Privacy Policy

Last updated: September 2026

1. Data protection at a glance

This notice explains what happens to your personal data when you visit our website, contact us, request our services or provide details of other business contacts. Personal data means information by which you can be identified directly or indirectly.

Who is responsible for data collection on this website?

Data processing on this website is carried out by amd Industriemonteure GmbH as the controller. You can find the contact details below in this Privacy Policy.

How do we collect your data?

We receive information that you provide, for example when you contact us, submit a project enquiry or provide the details of another contact person. Further information is collected automatically when you visit the website; optional technologies are used only with your consent. This includes IP address, browser, operating system, referrer, time of access and device information.

What do we use your data for?

We process your data in particular to provide and protect the website, respond to enquiries, communicate with you about projects and analyse and improve our offering.

What rights do you have?

You have, in particular, the right to information, rectification, deletion, restriction of processing, data portability, objection to certain processing activities, and to withdraw consent given with effect for the future. You also have the right to lodge a complaint with a data protection supervisory authority.

2. Controller

amd Industriemonteure GmbH
Heilbronner Straße 150
70191 Stuttgart
Germany

Managing Directors: Andreas Gold
Register court: Amtsgericht Stuttgart
Registration number: HRB 742275
VAT ID: DE285690776

3. Contact for privacy inquiries

If you have questions about the processing of your personal data or wish to exercise your rights as a data subject, you can contact us at any time at info@amd-tec.com.

To the extent that a data protection officer has been appointed for our company, you can reach them via the separately published contact details or via the above contact channels with the addition "Data Protection Officer".

4. Purposes and legal bases of processing

We process personal data only to the extent that there is a legal basis for doing so. Depending on the specific processing activity, we base the processing in particular on the following legal bases:

  • Art. 6(1)(a) GDPR – consent, especially for optional analytics and marketing technologies;
  • Art. 6(1)(b) GDPR – performance of a contract or pre-contractual steps, especially in response to project enquiries;
  • Art. 6(1)(c) GDPR – compliance with legal obligations, including commercial and tax-related retention and documentation duties;
  • Art. 6(1)(f) GDPR – legitimate interests, particularly in operating, securing and improving the website, communicating with business contacts and asserting or defending legal claims;
  • Section 25 TDDDG – where storing information on your device or accessing it requires consent or is permitted by law.

If we intend to further process personal data for a purpose other than that for which the data was collected, we will inform you of the new purpose and the other relevant circumstances before this further processing.

5. Hosting and technical provision of the website

We host our online offering with IONOS SE, Elgendorfer Straße 57, 56410 Montabaur, Germany. A data processing agreement has been concluded with the provider in accordance with Art. 28 GDPR.

When you visit our website purely for informational purposes, technical access data is automatically processed by our web server and the hosting provider in so-called server log files. This includes in particular:

  • IP address of the requesting device,
  • date and time of access,
  • page or file accessed,
  • referrer URL,
  • browser type and browser version,
  • operating system used,
  • hostname and other technical connection data.

The processing takes place to ensure the functionality, stability and security of the website and to defend against misuse and analyze errors. The legal basis is Art. 6 (1) lit. f GDPR. Our legitimate interest lies in the secure and trouble-free operation of our online offering.

We store log files only for as long as is necessary for the stated purposes. Longer storage takes place if this is required to investigate security incidents, pursue legal claims or defend and enforce claims.

6. Delivery of graphics and static content via a CDN

For the fast, stable and secure delivery of graphics and static content, we use a Content Delivery Network (CDN) from BunnyWay d.o.o., Dunajska cesta 165, 1000 Ljubljana, Slovenia. When such content is accessed, your IP address and other connection data, for example browser information, timestamps, header information and the requested resource, are transmitted to Bunny.net servers.

Use takes place on the basis of our legitimate interest in a high-performance, secure and economical provision of our online offering in accordance with Art. 6 (1) lit. f GDPR. Further information on possible transfers to third countries can be found in section 19 of this Privacy Policy.

7. Locally integrated resources

We integrate fonts, JavaScript files and CSS files locally. Therefore, no automatic transmission of personal data to third parties takes place solely through external fonts, stylesheets or script libraries. We provide separate information on external services in this Privacy Policy.

8. SSL/TLS encryption

This website uses SSL/TLS encryption for security reasons and to protect the transmission of confidential content. An encrypted connection can usually be recognized by the fact that your browser's address line begins with "https://".

9. Consent management / consent tool

We use a self-developed consent management system to store, document and technically implement your choices for the categories "Necessary (always active)", "Analytics" and "Marketing". For this purpose, we store on your device an entry necessary for consent management, for example a cookie or an entry in local storage or session storage, containing your choice. In this context, your consent decision, the affected category, timestamp, technical metadata and, where applicable, a pseudonymous identifier are processed in particular.

The category "Marketing" is only relevant insofar as marketing-related services or technologies are actually used on the respective page.

We process this information to document and respect your choices and to operate consent management. The legal bases are Art. 6(1)(c) and (f) GDPR and Section 25(2) TDDDG. You can change or withdraw your choices at any time in the privacy settings. Analytics and marketing technologies remain disabled without your consent; necessary technologies remain available.

10. Cookies, local storage and similar technologies

Our website uses cookies and comparable technologies such as local storage or session storage. We distinguish between the category "Necessary (always active)" and - after your consent - the categories "Analytics" and "Marketing".

We use strictly necessary technologies under Section 25(2) TDDDG. Any related processing of personal data is based on Art. 6(1)(f) GDPR, reflecting our legitimate interest in a secure and functional website. We use analytics and marketing technologies only with your consent under Section 25(1) TDDDG and Art. 6(1)(a) GDPR, unless another legal basis applies.

11. Contact with us

If you contact us, for example by email, contact form or telephone, we process the information you provide in order to handle your inquiry. This includes in particular your name, contact details, the content of your message and any other information you voluntarily provide.

The legal basis is Art. 6 (1) lit. b GDPR if your inquiry concerns the conclusion or performance of a contract, and otherwise Art. 6 (1) lit. f GDPR on the basis of our legitimate interest in the efficient handling of inquiries. We store this data as long as necessary to complete the inquiry and beyond that only if statutory retention obligations or legitimate interests exist.

12. Project enquiries

If you send a project or service enquiry through our website, we process the details required to respond. These may include your name, company and business contact details; deployment location and dates; the specialists required; project information; the content and time of your correspondence; and any other details you choose to provide.

We use this information to respond to your enquiry and discuss a potential or existing business relationship. The legal basis is Art. 6(1)(b) GDPR if you are personally a contracting party or request pre-contractual steps. For contacts acting on behalf of a company, we rely on our legitimate interest in business communication under Art. 6(1)(f) GDPR. We may share necessary details with project partners involved in preparing a response.

13. Details of other contact persons

If an enquiry includes details of other contact persons, we process their business contact details and relevant correspondence so that we can coordinate the enquiry or project. We receive these details from the person making the enquiry or another person they designate.

The legal bases are Art. 6(1)(b) GDPR where the person concerned is a contracting party, Art. 6(1)(c) GDPR where a legal obligation applies, and Art. 6(1)(f) GDPR for project coordination, business communication and the defence of legal claims.

14. Review functions

If you send us a review or testimonial, we process the information you provide for that purpose, including your name or a pseudonym, the content and date of your feedback and, where applicable, technical metadata used to prevent misuse.

With your consent, we may publish your review on our website. Publication is based on Art. 6(1)(a) GDPR; review and documentation of feedback may be based on our legitimate interest in quality assurance and abuse prevention under Art. 6(1)(f) GDPR.

Providing review content is voluntary. Mandatory information is required only to the extent that, without it, we cannot assign, review or publish a review. We store reviews for as long as the respective review is to be displayed online or there are legitimate interests in documentation, prevention of misuse or legal defense.

Please provide only such information in review fields as is necessary for the review and refrain in particular from providing sensitive personal data.

15. Web analytics with Google Analytics 4

We use Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The service helps us statistically evaluate and improve the use of our online offering. In particular, page views, paths visited, time spent, visitor origin, interactions, technical browser and device information and approximate location data may be processed. Google Analytics mainly uses the first-party cookies _ga and _ga_* for this purpose.

Google Analytics 4 is loaded only if you have consented to the "Analytics" category. The legal basis is Art. 6 (1) lit. a GDPR in conjunction with Section 25 (1) TDDDG. According to Google, IP addresses of users from the EU, Switzerland and the United Kingdom are discarded before they are logged. Processing by Google companies and, where applicable, transfers to third countries, in particular the United States, can nevertheless not be ruled out.

You can change or withdraw your consent at any time via this website's privacy settings with effect for the future. Further information can be found in Google's Privacy Policy.

16. Google Consent Mode and Google Ads conversion tracking

We use Google Consent Mode v2 to communicate the choices made in our consent banner to the Google services in use. The signals for analytics storage, advertising storage, advertising user data and personalized advertising are initially set to "denied". Google Analytics and Google Ads are loaded only after you consent to the respective category.

If you consent to the "Marketing" category, we use Google Ads conversion tracking. This enables us to measure whether an ad click resulted in an enquiry or another defined action on our website. In particular, advertising and conversion information, pages visited, technical browser and device data, IP address and cookies with the prefix _gcl_ may be processed. The provider is Google Ireland Limited. The legal basis is your consent pursuant to Art. 6 (1) lit. a GDPR in conjunction with Section 25 (1) TDDDG.

You can change or withdraw your choice at any time via the privacy settings. Further information can be found at https://policies.google.com/privacy.

17. Social media: LinkedIn

We maintain a company presence on LinkedIn. We do not use active LinkedIn plugins on this website. Merely visiting our website therefore does not connect you to LinkedIn on account of that presence.

If you visit our LinkedIn presence, LinkedIn’s privacy information applies to processing there. If you contact us through LinkedIn, we process your message to respond to your enquiry under Art. 6(1)(f) GDPR or, for a contract-related enquiry, Art. 6(1)(b) GDPR.

For details of LinkedIn’s processing, see:

18. Recipients of data / categories of recipients

Your personal data is only disclosed if there is a legal permission to do so, you have consented or the disclosure is necessary for the performance of a contract. Recipients may in particular be:

  • hosting, infrastructure, CDN and IT security providers,
  • technical providers of communications, email delivery, analytics and consent management,
  • partners involved in a project where necessary to respond to an enquiry,
  • tax advisers, auditors, legal advisers and insurers where required for the business relationship or legal claims,
  • public authorities and courts where disclosure is required by law.

Insofar as external service providers act as processors for us, this takes place on the basis of a data processing agreement in accordance with Art. 28 GDPR. Insofar as recipients process data under their own responsibility, further processing is governed by their respective privacy notices.

19. Data transfers to third countries

Some of the services we use or their sub-processors may process data in states outside the European Union or the European Economic Area, in particular in the United Kingdom or in the USA. Such a transfer takes place only if the legal requirements of Art. 44 et seq. GDPR are met.

Insofar as there is an adequacy decision of the European Commission for a third country, the transfer may be based on this. This applies in particular to transfers to certified companies in the USA under the EU-US Data Privacy Framework and - where applicable - to the United Kingdom. Insofar as no adequacy decision applies, we base transfers on appropriate safeguards, in particular standard contractual clauses pursuant to Art. 46 GDPR, internal data protection rules or other legally recognized transfer instruments.

Depending on the provider, the following transfer mechanisms may in particular apply according to their information:

  • Google: the EU–US Data Privacy Framework and/or standard contractual clauses, where processing takes place in the United States.

You may request a copy of appropriate safeguards or further information on the transfer mechanisms used from us via the contact details stated in section 2 or 3. In addition, we refer to the privacy notices of the respective providers.

20. Storage period

We store personal data only for as long as necessary for the respective purposes or for as long as statutory retention obligations exist. The specific storage period depends on the type of processing activity, the purpose of processing and commercial, tax, civil or supervisory retention and documentation periods.

  • Server logs are kept only as long as necessary for secure operation and investigating faults or security incidents.
  • Contact and project enquiries are kept until the enquiry is completed and thereafter only where legal obligations or legitimate documentation or legal-defence interests require it.
  • Contract and invoice records are retained in accordance with applicable commercial and tax obligations.
  • Reviews are kept while published with your consent or where legitimate interests in documentation, abuse prevention or legal defence remain.
  • Consent records are kept as long as necessary to meet legal obligations or defend legal claims.

21. Obligation to provide data

Providing personal data is neither legally nor contractually required for the purely informational visit of our website. However, without certain technical data such as IP address or header information, the website cannot be delivered for technical reasons.

For contact and project enquiries, we need the information marked as required to respond and, where applicable, take pre-contractual steps. Without it, we may be unable to deal with your enquiry.

Other information, including information you provide for a review or testimonial, is voluntary. If essential information is missing, we may be unable to offer the corresponding voluntary function.

22. Your rights as a data subject

Within the framework of the statutory conditions, you have in particular the following rights:

  • right of access to your personal data stored by us (Art. 15 GDPR),
  • right to rectification of inaccurate or completion of incomplete data (Art. 16 GDPR),
  • right to deletion of your data (Art. 17 GDPR),
  • right to restriction of processing (Art. 18 GDPR),
  • right to data portability (Art. 20 GDPR),
  • right to object to certain processing activities (Art. 21 GDPR),
  • right to withdraw consents given with effect for the future,
  • right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR).

Objection to direct advertising and legitimate interests

Insofar as we process your data on the basis of Art. 6 (1) lit. f GDPR, you have the right to object to the processing at any time on grounds relating to your particular situation. If personal data is processed for the purpose of direct advertising, you have the right to object at any time to the processing of your personal data for such advertising purposes.

23. Right to lodge a complaint with the competent supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a data protection supervisory authority. For our company, the competent authority is in particular the State Commissioner for Data Protection and Freedom of Information Baden-Württemberg:

Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg
Heilbronner Straße 35
70191 Stuttgart
Website: https://www.baden-wuerttemberg.datenschutz.de/

24. Automated decisions

We do not make decisions based solely on automated processing within the meaning of Art. 22 GDPR.

25. Current status and changes to this Privacy Policy

We reserve the right to adapt this Privacy Policy so that it always complies with current legal requirements or to implement changes to our services in the Privacy Policy, for example when introducing new services or functions. The current Privacy Policy then applies to your next visit.