Privacy Policy

1. Controller

Sebastian Reßler
Mirabellenweg 34, 76534 Baden-Baden, Germany
Email: [email protected]

This website is operated by Sebastian Reßler under a domain leasing agreement with CY Certify GmbH, Kölnstraße 235, 50321 Brühl, Germany. Lead data submitted through the contact form is shared with CY Certify GmbH for the purpose of responding to your enquiry and providing EPR compliance services.

2. Data We Collect

a) Server log files

When you visit this website, our hosting provider automatically collects and stores information in server log files that your browser transmits. This includes your IP address, browser type and version, operating system, referrer URL, requested page, and the date and time of access. This data cannot be attributed to a specific person and is not merged with other data sources. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in stable and secure website operation).

b) Contact form

When you submit the contact form, we process the data you provide — including your name, email address, message, and optionally your phone number and company name — in order to respond to your enquiry. The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures) or Art. 6(1)(f) GDPR (legitimate interest in processing enquiries). Your data is forwarded to CY Certify GmbH for the purpose of providing the requested EPR compliance services. This data is stored for as long as necessary to handle your enquiry or as required by statutory retention periods.

c) Attribution and tracking parameters

When you arrive on this website, we may store attribution parameters such as UTM values (utm_source, utm_medium, utm_campaign), click IDs, and entry domain information alongside your form submission. This data is used to measure marketing campaign performance and to attribute leads to the correct source. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in measuring advertising effectiveness).

3. Hosting

This website is hosted by INWX GmbH & Co. KG, Prinzessinnenstraße 20, 10969 Berlin, Germany. For DNS management and SSL encryption, we use Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA. Cloudflare may process your IP address and connection data to deliver the website securely. Cloudflare is certified under the EU-U.S. Data Privacy Framework. For more information, see Cloudflare's privacy policy.

4. Analytics & Advertising

If you consent to non-essential tracking via the consent banner, we may use analytics tools to understand how the site is used and to measure advertising performance. No non-essential tracking occurs without your prior consent. The legal basis is Art. 6(1)(a) GDPR (consent). You may withdraw your consent at any time by adjusting your preferences via the consent banner.

5. Data Sharing

Your personal data is shared with the following recipients only as described above: CY Certify GmbH (processing of enquiries and provision of EPR compliance services), INWX GmbH & Co. KG (hosting), and Cloudflare, Inc. (DNS, SSL, security). No data is sold to third parties. Transfers to recipients outside the EU/EEA (Cloudflare) are safeguarded by the EU-U.S. Data Privacy Framework or Standard Contractual Clauses.

6. Retention

Personal data from the contact form is retained for as long as necessary to process your enquiry, and subsequently in accordance with statutory retention obligations (typically 6–10 years under German tax and commercial law). Server log files are deleted automatically after 14 days.

7. Your Rights

Under the GDPR, you have the right to: access your personal data (Art. 15 GDPR), rectification of inaccurate data (Art. 16 GDPR), erasure of your data (Art. 17 GDPR), restriction of processing (Art. 18 GDPR), data portability (Art. 20 GDPR), and to object to processing based on legitimate interest (Art. 21 GDPR). To exercise any of these rights, contact us at [email protected].

8. Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority. The competent authority is: Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg, Lautenschlagerstraße 20, 70173 Stuttgart. www.baden-wuerttemberg.datenschutz.de

Last updated: 2026-03-07