Privacy Policy & Cookie Settings

The controller within the meaning of Art. 4(7) GDPR is:

POSTSKRIPTUM GmbH
Werner-von-Siemens-Str. 6
86159 Augsburg
Germany

Tel: +49 1514 5211952
E-mail: info@ctok.de

You can contact our data protection contact by post or e-mail:

POSTSKRIPTUM GmbH
Personal: Data Protection Officer
Werner-von-Siemens-Str. 6
86159 Augsburg
Germany

E-mail: info@schmid-datenschutz.de

If you contact us by e-mail, WhatsApp, Telegram, phone, or via one of our contact or quote request forms, we store the data you provide and use it to process your message, prepare offers, and contact you. The legal basis is Art. 6(1)(a), Art. 6(1)(b), and, where applicable, Art. 6(1)(f) GDPR.

Data collected in this context is deleted once storage is no longer required or processing is restricted if statutory retention obligations apply.

When you use our website without actively submitting information, we collect only the personal data that your browser transmits to our servers. This collection is technically necessary to display the website and ensure stability and security. The legal basis is Art. 6(1)(f) GDPR.

• IP address
• Date and time of access, including time-zone difference to GMT
• Requested page or file
• Access status / HTTP status code
• Amount of data transferred
• Referring website
• Browser type, version, language, operating system, and interface

Server log data is generally stored for 60 days and then deleted.

This B2B website embeds a quote request form provided via LeadConnector / GoHighLevel infrastructure. When you submit the form, the fields you enter, such as name, organisation, phone number, e-mail address, and request details, are transmitted to the form provider and made available to us for lead management and reply handling.

We use this data only to respond to your request, qualify B2B interest, prepare offers, and maintain customer communication. Depending on the provider setup, data may be processed on servers outside the European Economic Area. Where this occurs, we rely on appropriate GDPR safeguards.

If you request access to the private client area, we process the account data you provide, including e-mail address, password credentials handled by our authentication provider, full name where provided, company name, phone number, and VAT / Tax ID. We use this information to verify B2B eligibility, approve or reject access, display private stock information, and maintain customer communication.

The legal basis is Art. 6(1)(b) GDPR for pre-contractual and contractual B2B access handling and Art. 6(1)(f) GDPR for fraud prevention, access control, and CRM administration.

Optional analytics and marketing tools are disabled by default. They are activated only if you give consent in the cookie banner or cookie settings panel. You can accept all, reject all, or choose categories individually.

• Necessary: required for site operation, routing, security, and saving your cookie preference. Always active.
• Analytics: Google Analytics runs in consent mode with storage denied by default. Analytics cookies and page views start only after analytics consent.
• Marketing: prepares Meta Pixel / marketing measurement. Activated only after marketing consent.

You can reopen your preferences at any time via the Cookie Settings button in the footer or the button on this page.

Google Analytics is connected in Google Consent Mode. The Google tag is present for consent handling and verification, with storage denied by default and automatic page views disabled until analytics consent is granted. Meta Pixel is prepared for future marketing measurement and will remain dormant until a valid ID is configured and marketing consent is granted.

If we offer an e-mail newsletter and you subscribe to it, the data you provide will be stored and used to send the newsletter. The legal basis is Art. 6(1)(a) GDPR. You may withdraw your consent at any time by e-mail, through the website, or via the unsubscribe link in the newsletter. We may use a double opt-in procedure to prevent misuse of third-party e-mail addresses.

Where Google Analytics is activated on this website, it is used to analyse website usage and improve our offer. Google Analytics uses cookies or similar technologies that enable an analysis of your use of the website. Storage and page-view measurement are activated only after analytics consent. The legal basis is Art. 6(1)(a) GDPR.

We use IP anonymisation where Google Analytics is active. You can prevent the storage of cookies through your browser settings and may also use Google's browser opt-out plugin: Google Analytics opt-out. More information is available at Google Analytics Terms and Google Privacy Policy.

Where Meta Pixel or related Meta marketing APIs are activated, they may help us understand campaign performance and B2B lead quality. These tools are classified as marketing tools on this website and are activated only after marketing consent. Without consent, no Meta browser pixel is loaded by this site. Any future server-side Meta API token must remain server-side and must not be exposed in the frontend bundle.

The website may include embedded videos, images, maps, or externally hosted media. Loading such content may transmit technical information, such as your IP address, to the relevant provider. If YouTube videos are embedded, they are used in enhanced privacy mode where possible. Additional data processing may occur when you start a video; we have no influence on that processing.

Our website links to external social media and messaging services, including Facebook, LinkedIn, WhatsApp, and Telegram. When you click these links, you leave our website and the respective provider may process your data under its own privacy policy. If you are logged into an account with the provider, your visit may be associated with that account.

We may use cookies in different areas of the website. Cookies are small text files stored by your browser. They help operate the website, improve usability, and, where enabled, support analytics or marketing functions. You can prevent or restrict cookies through your browser settings. Some functions of the website may then be limited.

Within POSTSKRIPTUM GmbH, only departments that need your personal data to fulfil contractual or legal obligations receive access. We may also use carefully selected external service providers, such as hosting, IT, form, CRM, or communication providers. Public bodies may receive data where we are legally required to provide it. Other recipients receive your data only if you have actively consented or if another legal basis applies.

We aim to avoid transfers of personal data to countries without an adequate level of data protection. Where such transfers cannot be avoided, for example due to external service providers, we use appropriate safeguards under GDPR and review them regularly.

Data generated when contacting us is deleted once storage is no longer required, or processing is restricted if statutory retention periods apply. Server log data is generally stored for 60 days. If we process application data or other special request data, we delete it after the relevant process is completed unless legal retention periods or your consent require longer storage.

You have the following rights regarding personal data concerning you:

• Right of access
• Right to rectification or erasure
• Right to restriction of processing
• Right to object to processing
• Right to data portability

To exercise your rights, contact POSTSKRIPTUM GmbH, Werner-von-Siemens-Str. 6, 86159 Augsburg, Germany, or e-mail info@ctok.de.

If you have given consent to processing, you may withdraw it at any time. The withdrawal does not affect the lawfulness of processing before the withdrawal. Where we base processing on legitimate interests, you may object to such processing. You may also object at any time to processing for advertising or analytics purposes.

You have the right to lodge a complaint with a data protection supervisory authority about the processing of your personal data.

In a business relationship or during contract initiation and fulfilment, you must provide the personal data required for these purposes or that we are legally obliged to collect. Without such data, we may be unable to enter into or fulfil a contract.

Automated decision-making, including profiling, does not take place at POSTSKRIPTUM GmbH.