Privacy Policy.

1. Data Controller

Holz- und Technic Innenausbau-Messebau GmbH
Philipp-Reis-Straße 40
31832 Springe bei Hannover
E-Mail: info@holzundtechnic.de

2. Collection and Processing of Personal Data

We only collect personal data insofar as this is necessary for the provision of a functional website as well as our content and services. The collection and processing of your data is carried out exclusively with your consent or where permitted by law.

3. Hosting and Server Log Files

Hosting: Hostinger International Ltd., 61 Lordou Vironos str., 6023 Larnaca, Cyprus; servers in Germany; data processing agreement under Art. 28 GDPR.

Cloudflare: Cloudflare, Inc., 101 Townsend St., San Francisco, USA. Delivery and protection of the website as well as encrypted connections to our own servers. Data processing agreement with standard contractual clauses; Cloudflare is certified under the EU-US Data Privacy Framework.

The web server of this website automatically logs, for every request, the IP address, the time, the request (page accessed), the status code, the referrer URL and the user agent (browser type and version, operating system). These log files are deleted after about 14 days. This data is not merged with other data sources.

4. Inquiry Form and Appointment Booking

If you send us an inquiry via the form, we process your details (email address, name, whether you are enquiring as an owner or a planner and – if provided – company, phone number, message and preferred appointment) in order to handle your inquiry and clarify questions. Your details are only transmitted when you submit the inquiry. They are sent, encrypted, to our own inquiry processing and customer management systems on our own servers in Germany.

If you book an appointment, this is done via HubSpot Meetings; your name, email address, the time and – if provided – phone number and company are transmitted to HubSpot. HubSpot: HubSpot Germany GmbH; parent company HubSpot, Inc., Cambridge, USA. Account in the EU data centre; standard contractual clauses and DPF certification of HubSpot, Inc.

Emails, our appointment calendar and online appointments run via Microsoft 365. Microsoft 365: Microsoft Ireland Operations Ltd., Dublin. Data is processed within the EU Data Boundary; standard contractual clauses and the DPF apply to any remaining transfers to Microsoft Corporation (USA).

Beyond the service providers named in this policy, we will not share your data without your consent.

To protect against misuse, we limit the number of inquiries per sender; for this purpose the IP address is only kept briefly in working memory (Art. 6 (1) (f) GDPR).

If you have consented in the cookie banner, we store with your inquiry which campaign or ad brought you to us (campaign information and identifiers of the services you consented to) in order to measure the success of our advertising. The legal basis is your consent (Art. 6 (1) (a) GDPR, § 25 (1) TDDDG); you can withdraw it at any time in the cookie settings.

The legal basis for processing your inquiry is Art. 6 (1) (b) GDPR insofar as it serves to initiate a contract, otherwise Art. 6 (1) (f) GDPR. With the tick box in the form you confirm that you have taken note of this information; this does not constitute consent.

Storage period: We store your details as long as they are needed to process your inquiry, for follow-up questions and a possible project. We review inquiries without an order after 24 months without activity and delete them if they are no longer needed; at your request we delete them earlier. Data relating to orders is kept in accordance with the statutory retention periods, the record that you have taken note of this information for 3 years.

5. Cookies and Services Based on Consent

The only technically necessary storage is your choice in the cookie banner. All other services are only loaded once you have consented in the banner (Art. 6 (1) (a) GDPR, § 25 (1) TDDDG). You can change or withdraw your choice at any time in the cookie settings.

• Analytics: Google Analytics (via Google Tag Manager) and HubSpot (usage statistics and chat), to see how our website is used.
• Marketing: Google Ads, Meta (Facebook, Instagram), LinkedIn and LeadInfo (identification of company visits), to measure the success of our advertising.

Measurement data for Google and Meta partly runs via our own tagging server, which is hosted like this website. Providers: Google Ireland Ltd., Dublin; Meta Platforms Ireland Ltd., Dublin; LinkedIn Ireland Unlimited Company, Dublin; Leadinfo B.V., Rotterdam; HubSpot (see section 4). Transfers to the USA are possible for Google, Meta, LinkedIn and HubSpot; standard contractual clauses and the EU-US Data Privacy Framework apply.

6. Your Rights

You have the following rights with regard to your personal data:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object (Art. 21 GDPR)

To exercise your rights, please contact: info@holzundtechnic.de

7. Right to Complain to Supervisory Authority

You have the right to lodge a complaint with a data protection supervisory authority regarding our processing of your personal data. The competent supervisory authority is the State Commissioner for Data Protection of Lower Saxony.

8. Currency of this Privacy Policy

This privacy policy is currently valid as of October 2026. Due to the further development of our website or changes in legal requirements, it may become necessary to amend this privacy policy.