Legal Disclosures
Last updated: 6 October 2026
1. Controller
The controller responsible for processing personal data on this website is:
KW Fluidtech GmbH
Gläser Straße 14
53721 Wehr
Germany
Represented by: Michael Bauer Managing Director
Email: info@kwft.de
Telephone: +49 171 3420790
“Personal data” means any information relating to an identified or identifiable natural person.
2. Data Protection Officer
[Choose and complete one of the following alternatives.]
If a data protection officer has been appointed:
Our data protection officer can be contacted at:
Represented by: Michael Bauer Managing Director
Email: info@kwft.de
Telephone: +49 171 3420790
If no data protection officer is required or appointed, delete this section.
3. Hosting and Server Log Files
When you visit this website, our web server or hosting provider may automatically process technical information, including:
-
IP address;
-
date and time of access;
-
requested page or file;
-
amount of data transferred and access status;
-
referring website;
-
browser type and version;
-
operating system; and
-
device information.
This processing is necessary to provide the website, maintain its stability and security, diagnose technical problems and prevent misuse.
The legal basis is Article 6(1)(f) GDPR. Our legitimate interests are the secure, reliable and technically efficient operation of this website.
The website is hosted by:
[Name and address of hosting provider]
The hosting provider processes personal data on our behalf under a data processing agreement in accordance with Article 28 GDPR.
Server log data is normally erased after [insert actual period, e.g. 7 or 14 days], unless longer retention is necessary to investigate a security incident or comply with a legal obligation.
4. Contacting Us
If you contact us by email, telephone or through a contact form, we process the information you provide, including your contact details, the content of your enquiry and related communication data.
If your enquiry concerns a contract or steps prior to entering into a contract, processing is based on Article 6(1)(b) GDPR. In other cases, processing is based on Article 6(1)(f) GDPR. Our legitimate interest is to respond to enquiries and conduct our business communications.
We retain the data until your enquiry has been conclusively dealt with. Applicable statutory retention obligations may require longer storage.
You are not legally required to contact us or provide this information. However, without the information required to process your enquiry, we may be unable to respond.
5. Cookies and Similar Technologies
This website may use cookies, local storage or comparable technologies.
Technologies that are strictly necessary to provide a service expressly requested by you may be used without consent in accordance with Section 25(2) of the German Telecommunications Digital Services Data Protection Act (“TDDDG”). Where personal data is processed through these technologies, the applicable legal basis is Article 6(1)(b) or Article 6(1)(f) GDPR.
Non-essential technologies, including analytics, marketing or external media services, are used only after you have given your consent. The legal bases are Section 25(1) TDDDG and Article 6(1)(a) GDPR.
You may withdraw your consent at any time with effect for the future by using [link or name of cookie settings tool]. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.
Technologies currently used
The following list must reflect the website’s actual configuration:
| Service | Provider | Purpose | Data processed | Legal basis | Retention |
|---|---|---|---|---|---|
| [Service name] | [Provider and address] | [Purpose] | [Data categories] | [Legal basis] | [Period] |
If the website uses only technically necessary session cookies, state this clearly and remove all inapplicable references to analytics and marketing.
6. External Services and Embedded Content
[Complete this section for every service actually used, such as Google Analytics, Google Maps, YouTube, Vimeo, LinkedIn, reCAPTCHA, web fonts loaded from third-party servers, newsletter tools or social media plug-ins.]
For each service, specify:
-
the provider and its contact details;
-
the purpose and legal basis of processing;
-
the categories of data processed;
-
recipients of the data;
-
retention periods;
-
possible transfers outside the European Economic Area;
-
the safeguards used for such transfers; and
-
how consent can be withdrawn.
External content or non-essential third-party services must not be activated before the user has given any consent required by law.
7. Recipients of Personal Data
We disclose personal data only where this is necessary and legally permitted. Potential recipients include:
-
hosting and IT service providers;
-
communication and email service providers;
-
professional advisers;
-
public authorities where disclosure is legally required; and
-
other processors engaged under Article 28 GDPR.
Service providers receive only the data necessary to perform their respective tasks and must process it in accordance with our instructions or their own applicable legal obligations.
8. Transfers to Countries Outside the EEA
If personal data is transferred to a country outside the European Union or European Economic Area, we ensure that the requirements of Articles 44 to 49 GDPR are met.
Transfers may be based on an adequacy decision issued by the European Commission or on appropriate safeguards, such as the European Commission’s Standard Contractual Clauses, supplemented by additional safeguards where required.
Details of actual third-country transfers and information on how to obtain a copy of the relevant safeguards must be provided here:
[Insert details or state that no such transfers take place.]
9. Retention of Personal Data
We retain personal data only for as long as necessary for the purpose for which it was collected. Data may be retained for a longer period where required by statutory retention obligations, for the establishment, exercise or defence of legal claims, or for the investigation of security incidents.
Once the relevant purpose and any applicable retention obligations cease to apply, the data is erased or anonymised.
10. Your Rights
Subject to the applicable legal requirements, you have the right to:
-
obtain information about and access to your personal data under Article 15 GDPR;
-
request correction of inaccurate data under Article 16 GDPR;
-
request erasure under Article 17 GDPR;
-
request restriction of processing under Article 18 GDPR;
-
receive data in a portable format under Article 20 GDPR;
-
withdraw consent at any time under Article 7(3) GDPR; and
-
lodge a complaint with a competent data protection supervisory authority under Article 77 GDPR.
Right to object
Where processing is based on Article 6(1)(f) GDPR, you have the right to object to the processing on grounds relating to your particular situation. We will cease processing unless we demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing is necessary for the establishment, exercise or defence of legal claims.
If personal data is processed for direct marketing purposes, you may object at any time. Following such an objection, your data will no longer be used for direct marketing.
To exercise your rights, contact us using the details provided in Section 1.
11. Right to Lodge a Complaint
You may lodge a complaint with any competent data protection supervisory authority, particularly the authority responsible for your habitual residence, place of work or the place of the alleged infringement.
The supervisory authority responsible for our registered office is:
[Name of supervisory authority]
[Address]
[Website and contact details]
12. Automated Decision-Making
We do not use personal data collected through this website for automated decision-making, including profiling, within the meaning of Article 22 GDPR.
[Replace this section if automated decision-making or profiling is actually used.]
13. Data Security
We use appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. These measures are reviewed and adjusted as appropriate, taking into account the state of the art, implementation costs and the nature and risks of the processing.
14. Changes to This Privacy Policy
We may update this Privacy Policy when our website, processing activities or legal requirements change. The current version is available on this website. The date of the latest revision appears at the beginning of this document.
