DE EN
+49 9253 91125 info@thermo-stone.de Send an enquiry →

Privacy policy

This English version is provided for your convenience. Only the German version is legally binding.

This privacy policy explains which personal data we process when you visit our website and when you contact us, for what purpose and on what legal basis.

1. Controller

ThermoStone GmbH
Marktplatz 6
95163 Weißenstadt
Germany

Represented by the Managing Director Gerd Bergmann
Phone: +49 9253 91125
Email:

2. The key points at a glance

  • When you visit our website, we set no cookies and use no analytics or tracking tools.
  • We do not embed any third-party content or services. Fonts, images and scripts are loaded exclusively from our own server.
  • We only process personal data insofar as this is technically necessary to operate the website or you provide the data to us yourself, for example via the contact form.

3. Hosting and server log files

Our website is operated on a server in a data centre of dogado GmbH in Germany. A data processing agreement pursuant to Art. 28 GDPR is in place with our service provider.

Each time the website is accessed, the server automatically stores information transmitted by your browser (server log files):

  • IP address of the requesting device
  • date and time of access
  • page or file accessed and amount of data transferred
  • notification of whether the request was successful (HTTP status code)
  • previously visited page (referrer), if transmitted by your browser
  • browser type, browser version and operating system

We need this data to deliver the website, to ensure its stability and security and to fend off attacks. The legal basis is Art. 6 (1) (f) GDPR; our legitimate interest lies in the secure and error-free operation of the website. The log files are automatically deleted after 14 days. They are only kept longer if individual data is required to investigate a specific security incident; they are then deleted as soon as the incident has been fully resolved.

4. Encryption

The connection to our website is encrypted using TLS, which you can recognise by the padlock symbol and “https://” in your browser’s address bar. Data you send to us cannot be read by third parties.

5. Contact form and contact by email or phone

If you contact us via the contact form, by email or by phone, we process the data you provide in order to answer your enquiry. In the contact form, this is your name, your email address and your message; you may also voluntarily provide your company and phone number.

The information from the contact form is sent by email to our mailbox, which is operated on our own server. It is not additionally stored in the website’s database.

The legal basis is Art. 6 (1) (b) GDPR insofar as your enquiry relates to a contract or its preparation, and otherwise Art. 6 (1) (f) GDPR; our legitimate interest lies in answering your enquiry. We delete your data as soon as your enquiry has been dealt with, unless statutory retention obligations apply. We retain business correspondence for up to six or ten years in accordance with § 257 of the German Commercial Code (HGB) and § 147 of the German Fiscal Code (AO).

To protect against spam, the form contains a simple security question that is evaluated exclusively on our own server. When the form is submitted, a technically necessary security cookie may be set to prevent misuse of the form (§ 25 (2) no. 2 TDDDG, Art. 6 (1) (f) GDPR). It contains no information about you and is deleted when you close your browser.

6. Links to other websites

Our website contains links to external services, for example the “Plan route” link to Google Maps. Only when you click on such a link are you forwarded to the respective provider’s website; from then on, its privacy policy applies. No data is transferred to these providers beforehand.

7. Your rights

You have the following rights with regard to your personal data:

  • right of access (Art. 15 GDPR)
  • right to rectification (Art. 16 GDPR)
  • right to erasure (Art. 17 GDPR)
  • right to restriction of processing (Art. 18 GDPR)
  • right to data portability (Art. 20 GDPR)
  • right to object to processing (Art. 21 GDPR)

Right to object: Insofar as we process your data on the basis of Art. 6 (1) (f) GDPR, you may object to this processing at any time on grounds relating to your particular situation.

To exercise your rights, an informal message to the contact details above is sufficient.

8. Right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your data violates data protection law. The authority responsible for us is the Bavarian State Office for Data Protection Supervision (BayLDA), Promenade 18, 91522 Ansbach, Germany, www.lda.bayern.de.

9. Last updated

This privacy policy was last updated in September 2026. We will adapt it whenever the website or legal requirements change.