Privacy Policy

Controller

The controller responsible for data processing on this website is:

OrgaControl GmbH
Bleichweg 1a
57610 Gieleroth
Germany
Phone: +49-2681-9583-0
Email: info@orgacontrol.de

1. General Information on Data Processing

We process personal data only to the extent necessary for providing and securing our website, handling enquiries, carrying out pre-contractual or contractual measures, or on the basis of consent you have given.

Personal data means any information relating to an identified or identifiable natural person.

Where we rely on consent as the legal basis for processing, the processing is carried out pursuant to Art. 6(1)(a) GDPR. Consent that has been granted may be withdrawn at any time with effect for the future.

Where processing is necessary for the performance of pre-contractual measures or a contract, it is carried out pursuant to Art. 6(1)(b) GDPR.

Where we rely on legitimate interests, processing is carried out pursuant to Art. 6(1)(f) GDPR. The respective legitimate interests are explained below. The relevant legal bases arise from Art. 6 GDPR; Art. 13 GDPR governs the information obligations when personal data is collected.

2. Provision of the Website and Server Data

When you access our website, technically necessary connection data is processed. This may include, in particular:

  • IP address of the requesting device,
  • date and time of access,
  • page or file accessed,
  • amount of data transferred,
  • browser and operating system information,
  • referrer URL, insofar as it is transmitted by the browser,
  • technical status and error information.

This data is processed by the hosting provider to the extent necessary for the technical provision, stability and security of the website.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure, stable and technically functional operation of our website.

Server and connection data is generally stored only for as long as necessary for technical operation and security. Unless security-related incidents require longer retention, corresponding technical log data is regularly deleted.

3. Cookies and Similar Storage Technologies

Our website uses technically necessary cookies and – only after you have given your consent – optional cookies and comparable storage technologies.

Comparable storage technologies include, in particular, browser storage such as Session Storage or Local Storage. Section 25 TDDDG generally requires consent for storing information on a user’s terminal device or accessing information already stored there. An exception applies in particular to operations that are strictly necessary in order to provide a digital service expressly requested by the user.

Technically Necessary Technologies

Technically necessary cookies and storage technologies are used insofar as they are required for the operation of the website or for storing your privacy and cookie settings.

These technologies cannot be completely disabled without impairing certain website functions or the storage of your privacy preferences.

Optional Technologies

Optional technologies, in particular those used to measure the effectiveness of our Google Ads advertising, are used only if you have expressly consented to them beforehand.

4. Consent Management

When you visit our website, you are presented with a consent management interface.

In particular, you may choose between the following options:

  • Accept
  • Reject
  • Necessary Cookies Only

By selecting “Accept”, you consent to the activation of the optional technologies offered in accordance with your selection.

If you select “Reject” or “Necessary Cookies Only”, optional marketing and tracking technologies will not be activated.

Your decision is stored technically so that the website can take your selection into account on subsequent page views.

You may change or withdraw consent you have given at any time with effect for the future via the cookie or privacy settings available on our website.

5. Google Tag Manager

We use Google Tag Manager to technically manage tags used on our website and the functions associated with them.

For users in the European Economic Area, the provider in connection with the relevant Google services is generally:

Google Ireland Limited
Gordon House
Barrow Street
Dublin 4
Ireland

In its privacy terms for European controller data, Google identifies Google Ireland Limited as the responsible European entity.

Google Tag Manager is used in particular to control the Google Ads conversion measurement described below in accordance with your consent decision.

Optional Google Ads tags activated through Google Tag Manager are executed under our current Basic Consent configuration only after the relevant consent has been granted.

Google describes Basic Consent Mode as a configuration in which Google tags remain blocked until the user interacts with the consent banner and no data for these tags is transmitted to Google without consent.

6. Google Ads Conversion Tracking

We use Google Ads Conversion Tracking to measure the effectiveness of advertisements we place on Google.

Conversion Tracking is activated only if you have consented to the use of optional marketing and tracking technologies.

If you arrive at our website via a Google Ads advertisement, the destination URL may contain technical information relating to the advertising interaction. This includes, in particular, Google Click Identifiers such as:

  • GCLID,
  • GBRAID,
  • WBRAID,

as well as further information concerning the origin of the advertisement.

Google Ads may use such information to associate a subsequent conversion – in our case, in particular, the successful submission of an enquiry form – with a previous advertising interaction.

Google states that, where Conversion Tracking is enabled, information concerning the advertising click may be taken from a GCLID and stored in first-party cookies on the domain visited. The Conversion Linker is used to store such advertising click information for subsequent conversion attribution.

Data Processed

In connection with Google Ads Conversion Tracking, the following information may in particular be processed:

  • advertising and click information,
  • Google Click Identifiers,
  • page accessed,
  • conversion event,
  • time of conversion,
  • technical browser and device information,
  • IP address as part of the technical communication,
  • a unique conversion or enquiry ID generated by us.

If an enquiry form is successfully submitted, we transmit a corresponding conversion event to Google Ads.

In addition, a randomly generated unique identifier is transmitted as a Transaction ID. This is used in particular to prevent the same conversion from being counted more than once.

Legal Basis

The legal basis is your consent pursuant to Art. 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG.

7. Internal Attribution of Google Ads Enquiries

In addition to Google’s own conversion measurement, we use an internal technical attribution process to associate enquiries with Google Ads advertisements.

This attribution is likewise activated only after you have consented to the relevant optional marketing and tracking technologies.

If you arrive at our website via a Google Ads advertisement, the following information may be stored in your browser’s Session Storage during the current browsing session:

  • a randomly generated unique lead ID,
  • GCLID,
  • GBRAID or WBRAID, where available,
  • Google Ads campaign ID,
  • Google Ads ad group ID,
  • the Google Ads keyword that triggered the advertisement,
  • keyword match type,
  • device type,
  • advertising network,
  • original landing page,
  • time of entry to the website.

This storage is used to enable us to internally attribute an enquiry subsequently submitted via our enquiry form to the relevant Google Ads campaign or advertising source.

The data stored in Session Storage is generally available only within the respective browsing session or browser tab.

If an enquiry form is successfully submitted during this session, the attribution data described above may be transmitted to our server together with the enquiry and stored internally with the enquiry or included in the internal enquiry email.

This technical data is not displayed in the visible contact form.

The legal basis for this storage and processing is your consent pursuant to Art. 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG. The statutory protection applies not only to conventional cookies but generally also to other forms of storage on, or access to, the terminal device.

8. No Enhanced Conversion Data from Visible Form Fields

Under the Google Ads Conversion Tracking currently in use, the content you enter into the visible fields of the contact form – in particular your name, company, address, telephone number, email address or message text – is not transmitted to Google Ads as Enhanced Conversions or other enhanced conversion data.

As part of the current implementation, the conversion event is transmitted to Google Ads together with the technical data intended for advertising attribution.

If we use so-called Enhanced Conversions for Leads or comparable functions in the future, this Privacy Policy will be amended accordingly before such functions are activated.

9. Use of the Contact and Enquiry Form

If you contact us via a form on our website, we process the data you enter in order to handle and respond to your enquiry.

This may include, in particular:

  • company,
  • name,
  • address,
  • email address,
  • telephone number,
  • products or services requested,
  • content of your message,
  • other information voluntarily provided.

Where your enquiry is aimed at initiating or performing a contract, processing is carried out pursuant to Art. 6(1)(b) GDPR.

For other business enquiries, processing may be carried out pursuant to Art. 6(1)(f) GDPR. Our legitimate interest lies in handling and responding to business enquiries.

If you have previously consented to Google Ads conversion measurement, the technical attribution data described in the section “Internal Attribution of Google Ads Enquiries” may also be stored together with the enquiry.

The content of the form is used exclusively for handling the respective enquiry and – where necessary – for carrying out resulting pre-contractual or contractual measures.

10. Retention Period for Enquiries

Enquiries and the associated data are stored only for as long as necessary to process the enquiry and for any resulting business relationship.

Once the enquiry has been completed and no further business relationship is established, the data will be deleted unless statutory retention obligations or other legal grounds prevent deletion.

If an enquiry results, for example, in a quotation, order or other commercially relevant transaction, the corresponding documents may be retained for a longer period in accordance with the applicable commercial and tax-law retention obligations.

Google Ads attribution data stored together with an enquiry is generally treated in the same way as the relevant enquiry and is not stored independently for other purposes.

11. Recipients and Disclosure of Personal Data

Personal data is disclosed only insofar as:

  • this is necessary for the technical provision of our website or communications,
  • a service provider used by us processes the data on our behalf,
  • you have consented to the relevant disclosure,
  • this is necessary for the performance of a contract,
  • or we are legally obliged to disclose the data.

Possible categories of recipients include, in particular:

  • hosting and infrastructure service providers,
  • email and communications service providers,
  • IT service providers,
  • Google in connection with Google Ads Conversion Tracking where the relevant consent has been granted,
  • public authorities or other bodies where a statutory obligation exists.

Personal data is not disclosed for purposes other than those described here without an appropriate legal basis.

12. Data Processing by Google and Transfers to Third Countries

In connection with Google Ads and Google Tag Manager, data may be processed by Google Ireland Limited and other companies affiliated with Google.

Google operates an international infrastructure. It therefore cannot be ruled out that data may also be processed outside the European Economic Area.

In its privacy and data transfer terms, Google describes various mechanisms for international data transfers. These include, in particular, the EU-U.S. Data Privacy Framework and, where required, other appropriate transfer mechanisms such as Standard Contractual Clauses.

Further information on Google’s processing of personal data can be found in Google’s Privacy Policy and privacy information.

13. SSL/TLS Encryption

This website uses SSL/TLS encryption to protect confidential content, in particular enquiries submitted via contact forms, during transmission.

You can recognise an encrypted connection in particular by https:// in the address bar of your browser.

Encryption protects data during transmission between your terminal device and our web server against simple interception by unauthorised third parties.

14. Your Rights

Subject to the statutory requirements, you have in particular the following rights:

  • Art. 15 GDPR – Right of access: You may request information about the personal data we process about you.
  • Art. 16 GDPR – Right to rectification: You may request the correction of inaccurate data or completion of incomplete data.
  • Art. 17 GDPR – Right to erasure: Subject to the statutory requirements, you may request the deletion of your personal data.
  • Art. 18 GDPR – Right to restriction of processing: Subject to the statutory requirements, you may request restriction of processing.
  • Art. 20 GDPR – Right to data portability: Subject to the statutory requirements, you may receive personal data in a structured, commonly used and machine-readable format or request its transmission to another controller.
  • Art. 21 GDPR – Right to object: You may object, on grounds relating to your particular situation, to processing based on Art. 6(1)(e) or (f) GDPR.
  • Art. 77 GDPR – Right to lodge a complaint: You have the right to lodge a complaint with a data protection supervisory authority.

These rights arise from the General Data Protection Regulation.

To exercise your rights, you may contact us at any time:

OrgaControl GmbH
Email: info@orgacontrol.de

15. Withdrawal of Consent

Where processing is based on your consent, you may withdraw that consent at any time with effect for the future.

Withdrawal does not affect the lawfulness of processing carried out on the basis of your consent before its withdrawal.

You may change or withdraw your consent to optional cookies, Google Ads Conversion Tracking and other optional technologies at any time via the cookie and privacy settings provided on our website.

Following withdrawal, the relevant optional tracking processes will no longer be carried out on future page views on the basis of the withdrawn consent.

16. Objection to Processing Based on Legitimate Interests

Where we process personal data on the basis of Art. 6(1)(f) GDPR, you have the right pursuant to Art. 21 GDPR to object to such processing on grounds relating to your particular situation.

We will then no longer process the personal data concerned unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing is required for the establishment, exercise or defence of legal claims.

17. Right to Lodge a Complaint with a Supervisory Authority

Pursuant to Art. 77 GDPR, you have the right to lodge a complaint with a data protection supervisory authority.

For companies established in Rhineland-Palatinate, the competent authority is in particular:

The State Commissioner for Data Protection and Freedom of Information of Rhineland-Palatinate
Hintere Bleiche 34
55116 Mainz
Germany

The data protection supervisory authority of Rhineland-Palatinate also provides an online complaint procedure.

The right to lodge a complaint is without prejudice to any other administrative or judicial remedies.

18. Automated Decision-Making

In connection with the use of this website, we do not carry out any solely automated decision-making that produces legal effects concerning you or similarly significantly affects you.

19. Data Security

We take appropriate technical and organisational measures to protect personal data against accidental or unlawful loss, alteration, destruction, disclosure or unauthorised access.

The security measures used are reviewed and adjusted in line with technological developments and the respective risks.

20. Amendments to this Privacy Policy

We reserve the right to amend this Privacy Policy if legal requirements, the technical design of our website or the services we use change.

The version published on this website at the relevant time shall apply.

Last updated: August 2026