1. Data Controller

The data controller within the meaning of the General Data Protection Regulation (GDPR) and other national data protection laws of the Member States, as well as other data protection regulations, is:
europascal GmbH
An der Wiesenhecke 10
63456 Hanau
Germany
Phone: +49 (0) 6181 – 42309 -0
Email: info@europascal.de
Website: www.europascal.de
Data Protection Officer
The company’s Data Protection Officer is:
Firas El-Chami
europascal GmbH
An der Wiesenhecke 10
63456 Hanau
Deutschland
E-Mail: info@europascal.de

2. General Information on Data Processing

The protection of your personal data is very important to us. We treat your personal data confidentially and in accordance with applicable data protection laws and this Privacy Policy.
Personal data refers to any information relating to an identified or identifiable natural person.
We process personal data only to the extent necessary to provide a fully functional website and to deliver our content and services.

3. Hosting by STRATO

Our website is hosted by STRATO AG.
As part of the hosting service, personal data necessary for the operation and delivery of the website is processed.
Collection of Server Log Files
When you visit our website, the following data is automatically collected and stored in server log files:
• The visitor’s IP address
• Date and time of access
• Browser type
• Browser version
• Operating system used
• Referrer URL
• Hostname of the accessing computer
Purpose of Processing
Processing is carried out in particular for the following purposes:
• Provision of the website
• Ensuring system security
• Error analysis
• Defense against attempted attacks
• Optimization of the technical infrastructure
Legal basis
Art. 6(1)(f) GDPR.
Our legitimate interest lies in the secure and uninterrupted provision of our online services.
A data processing agreement in accordance with Art. 28 GDPR has been concluded with the hosting provider.

4. Use of WordPress

This website is powered by the WordPress content management system and uses a WordPress theme as well as various plugins for presentation, security, and optimization.
WordPress is used for the technical provision and administration of the website. In doing so, technically necessary cookies may be set and technical information may be processed.
The processing is based on our legitimate interest in the secure, cost-effective, and user-friendly provision of our website in accordance with Article 6(1)(f) of the GDPR.

5. Contacting Us

If you contact us by email or through the contact form provided on our website, the personal data you submit will be stored and processed.
Data Processed
• Name
• Company
• Email address
• Phone number
• Message text
Purpose of Processing
• Processing your inquiry
• Communicating with prospective and existing customers
• Carrying out pre-contractual measures
• Initiating a contract
Legal Basis
Art. 6(1)(b) GDPR and Art. 6(1)(f) GDPR.
Retention Period
The data will be deleted as soon as the purpose of the processing no longer applies and there are no conflicting legal retention obligations.

6. Cookies

Our website uses cookies.
Cookies are small text files that are stored on your device.
Technically Necessary Cookies
Technically necessary cookies are used to ensure the secure and proper functioning of the website.
Legal basis:
Article 6(1)(f) of the GDPR.
Analytics Cookies
Analytics cookies are used exclusively with your express consent.
Legal basis:
Article 6(1)(a) of the GDPR.
You may revoke your consent at any time with future effect.

7. Consent Management with Real Cookie Banner

We use the Real Cookie Banner consent management tool to manage consent.
Real Cookie Banner enables the legally compliant collection, management, and documentation of cookie consent.
Processed Data
• Consent status
• Date and time of consent
• Consent ID
• Browser information
• Device information
• IP address (truncated or pseudonymized)
Legal Basis
Art. 6(1)(c) GDPR and Art. 6(1)(f) GDPR.
Purpose of Processing
• Compliance with legal record-keeping obligations
• Management of consents
• Documentation of data protection decisions

8. Google Analytics

This website uses Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Google Analytics enables us to analyze the use of our website and helps us continuously improve our offerings.
Data Processed
In particular, the following data may be processed:
• IP address (truncated/anonymized)
• Device information
• Browser information
• Operating system
• Language settings
• Pages visited
• Time spent on the site
• Click behavior
• Visitor origin
• Approximate location data
Purpose of Processing
• Analysis of user behavior
• Optimization of our website
• Improvement of user-friendliness
• Audience measurement
Legal Basis
Art. 6(1)(a) GDPR.
Processing takes place exclusively with your express consent.
Retention Period
User and event data are retained for 26 months.
Withdrawal of Consent
You may withdraw your consent at any time via the cookie settings.
Data Transfer to Third Countries
A transfer of personal data to Google servers in the United States cannot be ruled out. Google processes data using appropriate safeguards for international data transfers in accordance with the requirements of the GDPR.

9. LinkedIn Company Page

We maintain a company presence on LinkedIn.
LinkedIn is a service provided by LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland.
When you visit our LinkedIn page, personal data may be processed by LinkedIn.
Processed Data
This may include, in particular:
• IP address
• Device information
• Browser information
• Usage behavior
• Interaction data
• Profile data
• Communication data
Purpose of Processing
• External presentation of our company
• Communication with prospective clients and customers
• Recruiting
• Marketing and corporate communications
Legal basis
Art. 6(1)(f) GDPR.
Our legitimate interest lies in presenting our company in a contemporary manner and communicating with prospective customers.
LinkedIn’s privacy policy applies in addition to this policy regarding data processing by LinkedIn.

10. Use of Elementor

We use Elementor to design our website.
Elementor is a website builder for WordPress. When you use our website, Elementor may process technically necessary data to ensure the proper display and functionality of the website.
This processing is based on our legitimate interest in presenting our online offering in an appealing and user-friendly manner, in accordance with Art. 6(1)(f) of the GDPR.

11. Use of Google reCAPTCHA

We use Google reCAPTCHA to protect our forms from misuse and spam.
The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
When you use reCAPTCHA, various pieces of information are transmitted to Google, in particular:
• IP address
• Referrer URL
• Browser information
• Operating system
• Mouse movements
• Time spent on the website
• Usage behavior
Processing is based on our legitimate interest under Article 6(1)(f) of the GDPR in protecting our website against automated attacks and spam.
The transfer of personal data to the United States cannot be ruled out.

12. Embedding of YouTube Videos

Videos from the YouTube platform may be embedded on our website.
The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
When you visit a page with an embedded YouTube video, a connection to YouTube’s servers may be established.
In particular, the following data may be processed:
• IP address
• Browser information
• Device information
• Usage data
• Pages visited
If you have consented to the use of the relevant cookies, processing is based on Article 6(1)(a) of the GDPR.
Data processing may also take place on servers in the United States.

13. Integration of Google Maps

We use Google Maps on our website to display interactive maps.
The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
When you visit a page featuring Google Maps, data is transmitted to Google.
This may include, in particular:
• IP address
• Location information
• Browser information
• Device information
• Usage data
The use of Google Maps is based solely on your consent in accordance with Article 6(1)(a) of the GDPR.
Consent is obtained via our consent management system, CookieYes.
Data transfer to the United States cannot be ruled out.

14. Newsletter

On our website, you have the option to subscribe to our newsletter.
To send the newsletter, we use Newsletter2Go, a service provided by Brevo Germany GmbH, Köpenicker Straße 126, 10179 Berlin.
Data Processed
The following data, in particular, is processed as part of the newsletter registration:
• Email address
• Name (if provided)
• IP address
• Time of registration
• Time of confirmation (double opt-in)
Purpose of Processing
• Sending the newsletter
• Documenting consent
• Analyzing newsletter usage
Legal basis
Art. 6(1)(a) GDPR.
Double Opt-In
Subscription to our newsletter is handled via the double opt-in process. After you subscribe, you will receive an email in which you must confirm your subscription.
Withdrawal
You may withdraw your consent at any time with future effect. To do so, you will find a corresponding unsubscribe link in every newsletter.
Retention Period
Your data will be stored for as long as your newsletter subscription remains active. After you unsubscribe, the data will be deleted, provided there are no legal retention requirements to the contrary.

15. EWWW Image Optimizer

The EWWW Image Optimizer plugin is used to optimize loading times and image sizes.
In this process, images are compressed and, if necessary, processed locally or via external servers (depending on the configuration).
If external optimization is enabled, the following data may be transmitted:
• Image files (for compression)
• Technical metadata of the files

16. SSL or TLS Encryption

This website uses SSL or TLS encryption for security reasons and to protect the transmission of confidential information.
You can recognize an encrypted connection by the fact that the browser’s address bar begins with “https://” and a padlock icon is displayed.

17. Recipients of Personal Data

Personal data may be transferred to the following categories of recipients:
• STRATO AG (hosting)
• IT service providers
• Website maintenance service providers
• Google Analytics
• LinkedIn
• Government agencies and public authorities, to the extent required by law
Data is disclosed only to the extent necessary and based on legal authorization or your consent.

18. Retention Period

Unless a more specific retention period is stated in this Privacy Policy, we retain personal data until the purpose of processing no longer applies.
Statutory retention periods remain unaffected by this.

19. Rights of Data Subjects

You have the right:
• to access your data pursuant to Art. 15 GDPR,
• to rectification pursuant to Art. 16 GDPR,
• to erasure pursuant to Art. 17 GDPR,
• to restriction of processing pursuant to Article 18 of the GDPR,
• to data portability pursuant to Article 20 of the GDPR,
• to object pursuant to Article 21 of the GDPR,
• to withdraw consent pursuant to Article 7(3) of the GDPR.

20. Right to File a Complaint with a Supervisory Authority

You have the right to file a complaint with a data protection supervisory authority regarding the processing of your personal data.
The competent supervisory authority for europascal GmbH is:
The Hessian Commissioner for Data Protection and Freedom of Information
Gustav-Stresemann-Ring 1
65189 Wiesbaden
Germany

21. Obligation to Provide Personal Data

The provision of personal data is not required by law or contract.
However, providing the necessary data may be required to use certain features, in particular the contact form.

22. Automated Decision-Making

Automated decision-making, including profiling, as defined in Article 22 of the GDPR, does not take place.

23. Validity and Changes to This Privacy Policy

We reserve the right to amend this Privacy Policy to ensure it always complies with current legal requirements or to reflect changes to our services in the Privacy Policy.
Effective as of: July 2026