Data Privacy
1. Controller and Overview
The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is: Sales Art & Science – Enno Lückel
Tiergartenstr. 11
35619 Braunfels
Germany
Email: hello at sales-art-and-science . com
2. Your Rights as a Data Subject
You have the following rights with regard to the personal data concerning you:
Right of access (Art. 15 GDPR) — confirmation of whether and which data we process about you.
Right to rectification (Art. 16 GDPR) — correction of inaccurate data.
Right to erasure (Art. 17 GDPR) — deletion of your data, subject to statutory retention obligations.
Right to restriction of processing (Art. 18 GDPR).
Right to data portability (Art. 20 GDPR).
Right to object to processing (Art. 21 GDPR), in particular to processing based on legitimate interests or for direct marketing.
Right to withdraw consent at any time with future effect (Art. 7(3) GDPR), without affecting the lawfulness of processing carried out before the withdrawal.
Right to lodge a complaint with a supervisory authority (Art. 77 GDPR). The authority responsible for us is: Der Hessische Beauftragte für Datenschutz und Informationsfreiheit, Postfach 3163, 65021 Wiesbaden, Germany (office: Wilhelmstraße 7, 65185 Wiesbaden), datenschutz.hessen.de.
3. Hosting and Server Log Files
This website is hosted by: IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany
Every time this website is accessed, the hosting provider’s server automatically collects and stores information in server log files, which your browser transmits automatically. This typically includes: browser type and version, operating system, referrer URL, hostname of the accessing device, time of the server request, and IP address.
This data is not merged with other data sources. It is collected on the basis of Art. 6(1)(f) GDPR (legitimate interest), to ensure a technically error-free presentation and the security of the website. It is generally deleted automatically after a short period, typically within a few days to a few weeks.
Our hosting provider also offers a built-in analytics feature (IONOS SiteAnalytics), which is active by default. It does not use cookies, and IP addresses are anonymized immediately upon receipt and used only to approximate visitor location; no data enabling identification of individual visitors is stored, and no data is shared with third parties. Because it does not use cookies or other local storage, this processing does not require consent under § 25 TDDDG and is based on Art. 6(1)(f) GDPR (legitimate interest in understanding site usage and improving the website).
4. Cookies and Local Storage (§ 25 TDDDG)
This website uses cookies and similar technologies (local storage). Where these are not strictly necessary for operating the site, § 25(1) TDDDG requires your prior consent before they are set — this applies regardless of whether the data involved is personal in the GDPR sense.
We obtain this consent through a consent management tool: CCM19
You can withdraw or adjust your consent at any time via the consent settings, typically accessible through a link in the footer of this website.
5. Contact Form
If you contact us via the contact form on this website, the information you provide — including your name, email address, and message, will be stored by us in order to process your inquiry and in case of follow-up questions. We do not share this data without your consent.
The legal basis for this processing is Art. 6(1)(b) GDPR (processing necessary for pre-contractual measures or performance of a contract), or, where no contractual relationship is intended, Art. 6(1)(f) GDPR (legitimate interest in responding to inquiries directed to us).
We retain this data for as long as necessary to process your request, plus any applicable statutory retention periods, and delete it once it is no longer needed.
Emails generated by this website — for example confirmations for the contact form and quote requests, and related notifications — are sent through Brevo (Sendinblue SAS, Paris, France), acting as a processor on our behalf under a data processing agreement. For this purpose, Brevo processes the sender and recipient email addresses, the message content, and technical delivery data. The legal basis is Art. 6(1)(b) GDPR where the email relates to a request you made, and Art. 6(1)(f) GDPR (our legitimate interest in reliable email delivery) otherwise.
The Brevo plugin installed on this website would also load a front-end script and stylesheet (mailin-front.js / mailin-front.css) supporting Brevo’s embeddable sign-up forms on every page; the theme blocks this asset from loading, because no sign-up form is live on this site. No other Brevo tracking script or cookie is loaded on this website.
6. Website Analytics (Independent Analytics)
This website uses Independent Analytics, a WordPress plugin that runs entirely on our own web server. The analytics data it creates is stored exclusively in our website’s database and is not shared with any third party. Independent Analytics does not use cookies or other local storage.
To generate anonymous usage statistics, the visitor’s IP address is used to approximate location and is then combined with the browser’s user agent and a salt to create a one-way hash, which serves as an anonymous visitor ID. The IP address itself is not stored.
Because no information is stored on or read from your device beyond what is technically required to deliver the page, this processing does not require consent under § 25 TDDDG and is based on Art. 6(1)(f) GDPR (legitimate interest in understanding how the website is used and improving it).
7. Google Analytics
This website uses Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. For processing outside the European Economic Area, Google LLC, USA, may also be involved.
Google Analytics helps us understand how visitors use this website — for example which pages are viewed, how long visits last, and where traffic comes from — so that we can improve the website.
The legal basis for this processing is Art. 6(1)(a) GDPR and § 25(1) TDDDG (consent), which we obtain through our consent management tool, CCM19, before any Google Analytics cookie or script is set or loaded. The data categories processed include usage data (pages viewed, visit duration, traffic sources), approximate location derived from your IP address, device and browser information, and pseudonymous identifiers (cookie IDs).
The recipient of this data is Google. Google may process data in the USA; the transfer relies on the EU-US Data Privacy Framework and, where applicable, standard contractual clauses.
The cookies set have a duration of up to two years; stored analytics data is deleted or anonymised according to the retention period configured in the Google Analytics property.
You can withdraw your consent at any time with effect for the future via the cookie settings link in the footer of this website. For the specific cookies used, see Section 3 of our Cookie Policy.
8. Fonts
This website uses web fonts for consistent typography.
The fonts used on this site are hosted locally on our own server. No connection to Google’s servers is established for this purpose, no data is transmitted to Google, and no consent is required for this specific feature.
9. International Data Transfers
Most of our service providers are located within the European Economic Area (EEA): our hosting provider, IONOS SE, and our consent management provider, CCM19 (Papoo Software & Media GmbH), are both based in Germany; our email delivery processor, Brevo (Sendinblue SAS), is based in France.
If you consent to the “Statistics” category in the CCM19 banner, Google Analytics data may also be processed by Google LLC in the USA, outside the EEA; see Section 7 for the transfer mechanism and legal basis.
10. Data Retention
We only retain personal data for as long as necessary for the purpose it was collected for, or as required by statutory retention obligations (e.g. under German commercial and tax law, typically six or ten years for business correspondence and accounting records). Data collected on the basis of consent is deleted once you withdraw that consent, unless a statutory retention obligation requires otherwise.
11. Automated Decision-Making
We do not use fully automated decision-making, including profiling, that produces legal effects concerning you or similarly significantly affects you within the meaning of Art. 22 GDPR.
12. Changes to This Privacy Policy
We may update this privacy policy from time to time to reflect changes to our data processing practices or applicable law. The current version, as published on this page, applies.