Privacy policy

The key points at a glance

• We process your details to answer enquiries and support customers.
• Our visitor and click statistics start only with your consent. Before consent and after rejection, we do not run our own audience measurement; necessary hosting logs are separate.
• Fonts, images, videos and scripts load from our own server. Google Maps loads only after you consent by clicking.
• You can change your choice at any time via “Privacy settings” in the footer.

Controller

Derette GmbH
Hirtenwiese 4a
57578 Elkenroth, Germany
Represented by managing director Heiko Sauer
Phone: +49 2747 9121752
Email: info@derette.de

You can also use these contact details for privacy questions.

Hosting and server logs

Our website is hosted by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany. IONOS processes hosting data on our behalf as a processor under Art. 28 GDPR.

Your IP address is technically processed to deliver the website. Hosting logs record requested pages or files, access time, referrer and browser, operating system and device details. According to IONOS, visitor data is anonymised when collected, IP addresses are stored only in anonymised form and the data is retained for eight weeks.

The legal basis is Art. 6 (1) (f) GDPR. Our legitimate interest is secure and stable website operation. The connection to the website is encrypted using TLS.

Optional visitor and click statistics

With your consent, we use our own statistics to improve the website and understand interest in products and contact options. The legal bases are Art. 6 (1) (a) GDPR and § 25 (1) TDDDG.

The statistics record public pages visited, times and approximate active visit duration, referring domains, device category, contact options clicked, selected products and enquiry categories, and the opening, starting and submission of the enquiry form. Where available, approximate country/region information is determined locally from the IP address.

A first-party statistics cookie connects these actions within a visit. It contains a random ID and expires after 30 minutes without activity; a new day starts a new association. The statistics are pseudonymous. Names, contact details, message contents and full IP addresses are not stored in them. Statistics are not linked to customer data or shared with advertising networks. IONOS processes the data on our behalf as our host. The retention period for statistics data is 14 months.

You can withdraw consent at any time via “Privacy settings” in the footer. Further measurement stops and the statistics cookie is deleted. Withdrawal does not affect the lawfulness of earlier processing. Do Not Track and Global Privacy Control are respected as rejection.

Enquiries and contact

When you contact us by form, email or phone, we process your contact details and the information needed to handle your request. Depending on the enquiry, this includes your name, phone number, email address, job location/postcode, selected products, message and, for spare parts, serial number, parts details and photos provided voluntarily. The form also processes the originating page and receipt time.

We use this data to answer your enquiry, provide quotes, arrange calls or demonstrations and handle contracts. The legal basis is Art. 6 (1) (b) GDPR for contracts and pre-contractual enquiries. For other requests and business contact persons, it is Art. 6 (1) (f) GDPR; our legitimate interest is handling your request and the business relationship. No additional consent is required for these purposes.

Form enquiries are stored internally and sent to us by email. To prevent abuse, we process technical validation information and temporarily a pseudonymous check value derived from the IP address (Art. 6 (1) (f) GDPR; legitimate interest in protecting the form). Please provide only the information and photos needed for your enquiry.

Customer support and retention

To handle enquiries and support customers, we keep necessary contact, company and contract details, addresses, product information, messages, photos and factual processing notes in our internal customer administration. Only authorised persons receive access. The legal bases are Art. 6 (1) (b) and (f) GDPR for the purposes described and Art. 6 (1) (c) GDPR for statutory retention obligations.

We retain data only as long as needed for its purpose. Ordinary customer and enquiry records have a planned review period of twelve months from the last relevant update. Ongoing matters and establishing or defending legal claims may require longer retention. Statutory retention periods are normally six years for business correspondence, eight years for accounting vouchers and ten years for certain accounting records, generally counted from the end of the relevant calendar year. Data no longer needed is deleted; records subject to retention obligations are used only for permitted retention purposes.

Email provider

For email, we use Google Workspace from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, as a processor under Art. 28 GDPR. Data may also be processed in the USA. Transfers to Google LLC, certified under the EU-US Data Privacy Framework, are covered by an adequacy decision under Art. 45 GDPR. Information about safeguards is available in Google’s international transfer information.

WhatsApp

Our WhatsApp links open the service only after you click. The provider is WhatsApp Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland. When you use it, WhatsApp processes your phone number, messages and technical data under its privacy policy, potentially outside the EEA. We handle your message on the legal bases described under “Enquiries and contact”. Alternatively, contact us by phone, email or form.

Google Maps

The map on the contact page loads only after you click “Show map with Google Maps”. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Your IP address and technical data are then sent to Google; Google may set cookies and process data in the USA. Transfers to Google LLC are covered by the framework described above. The legal bases are your consent under Art. 6 (1) (a) GDPR and § 25 (1) TDDDG.

“Close map” stops the map from loading further. This does not recall data already transmitted or automatically delete Google cookies already set. “Plan route” opens Google Maps as an external website. See Google’s privacy policy.

Necessary storage and local content

A first-party cookie remembers your privacy choice for 180 days without an individual visitor ID. Your chosen language and spare parts list remain in the session storage of the respective tab. These functions provide your chosen settings and help compile your enquiry. The legal bases are § 25 (2) no. 2 TDDDG and, where personal data is involved, Art. 6 (1) (f) GDPR (providing the requested functions).

We host fonts, scripts, images, videos and brochures ourselves. No external font, video or content services are loaded for these resources.

Your rights

Subject to the statutory conditions, you have rights of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). You can withdraw consent at any time with effect for the future.

Right to object: where processing is based on Art. 6 (1) (f) GDPR, you can object at any time on grounds relating to your particular situation (Art. 21 GDPR).

Contact info@derette.de to exercise your rights. You can also complain to a data protection supervisory authority. Our competent authority is the State Commissioner for Data Protection and Freedom of Information of Rhineland-Palatinate, Postfach 30 40, 55020 Mainz, Germany, authority contact details.

Providing your data

Contacting us is voluntary. Without the information necessary for your request, we may be unable to handle it. We do not carry out automated decision-making with legal or similarly significant effects.

Last updated: 25 October 2026.