Legal
Privacy policy
1. Privacy at a glance
Thank you for your interest in our website. Protecting your personal data is important to us. The following explains which personal data we process when you visit our website or use our contact form, the purposes for which it is processed and the rights available to you.
Personal data means any information that can identify you personally, such as your name, email address, telephone number or IP address.
2. Controller
The controller responsible for processing personal data on this website is:
Scheffler & Rech GbRDanziger Str. 8
10435 Berlin
Germany
Phone: +49 179 7424455
Email: claudia(at)sottoilsole.de
The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data.
3. Data protection officer
Our company has not appointed a data protection officer. If you have questions about privacy, please use the controller’s contact details above.
4. Hosting and provision of the website
Our website is hosted by the following provider:
IONOS SEElgendorfer Str. 57
56410 Montabaur
Germany
Email: info@ionos.de
Website: www.ionos.de
When you visit our website, the hosting provider processes technical access data required to provide the website securely and reliably. This may include:
- IP address of the accessing device
- date and time of access
- page or file requested
- referrer URL, where transmitted
- browser and browser version
- operating system
- volume of data transferred
- status of the successful or failed request
This data is processed to provide the website technically, ensure its stability and security and detect misuse or disruptions.
The legal basis is Article 6(1)(f) GDPR. Our legitimate interest lies in providing a secure, stable and error-free website.
The hosting provider processes this data on our behalf. Where required, we have concluded a data processing agreement pursuant to Article 28 GDPR.
Server log files are deleted once they are no longer required for the purposes stated.
5. Contact via contact form or email
When you contact us through the contact form or by email, we process the information you provide in order to handle your enquiry and communicate with you.
The data processed may include:
- name
- email address
- telephone number, if provided
- company, if provided
- content of your message
- time of the enquiry
- technical transmission metadata, where required
Processing takes place to handle your enquiry, communicate with you and, where applicable, initiate or carry out a business relationship.
The legal basis is Article 6(1)(b) GDPR where your enquiry concerns entering into or performing a contract. In all other cases, processing is based on Article 6(1)(f) GDPR and our legitimate interest in responding to your enquiry.
We do not share the submitted data without your consent unless this is necessary to handle your enquiry or required by law.
We store your enquiry and related data only for as long as necessary. Statutory retention periods remain unaffected; business correspondence may be subject to commercial and tax-law retention requirements.
6. Cookies and comparable technologies
Our website does not use cookies or comparable technologies to store information on your device.
7. Recipients of personal data
Within our company, personal data is processed only by the persons who need it for the purposes described.
Personal data may also be transferred to external service providers, in particular:
- hosting providers
- IT service providers
- email and communications providers
- website maintenance providers, where applicable
Where these providers process personal data on our behalf, this is based on a data processing agreement pursuant to Article 28 GDPR.
Data is shared with third parties only where permitted by law, where you have consented or where we are legally obliged to do so.
8. Retention period
We store personal data only for as long as necessary for the relevant purposes or for as long as statutory retention periods apply.
We delete data from contact enquiries once the enquiry has been fully dealt with and no statutory retention requirement applies. Business correspondence and tax-relevant documents may be subject to statutory retention periods.
9. Your rights
Under the applicable statutory provisions, you have the following rights:
- right of access under Article 15 GDPR
- right to rectification under Article 16 GDPR
- right to erasure under Article 17 GDPR
- right to restriction of processing under Article 18 GDPR
- right to data portability under Article 20 GDPR
- right to object to certain processing under Article 21 GDPR
- right to withdraw consent for the future under Article 7(3) GDPR
To exercise your rights, you may contact the controller at any time using the details above.
10. Right to lodge a complaint
If you believe that the processing of your personal data infringes data protection law, you have the right to lodge a complaint with a supervisory authority.
The competent authority may in particular be the authority in the federal state in which our company is based. For Berlin, this is:
Berliner Beauftragte für Datenschutz und InformationsfreiheitAlt-Moabit 59–61
10555 Berlin
Telefon: 030 13889-0
E-Mail: mailbox@datenschutz-berlin.de
Website: www.datenschutz-berlin.de
11. Right to object under Article 21 GDPR
Where we process personal data on the basis of Article 6(1)(f) GDPR, you have the right to object at any time on grounds relating to your particular situation.
We will then no longer process your personal data unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or processing serves the establishment, exercise or defence of legal claims.
12. Security
We take appropriate technical and organisational measures to protect your personal data against loss, misuse, unauthorised access, alteration or disclosure.
For security reasons, our website uses SSL or TLS encryption. You can recognise an encrypted connection because the browser address begins with “https://”.
13. Currency and changes to this privacy policy
This privacy policy is currently valid and was last updated in June 2026.
We reserve the right to adapt this privacy policy if our website, the services used or legal requirements change.
