Privacy policy

1. Controller

The controller for data processing on this website is AC Anlegerschutz UG (haftungsbeschränkt), Steinhäuserstraße 20, 76135 Karlsruhe. Managing Director: Ralf Kathmann, Karlsruhe — exempt from the restrictions of section 181 of the German Civil Code (BGB). Contact details are set out in the legal notice.

2. Hosting and server log files

This website is hosted in a data centre within the European Union.

When you visit the site, the server automatically records access data (IP address, date and time, requested page, referrer, browser and operating system). This processing is necessary to deliver the site securely and stably and is based on our legitimate interest under Art. 6(1)(f) GDPR.

Counting without cookies. To know how often the site is visited and whether our advertising leads to enquiries, our own server counts page loads, entry pages, the last page of a visit, arrivals via an ad (recognisable by the click id in the address), where a visit came from (an ad, a search engine, a typed address, another website), the class of device (mobile or computer), the hour of the visit, whether a page was scrolled and whether a button or the form was used, signs of automated access, the decisions made in the cookie banner and the enquiries sent. Only daily totals are stored — no IP address, no device identifier, no cookie, and nothing on your device — so no conclusion about any individual is possible. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in running our website and advertising economically).

3. Contact form and case description

When you submit the contact form we process the details you provide: name, e-mail address, optionally a phone number, the category of case, an approximate loss figure and your description of what happened.

Purpose: handling your enquiry and assessing a possible engagement. Legal basis: your consent under Art. 6(1)(a) GDPR and, where the enquiry concerns a prospective engagement, Art. 6(1)(b) GDPR.

Storage: your enquiry is stored on the server of this website and is accessible only to the firm, after signing in to the protected administration area.
You may withdraw your consent at any time with effect for the future.

Where your enquiry came from: together with your enquiry we also record which page of our website you reached the form from, which referrer brought you there and — if present — the identifier of an advertising click. These details serve only to attribute and evaluate our own website; they are not passed to third parties without your consent. The legal basis is our legitimate interest in measuring the performance of our own advertising (Art. 6(1)(f) GDPR).

Temporary storage in your browser: while you fill in the form, your browser keeps the entries you have already made on your own device (session storage). This is purely for your convenience, so your description is not lost if you open the privacy policy or navigate back in the meantime. The data never leaves your device, is deleted when the enquiry is sent and when you close the browser tab, and cannot be read by us at any point. The legal basis for storing it on your device is § 25(2) no. 2 TDDDG, as it is strictly necessary for the function you have expressly requested.

Enquiries through forms in our advertisements on Facebook and Instagram: if you contact us through a form that opens inside one of our advertisements on Facebook or Instagram, Meta Platforms Ireland Limited, Merrion Road, Dublin 4, Ireland, provides us with the details you confirmed or entered there: name, phone number, e-mail address and your answers to our questions, including your description of what happened. We use these details solely to handle your enquiry and to contact you about it — for the same purposes and on the same legal bases as the contact form. The form is provided by Meta; Meta’s own processing is governed by Meta’s privacy policy at facebook.com/privacy/policy. Meta may transfer data to the United States; Meta Platforms, Inc. is certified under the EU-US Data Privacy Framework (adequacy decision under Art. 45 GDPR).

4. Cookies and consent

Technically necessary functions do not require consent. Optional services are loaded only after you have actively consented (Art. 6(1)(a) GDPR, section 25 TDDDG).

We do not currently use any services for audience measurement or advertising performance measurement. Should we use such services in future, they will load only after your consent; you can withdraw consent you have given at any time via “Cookie settings” in the footer. This policy will be updated beforehand in that case.

5. Recipients and transfers to third countries

Personal data is not transferred to countries outside the EU/EEA without appropriate safeguards within the meaning of the GDPR.

6. Retention

We retain personal data only as long as necessary for the purposes described or as required by statutory retention obligations, in particular professional and commercial or tax law retention periods.

7. Your rights

Under the GDPR you have the following rights:

• access to your personal data (Art. 15 GDPR)
• rectification of inaccurate data (Art. 16 GDPR)
• erasure (Art. 17 GDPR)
• restriction of processing (Art. 18 GDPR)
• data portability (Art. 20 GDPR)
• objection to processing (Art. 21 GDPR)
• withdrawal of consent you have given, with effect for the future

You also have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR).

8. Data security

This website uses TLS encryption for all transmissions. Your entries in the contact form are transmitted over an encrypted connection.