Privacy Policy

    1. Data Controller

    CCDS GmbH
    Managing Director: Walter Hagenmayer
    Robert-Bosch-Str. 2a
    D-50354 Hürth
    Tel.: 0221 – 93767 200
    E-Mail: info@ccds.de

    Data Protection Officer:
    Dirk Strohmenger

    2. General Information on Data Processing

    We process personal data of our users only insofar as this is necessary to provide a functional website and our content and services. The processing of personal data regularly takes place only with the consent of the user or where processing is permitted by law.

    3. Hosting

    This website is hosted by an external service provider (hoster). The personal data collected on this website is stored on the hoster's servers. This may include IP addresses, contact requests, meta and communication data, contract data, contact details, names, website accesses, and other data generated through a website.

    The use of the hoster is in the interest of a secure, fast, and efficient provision of our online offering (Art. 6(1)(f) GDPR).

    We have concluded a data processing agreement (DPA) pursuant to Art. 28 GDPR with the provider. This is a contract required by data protection law that ensures the provider processes the personal data of our website visitors only according to our instructions and in compliance with the GDPR.

    4. Server Log Files

    The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:

    • Browser type and version
    • Operating system used
    • Referrer URL
    • Hostname of the accessing computer
    • Time of the server request
    • IP address

    This data is not merged with other data sources. The legal basis is Art. 6(1)(f) GDPR.

    5. Contact Form and Booking

    If you send us inquiries via the contact form or the booking form, your details from the respective form (name, email address, company if applicable, message, desired appointment) will be stored by us for the purpose of processing the inquiry and in case of follow-up questions.

    The processing of the data entered in the form is based on your consent (Art. 6(1)(a) GDPR) as well as for the implementation of pre-contractual measures (Art. 6(1)(b) GDPR), insofar as your inquiry is aimed at the conclusion of a contract or the use of a service. You may revoke your consent at any time. The lawfulness of the data processing carried out until the revocation remains unaffected by the revocation.

    The data you entered in the form will remain with us until you request its deletion, revoke your consent to storage, or the purpose for data storage no longer applies. Mandatory statutory provisions — in particular retention periods — remain unaffected.

    6. Email Notifications

    For sending email notifications (e.g., for contact requests or bookings), we use the Resend service provided by Resend, Inc. (USA). Processing takes place via the provider's European infrastructure (Ireland region). The data entered in the form is transmitted to Resend for this purpose. The legal basis is Art. 6(1)(f) GDPR.

    We have concluded a data processing agreement (DPA) pursuant to Art. 28 GDPR with the provider. Insofar as personal data is transferred to the USA, this is done on the basis of the EU-US Data Privacy Framework or the Standard Contractual Clauses (SCCs) of the EU Commission.

    Further information can be found in the Resend Privacy Policy.

    7. Fonts

    This website uses locally embedded fonts (self-hosting). No external servers (e.g., Google) are called, so no personal data is transmitted to third parties.

    8. Cookies and LocalStorage

    This website uses technically necessary browser storage, in particular LocalStorage for your chosen language and for your analytics consent decision. These functions are required to operate the website and do not transmit any personal data to third parties. The legal basis is Section 25 (2) no. 2 TDDDG.

    Analytics and audience measurement only take place after your explicit consent. Without consent, no analytics or tracking technologies are loaded and no such data is collected. Section 10 of this policy describes which service is used and how you can withdraw your consent at any time with effect for the future.

    9. Your Rights

    You have the following rights with regard to your personal data:

    • Right of access (Art. 15 GDPR)
    • Right to rectification (Art. 16 GDPR)
    • Right to erasure (Art. 17 GDPR)
    • Right to restriction of processing (Art. 18 GDPR)
    • Right to data portability (Art. 20 GDPR)
    • Right to object (Art. 21 GDPR)

    You also have the right to lodge a complaint with a data protection supervisory authority about the processing of your personal data.

    10. Google Analytics 4

    This website uses Google Analytics 4 (measurement ID G-CJ943GVCDP), a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The purpose of the processing is audience measurement, i.e. the statistical evaluation of how this website is used, in order to improve our content and our offering.

    Analytics is used solely on the basis of your consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) TDDDG. Without your consent, no analytics scripts are loaded and no data is transmitted to Google. We use Google Consent Mode v2 for this: all consent types are set to “denied” by default. The advertising parameters (ad_storage, ad_user_data, ad_personalization) remain permanently denied, as no Google Ads features are used. IP addresses are processed in truncated form (IP anonymisation).

    You may withdraw your consent at any time with effect for the future. To do so, use the “Cookie settings” link in the footer of this website. Withdrawing consent is as easy as giving it; the lawfulness of processing carried out before withdrawal remains unaffected.

    When Google Analytics is used, personal data may also be transferred to and processed on servers of Google LLC in the USA. For this transfer to a third country, Google relies on the EU-US Data Privacy Framework and on standard contractual clauses pursuant to Art. 46 GDPR. There is a risk that US authorities may access this data. Further information can be found in Google's privacy policy.

    As of: September 2026