PRIVACY POLICY
Last updated: 17 August 2026
- CONTROLLER
The controller responsible for processing personal data on this website within the meaning of the General Data Protection Regulation (GDPR) is:
Druczek GmbH
Zevener Ring 14
27367 Sottrum
Germany
Represented by the Managing Director:
Uwe Schulczek
Telephone: +49 175 6065437
Email:
info@druczek-service.de
Website:
www.druczek-service.de
2. GENERAL INFORMATION
We process personal data only where this is necessary to operate this website, respond to enquiries, provide requested information, send newsletters, process orders and payments, deliver digital products or comply with legal obligations.
Personal data means any information relating to an identified or identifiable natural person.
The legal bases for processing personal data include:
• Article 6(1)(a) GDPR – consent;
• Article 6(1)(b) GDPR – performance of a contract or steps taken before entering into a contract;
• Article 6(1)(c) GDPR – compliance with a legal obligation;
• Article 6(1)(f) GDPR – our legitimate interests or those of a third party.
Where processing is based on legitimate interests, these interests generally consist of operating a secure and functional website, communicating with customers and interested parties, preventing misuse and improving our services.
3. WEBSITE HOSTING AND SERVER LOG FILES
This website is hosted by:
IONOS SE
Elgendorfer Straße 57
56410 Montabaur
Germany
When you access this website, technical information may be processed automatically, including:
• IP address;
• date and time of access;
• requested page or file;
• referrer URL;
• browser type and browser version;
• operating system;
• device type;
• access status and transferred data volume.
This processing is necessary to provide the website, maintain technical stability, detect attacks and prevent misuse.
The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is the secure, reliable and efficient operation of this website.
We have concluded a data-processing agreement with IONOS where required by law.
Further information about data processing by IONOS is available at:
https://www.ionos.de/terms-gtc/privacy-policy/
4. IONOS WEBANALYTICS
This website uses IONOS WebAnalytics for statistical evaluation and technical optimisation.
IONOS WebAnalytics may process the following information:
• referrer;
• requested page or file;
• browser type and version;
• operating system;
• device type;
• time of access;
• anonymised IP address.
According to IONOS, WebAnalytics does not use tracking cookies. IP addresses are anonymised immediately after transmission and are not used to identify individual visitors.
The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is the statistical evaluation and technical improvement of the website.
5. COOKIES AND SIMILAR TECHNOLOGIES
This website may use technically necessary cookies or comparable technologies where these are required for the operation, security or functionality of the website.
Technically necessary cookies may be used without consent where permitted by law. The legal bases are Section 25(2) of the German Telecommunications Digital Services Data Protection Act (TDDDG) and Article 6(1)(f) GDPR.
Any non-essential cookies, tracking technologies or external services requiring consent will be activated only after you have given your consent through the consent-management system.
You may withdraw your consent at any time with effect for the future through the cookie settings, where available.
You can also configure your browser to block or delete cookies. Blocking technically necessary cookies may restrict the functionality of the website.
6. CONTACT BY EMAIL, TELEPHONE OR CONTACT FORM
If you contact us by email, telephone or through a contact form, we process the information you provide, such as:
• name;
• email address;
• telephone number;
• company details;
• content of your enquiry;
• date and time of communication.
The data is processed to respond to your enquiry and manage any resulting business relationship.
Where your enquiry relates to a contract or pre-contractual measures, the legal basis is Article 6(1)(b) GDPR. In other cases, the legal basis is Article 6(1)(f) GDPR. Our legitimate interest is the efficient handling of enquiries and business communications.
We delete enquiry data when it is no longer required, unless statutory retention obligations or legitimate interests require longer storage.
7. NEWSLETTER AND EMAIL MARKETING
If you subscribe to our newsletter or request free resources by email, we process your email address and, where provided, your name and other information required for the subscription.
Newsletter subscriptions are generally confirmed through a double opt-in procedure. We may record the time of registration, confirmation and the IP address used to document consent and prevent misuse.
The legal basis for sending the newsletter is your consent under Article 6(1)(a) GDPR.
We use Brevo to manage newsletter subscriptions, email communications and automated follow-up sequences. Brevo is a service provided by an entity of the Brevo group, which may include Sendinblue GmbH or another Brevo group company applicable to our contractual relationship.
Brevo processes personal data on our behalf in accordance with a data-processing agreement.
Depending on the service configuration and Brevo’s sub-processors, data may also be processed outside the European Economic Area. Where required, such transfers are based on an adequacy decision or appropriate safeguards such as the European Commission’s Standard Contractual Clauses.
Further information is available in Brevo’s privacy policy:
https://www.brevo.com/legal/privacypolicy/
You may withdraw your consent and unsubscribe at any time by using the unsubscribe link included in every marketing email or by contacting us at info@druczek-service.de.
Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
8. ORDERS AND DIGITAL PRODUCTS
When you purchase a digital product, we process the information required to conclude and perform the contract, including:
• name;
• billing address;
• email address;
• company name, where applicable;
• VAT information, where applicable;
• ordered product;
• order date and order status;
• payment status;
• information required to provide access to or deliver the product.
The legal basis is Article 6(1)(b) GDPR.
Information required for accounting, taxation and commercial-law purposes is also processed on the basis of Article 6(1)(c) GDPR and retained for the applicable statutory retention period.
We may use your email address to deliver the purchased product, provide access information, send the order confirmation or communicate important information relating to the purchase.
9. PAYMENT PROCESSING WITH STRIPE
Payments may be processed through Stripe.
Depending on the payment method and applicable Stripe entity, personal data may be processed by:
Stripe Payments Europe, Limited
1 Grand Canal Street Lower
Grand Canal Dock
Dublin
Ireland
and/or other Stripe group companies involved in providing the payment service.
Stripe may process information including:
• name;
• billing address;
• email address;
• payment method;
• payment details;
• transaction amount;
• currency;
• date and time of payment;
• IP address;
• device and fraud-prevention information.
Payment information is generally transmitted directly to Stripe. We do not receive or store complete credit-card details.
The processing is necessary to perform the purchase contract and process payment. The legal basis is Article 6(1)(b) GDPR. Where fraud prevention, security or legal obligations are involved, processing may also be based on Article 6(1)(c) or Article 6(1)(f) GDPR.
Stripe may process data outside the European Economic Area. Where required, Stripe uses recognised safeguards such as adequacy decisions or the European Commission’s Standard Contractual Clauses.
Further information is available in Stripe’s privacy policy:
10. CONTRACTUAL AND ACCOUNTING DATA
We process customer, contract, order, payment and invoice data for:
• contract performance;
• customer service;
• bookkeeping and taxation;
• asserting, exercising or defending legal claims;
• complying with statutory retention obligations.
The legal bases are Article 6(1)(b), Article 6(1)(c) and, where applicable, Article 6(1)(f) GDPR.
Data subject to statutory retention requirements is deleted after the relevant retention period has expired, unless it remains necessary for another lawful purpose.
11. RECIPIENTS OF PERSONAL DATA
We disclose personal data only where this is necessary, legally permitted or required by law.
Recipients may include:
• hosting and IT service providers;
• email and newsletter providers;
• payment service providers;
• banks and financial institutions;
• tax advisers and accounting service providers;
• delivery and digital-product service providers;
• authorities and public bodies where required by law;
• legal advisers where necessary to establish, exercise or defend legal claims.
Service providers acting on our behalf are contractually bound to process personal data only in accordance with our instructions and applicable data-protection law.
12. INTERNATIONAL DATA TRANSFERS
Some service providers or their sub-processors may process personal data outside the European Union or European Economic Area.
Where the European Commission has not issued an adequacy decision for the relevant country, transfers are made only where appropriate safeguards are in place. These may include the European Commission’s Standard Contractual Clauses and additional technical or organisational safeguards.
Information about the safeguards used by individual providers can be found in their respective privacy policies.
13. STORAGE PERIOD
We retain personal data only for as long as necessary for the purpose for which it was collected.
Different retention periods may apply depending on the type of data and processing purpose. In particular:
• contact enquiries are stored until they have been fully processed, unless further retention is necessary;
• newsletter data is stored until consent is withdrawn or the subscription is terminated;
• contract, invoice and payment data is retained for the applicable statutory retention period;
• technical data is retained only for as long as required for security, operation and troubleshooting.
Data may be retained for longer where this is required by law or necessary to establish, exercise or defend legal claims.
14. DATA SECURITY
We use appropriate technical and organisational security measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.
This website uses encrypted transmission through TLS/SSL. You can normally recognise an encrypted connection by “https://” in the browser address bar.
Electronic communication can nevertheless have security vulnerabilities. Complete protection against access by third parties cannot be guaranteed.
15. YOUR RIGHTS
Subject to the applicable legal requirements, you have the right to:
• obtain information about your personal data under Article 15 GDPR;
• request correction of inaccurate data under Article 16 GDPR;
• request deletion under Article 17 GDPR;
• request restriction of processing under Article 18 GDPR;
• receive information about recipients under Article 19 GDPR;
• receive data in a portable format under Article 20 GDPR;
• object to processing under Article 21 GDPR;
• withdraw consent at any time with effect for the future under Article 7(3) GDPR;
• lodge a complaint with a supervisory authority under Article 77 GDPR.
Where processing is based on Article 6(1)(f) GDPR, you may object at any time on grounds relating to your particular situation.
Where personal data is processed for direct marketing, you may object to such processing at any time without giving reasons.
To exercise your rights, please contact:
16. RIGHT TO LODGE A COMPLAINT
You have the right to lodge a complaint with a data-protection supervisory authority.
The supervisory authority responsible for our registered office is:
The State Commissioner for Data Protection of Lower Saxony
Prinzenstraße 5
30159 Hannover
Germany
Telephone: +49 511 120-4500
Email:
poststelle@lfd.niedersachsen.de
Website:
https://www.lfd.niedersachsen.de/
17. AUTOMATED DECISION-MAKING
We do not use personal data collected through this website for automated decision-making, including profiling, that produces legal effects or similarly significantly affects you.
Payment service providers may use automated systems for fraud prevention and payment-risk assessment under their own responsibility.
18. EXTERNAL LINKS
This website may contain links to external websites or social-media platforms.
When you follow an external link, data processing is carried out by the operator of the external website. We have no control over such processing. Please refer to the privacy policy of the respective provider.
19. CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy where this is necessary due to changes in legal requirements, our website, the services used or our data-processing activities.
The version published on this website at the time of your visit applies.