The following provides information about the types of personal data we process, the extent of processing, and the purposes for which processing takes place.
Personal data means any information relating to an identified or identifiable natural person (data subject), such as name, address, email address, or online behaviour.
Data subjects include persons with whom we maintain a relationship in the course of providing our services, visitors to our website, and users of our online services.
AXENTIS System Technologies GmbH
Anton-Grimmer-Straße 4
73466 Lauchheim
Phone: +49 (0) 7363 / 950 – 0
Email: info@ast-systec.com
We have appointed a Data Protection Officer for our company.
Kutzschbach Electronic GmbH & Co. KG
Markham Straße 15
86720 Nördlingen
Germany
Phone: +49 (0) 9081 2503 450
Email: datenschutz@vrades-maschienenbau.com
· Master data (e.g. names and addresses)
· Contact data (e.g. telephone numbers and email addresses)
· Usage data (e.g. access times, pages visited)
· Metadata (e.g. browser type, IP address, operating system)
· Content data (e.g. text entered in contact forms or similar)
· Customers
· Prospective customers
· Users (website / online services)
· Information
· Communication
· Customer service
· Performance of contractual obligations
· Direct marketing / marketing
· Technical provision of online services
· Security measures to protect online services
· Audience measurement to improve services
Processing of your personal data is carried out exclusively on the basis of the following legal grounds:
Consent pursuant to Art. 6(1)(a) GDPR
“The data subject has given consent to the processing of his or her personal data for one or more specific purposes.”
Performance of a contract and pre-contractual enquiries pursuant to Art. 6(1)(b) GDPR
“Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract.”
Legal obligation pursuant to Art. 6(1)(c) GDPR
“Processing is necessary for compliance with a legal obligation to which the controller is subject.”
Legitimate interests pursuant to Art. 6(1)(f) GDPR
“Processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child.”
Art. 88 GDPR, § 26 BDSG (new)
Data processing in the employment context, i.e. data processing for purposes of the employment relationship.
As a matter of principle, your data remains within our organisation. Your personal data will only be disclosed or transferred to third parties:
· on the basis of a statutory permission,
· with your consent,
· where we are legally required to do so, or
· on the basis of a legitimate interest pursuant to Art. 6(1)(f) GDPR.
Our processors are bound by data processing agreements pursuant to Art. 28 GDPR, obligating them to implement the necessary technical and organisational measures to ensure the protection of data subjects’ rights.
Transfers of your personal data to third countries (outside the European Union (EU) / European Economic Area (EEA)) are made only to countries:
· for which an adequacy decision by the European Commission exists, or
· for which appropriate safeguards within the meaning of Art. 46 GDPR are in place,
· which offer an adequate level of protection pursuant to Art. 45 et seq. GDPR,
· which are subject to officially recognised contractual commitments such as the so-called “Standard Contractual Clauses”, or
· for which one of the derogations under Art. 49 GDPR applies.
Your personal data will be routinely erased or its processing restricted once the applicable statutory retention periods have expired (e.g. retention periods under commercial and tax law), provided the data is no longer required for the performance of a contract and/or we no longer have a legitimate interest in continued storage.
When you visit our website, your browser automatically transmits the following information to our provider’s server:
· IP address of your device
· Date and time of access
· Name and URL of files retrieved
· Website from which access originated or from which you were directed to our site (referrer URL)
· Browser used and, where applicable, the operating system of your device
· Name of the access provider
This data is not merged with other data sources. The IP address is anonymised.
This data is collected to ensure the proper functioning of the website, to optimise the website, and to ensure the security of our IT systems. These purposes also constitute our legitimate interest in processing pursuant to Art. 6(1)(f) GDPR.
This data is deleted automatically on a regular basis. In the event of misuse of the website, the relevant data whose further storage is necessary for evidentiary purposes will be retained until the matter has been resolved.
We use the hosting service provided by Webflow, Inc., 398 11th Street, 2nd Floor, San Francisco, CA 94103, USA (hereinafter “Webflow”), for the purpose of making our website available, on the basis of processing carried out on our behalf. When you visit our website, Webflow collects various log files, including your IP address.
Further information on Webflow’s data protection practices is available at: https://webflow.com/legal/eu-privacy-policy
Data transfers to the USA are based on the European Commission’s Standard Contractual Clauses. Details are available at: https://webflow.com/legal/eu-privacy-policy
Webflow holds certification under the “EU–US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the United States designed to ensure compliance with European data protection standards for data processing carried out in the USA. Any company certified under the DPF undertakes to comply with these standards. Further information is available from the provider at: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?id=a2zt0000000TT9jAAG&status=Active
This website uses cookies. Cookies are small text files stored in the user’s browser or by the browser on the user’s device. When a user accesses a website, a cookie may be stored on the user’s operating system. The cookie contains a characteristic string that enables unique identification of the browser when the website is accessed again.
A distinction is made between the following types of cookies:
Session Cookies
Session cookies are functionally necessary cookies that do not require consent, as they are automatically deleted when the user leaves the website. The legal basis for this processing is Art. 6(1)(f) GDPR.
Persistent Cookies
Persistent cookies remain on the device permanently. They may be used, for example, to verify login status or to display preferred content. Data processed through persistent cookies may also be used for audience measurement. The legal basis for this processing is Art. 6(1)(a) GDPR; the user’s consent is therefore required.
We use cookies that enable analysis of the user’s browsing behaviour. The following data is stored and transmitted via these cookies:
· Frequency of page views
· Use of website functions
When users access our website, they are informed about the use of cookies for analytical purposes and their consent to the processing of the personal data used in this context is obtained. This notice also refers users to this Privacy Policy.
Users may withdraw their consent at any time via the cookie settings and object to the processing of their personal data. Objection may also be made via the relevant settings in the user’s browser.
The transmission of cookies can be disabled or restricted by changing the browser settings. Cookies already stored may be deleted at any time, including automatically. Each browser manages these cookie settings differently; the browser’s help menu explains how to change the cookie settings. Disabling cookies may limit the functionality of this website.
We may work with advertising partners who assist us in making our website more relevant to you. For this purpose, cookies from partner companies may also be stored on your device when you visit our website (third-party cookies). This may include providers located in countries without an adequate level of data protection. Data may be transferred, for example, to partner companies in the USA.
Our website uses CCM19 to obtain your consent to the storage of certain cookies on your device or to the use of certain technologies, and to document such consent in a legally compliant manner. The provider of this technology is Papoo Software & Media GmbH, Auguststr. 4, 53229 Bonn (hereinafter “CCM19”). When you access our website, a connection is established to the CCM19 servers in order to obtain your consent and other declarations regarding the use of cookies. CCM19 then stores a cookie in your browser in order to be able to attribute the consents granted or their withdrawal to you. Data collected in this way is retained until you request its deletion, delete the CCM19 cookie yourself, or the purpose for data storage ceases to apply. Mandatory statutory retention obligations remain unaffected. CCM19 is used in order to obtain the legally required consents for the use of cookies. The legal basis is Art. 6(1)(c) GDPR.
Data Processing Agreement
We have concluded a data processing agreement (DPA) for the use of the above-mentioned service. This is a contract required under data protection law, which ensures that the service provider processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.
As a general rule, it is possible to use our website without providing personal data.
If you contact us by other means, such as by email or telephone, the data collected in this context will be treated as confidential and will not be passed on to third parties without your consent.
The respective purpose of data processing arises from:
· the data subject’s voluntary disclosure pursuant to Art. 6(1)(a) GDPR,
· the performance of a contract or the implementation of pre-contractual measures pursuant to Art. 6(1)(b) GDPR,
· the legitimate interest in effectively handling enquiries addressed to the company pursuant to Art. 6(1)(f) GDPR.
Data is deleted as soon as it is no longer required for the purpose for which it was collected. In the case of personal data transmitted by email, this occurs when the respective conversation with the user has ended. A conversation is deemed to have ended when the circumstances indicate that the matter in question has been conclusively resolved.
Users have the right at any time to object to the processing of their personal data. In such a case, the conversation cannot be continued. All personal data stored in the course of making contact will be deleted in such cases.
We process the data of our contractual and business partners primarily for the purpose of fulfilling our contractual obligations and for communication purposes. Processing also takes place for proper and sound business management and to protect our legal rights. Processing is therefore carried out:
· for the performance of a contract and pre-contractual enquiries pursuant to Art. 6(1)(b) GDPR,
· on the basis of a legal obligation pursuant to Art. 6(1)(c) GDPR, or
· on the basis of legitimate interests pursuant to Art. 6(1)(f) GDPR.
Data is only passed on to third parties where this is necessary for compliance with statutory obligations or where indicated in the contract or this Privacy Policy.
As a data subject, you may exercise the following rights against us under the General Data Protection Regulation:
Right of Access – Article 15 GDPR
You have the right to request information about the personal data we hold about you. In particular, you may request information on the purposes of processing, the categories of personal data concerned, the categories of recipients to whom your data has been or will be disclosed, the planned retention period, the existence of a right to rectification, erasure, restriction of processing or objection, the right to lodge a complaint, the source of your data if it was not collected by us, and the existence of any automated decision-making, including profiling, and meaningful information about the logic involved. A simple informal request by email or post is sufficient. You will receive the requested information within one month of receipt.
Right to Rectification – Article 16 GDPR
If we have collected or stored inaccurate data relating to you, you may request its rectification or completion by way of an informal request. You will receive confirmation of the change to your data within one month of receipt.
Right to Erasure – Article 17 GDPR
You have the right to request the erasure of your personal data stored by us, unless processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise, or defence of legal claims. This right applies where the purposes for processing have ceased to exist, where you have objected to processing pursuant to Article 21 GDPR, where you have withdrawn your consent pursuant to Article 7 GDPR, or where processing is unlawful.
Right to Restriction of Processing – Article 18 GDPR
You have the right to request restriction of the processing of your personal data where you contest the accuracy of the data, where processing is unlawful but you oppose erasure, where we no longer need the data but you require it for the establishment, exercise, or defence of legal claims, or where you have objected to processing pursuant to Art. 21 GDPR. This may also be communicated to us informally.
Right to Data Portability – Article 20 GDPR
You have the right to receive the personal data you have provided to us in a structured, commonly used, and machine-readable format, or to request its transfer to another controller.
Right to Withdraw Consent – Art. 7(3) GDPR
You have the right to withdraw any consent you have given at any time. This means that we may no longer continue the data processing based on that consent for the future.
Right to Object – Article 21 GDPR
Where your personal data is processed on the basis of legitimate interests pursuant to Art. 6(1)(f) GDPR, you have the right to object to the processing of your personal data where there are grounds relating to your particular situation or where the objection relates to direct marketing.
In the latter case, you have a general right to object which will be implemented by us without the need to specify a particular situation.
To exercise your right to withdraw consent or your right to object, a simple email to info@winterpraxis.com is sufficient.
Right to Lodge a Complaint – Article 77 GDPR
You have the right to lodge a complaint with a supervisory authority. You may contact the supervisory authority of your habitual residence, your place of work, or the place of the alleged infringement.
This Privacy Policy is currently valid and was last updated on 02 June 2026.
