedded services on the future live server can only be made after the production environment has been technically reviewed. If analytics, marketing or other external services are added, this notice must be updated accordingly.

6. Recipients of personal data

Personal data may be shared with technical service providers where this is necessary to operate the website or handle your enquiry. Where legally required, such providers are contractually obliged to protect personal data. The use of external services may involve processing outside the European Economic Area; the relevant legal conditions and safeguards applicable to the particular services apply.

7. Retention periods

As a rule, we retain personal data only for as long as it is needed for the relevant purpose or required by statutory retention obligations. It is then deleted unless another legal basis permits further storage.

8. Your rights

Subject to the statutory requirements, you have the right of access (Article 15 GDPR), rectification (Article 16), erasure (Article 17), restriction of processing (Article 18) and data portability (Article 20). You may withdraw any consent with effect for the future at any time (Article 7(3)). You may also have the right to object to processing based on Article 6(1)(f) GDPR under Article 21 GDPR.

9. Right to lodge a complaint

You may lodge a complaint with a competent data protection supervisory authority. For the company’s registered office in Thuringia, the relevant authority is in particular the Thuringian Commissioner for Data Protection and Freedom of Information .

10. Security and updates

We take appropriate technical and organisational measures to protect personal data. However, data transmission over the internet, particularly by unencrypted email, may involve risks. If technical services or data processing activities change, this privacy notice will be updated.