Privacy Policy

This Privacy Policy explains which personal data is processed when you visit our website or contact us. It applies to the webpages available at www.planag-design.com.

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

PLANAG DESIGN Gauger Zillich GbR

Represented by the partners Julius Gauger and Florian Zillich

Emil-Dittler-Strasse 3a, 81479 Munich, Germany

Telephone: +49 89 72 444 76-0

Email: mail@planag-design.com

No company data protection officer has been appointed. Privacy enquiries may be sent directly to the contact details above.

2. Hosting and server log data

Our website is hosted by STRATO GmbH, Otto-Ostrowski-Strasse 7, 10249 Berlin, Germany. When the website is accessed, the web server processes technically necessary access data. This may include in particular:

– IP address of the requesting device;

– date and time of access;

– page or file accessed and the volume of data transferred;

– referrer URL, browser type and version, and operating system; and

– access status and error messages.

Processing is necessary to deliver the website, ensure its stability and security, and detect and defend against attacks and technical disruptions. The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is the secure and functional operation of our website.

STRATO processes the data as a processor pursuant to Article 28 GDPR. According to STRATO, IP addresses in security log files are generally stored for no more than seven days unless a security-related incident requires longer retention. Further information about data processing by STRATO is available at www.strato.de/datenschutz/.

3. Technical provision of the website

The website is based on WordPress. Resources from our own domain are generally loaded for display and navigation. We do not use audience measurement, advertising or profiling services, or externally loaded web fonts. The special provisions in section 4 apply to the Google map described below.

Where technically necessary information is stored on or read from your terminal device, this is done on the basis of Section 25(2)(2) of the German Telecommunications Digital Services Data Protection Act (TDDDG). Any further storage or access to the terminal device, in particular for analytics or marketing purposes, takes place only with prior consent pursuant to Section 25(1) TDDDG and Article 6(1)(a) GDPR. Such consent-based technologies are not currently used on the website.

4. Google Maps

Our website embeds a map provided by Google Maps. It shows our business location and makes orientation and route planning easier. For users in the European Economic Area, the provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Ireland may use services provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, and other affiliated companies.

The map is not initially loaded from Google when the page is opened. A connection to Google is established only after you expressly consent through the displayed placeholder or consent menu. In this process, your IP address, device and browser information, referrer data, time of access and information about your use of the map may in particular be transmitted to Google. If you enable location functions on your device or are signed in to Google, additional data, in particular location and account information, may be processed and linked to your Google account. Google may use cookies or similar technologies.

The legal basis for loading the map and the related processing of personal data is your consent pursuant to Article 6(1)(a) GDPR. Where information is stored on or read from your terminal device, this is based on Section 25(1) TDDDG. Consent is voluntary and may be withdrawn at any time with effect for the future through the website’s consent or cookie settings. Without consent, the map is not loaded; the remainder of the website can still be used.

Google may also process data in the United States or other countries outside the European Union and the European Economic Area. For transfers to the United States, Google may rely on certification under the EU-US Data Privacy Framework and, where required, other appropriate safeguards pursuant to Article 46 GDPR. Despite these safeguards, different data protection standards and access by public authorities may apply when data is processed outside the EU or EEA.

Further information about processing by Google and your settings is available at policies.google.com/privacy and policies.google.com/technologies/partner-sites.

5. Contact by email or telephone

If you contact us by email or telephone, we process the data you provide, in particular your name, contact details, the content of your enquiry and, where applicable, project- or contract-related information, in order to deal with your enquiry and communicate with you.

If the contact relates to entering into or performing a contract, the legal basis is Article 6(1)(b) GDPR. In all other cases, processing is based on our legitimate interest in handling business and other enquiries pursuant to Article 6(1)(f) GDPR. Where consent has been obtained, the legal basis is Article 6(1)(a) GDPR.

We delete the data once the enquiry has been conclusively dealt with and there are no contractual, statutory or legitimate grounds for further retention. Business and tax-relevant communications are retained in accordance with statutory retention periods.

6. Recipients and processors

Within our company, personal data is accessible only to persons who require it for the relevant purposes. IT, hosting and communications service providers engaged by us may also receive data where necessary to provide their services. Where legally required, such providers are engaged as processors pursuant to Article 28 GDPR.

Data is disclosed to other third parties only where permitted or required by law, where you have consented, or where disclosure is necessary for the establishment, exercise or defence of legal claims.

7. Transfers to third countries

Apart from Google Maps, no targeted transfer of personal data to countries outside the European Union or the European Economic Area is intended as part of the website’s current operation. The information in section 4 applies to Google Maps. Any additional transfers to third countries take place only in compliance with Articles 44 et seq. GDPR; this Privacy Policy will be updated accordingly if changes are made.

8. Data security

Our website uses TLS encryption. An encrypted connection can generally be identified by ‘https://’ in your browser’s address bar. We also take appropriate technical and organisational measures to protect personal data against loss, manipulation and unauthorised access.

9. Your rights

Subject to the statutory requirements, you have the following rights in particular:

– access to information about the processing of your personal data (Article 15 GDPR);

– rectification of inaccurate data or completion of incomplete data (Article 16 GDPR);

– erasure of your personal data (Article 17 GDPR);

– restriction of processing (Article 18 GDPR);

– data portability (Article 20 GDPR);

– objection to processing based on Article 6(1)(e) or (f) GDPR (Article 21 GDPR); and

– withdrawal of consent with effect for the future (Article 7(3) GDPR).

To exercise your rights, a message to mail@plang-design.com is sufficient. Statutory restrictions and exceptions remain unaffected.

10. Specific information about the right to object

Where we process personal data on the basis of legitimate interests pursuant to Article 6(1)(f) GDPR, you may object at any time on grounds relating to your particular situation. We will then no longer process the relevant data unless we can demonstrate compelling legitimate grounds or the processing is necessary for the establishment, exercise or defence of legal claims.

11. Right to lodge a complaint

Under Article 77 GDPR, you have the right to lodge a complaint with a data protection supervisory authority. The authority responsible in particular for private-sector companies established in Bavaria is:

Bavarian State Office for Data Protection Supervision (BayLDA)

Promenade 18, 91522 Ansbach, Germany

www.lda.bayern.de

12. Version and amendments

This Privacy Policy is dated 5 August 2026. We update it if the legal position, our website or the services used change. The version published on our website at the relevant time applies.