Legal information

Privacy policy

This is a translation for information purposes. Only the German version (Datenschutzerklärung) is legally binding.

In this privacy policy we inform you, in accordance with Art. 13 of the General Data Protection Regulation (GDPR), about the nature, scope, purpose, legal basis and duration of the processing of personal data when you visit our website and when you contact us. Personal data is any information relating to an identified or identifiable natural person (Art. 4(1) GDPR).

In brief: Our website does not set any cookies, does not use any analytics, tracking or advertising services and does not load any content from third parties. The website is operated exclusively on servers of our hosting provider IONOS in Germany.

1. Controller

De Dietrich Germany Leverkusen GmbH
(formerly HDL Glas- und Kunststoffanlagenbau GmbH)
Friedrich-Sertürner-Straße 5
51377 Leverkusen
Germany

Represented by the Managing Director Hans-Dieter Löhr
Phone: +49 214 890 986-0
Email: info.ddle@dedietrich.com

For questions about data protection and to exercise your rights, please contact us using the details above.

2. Provision of the website and server log files

Our website is hosted by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany. IONOS processes the data on our behalf; we have concluded a data processing agreement with IONOS pursuant to Art. 28 GDPR. The servers are located in Germany.

Each time you access our website, your browser automatically transmits data to the server, which is stored in so-called server log files:

• IP address of the requesting device,
• date and time of access,
• page or file accessed and amount of data transferred,
• status code of the request (e.g. successful, not found),
• previously visited page (referrer URL), if transmitted by the browser,
• browser type and version as well as operating system.

This processing is necessary to deliver the website and to ensure its security and stability, in particular to detect and prevent attacks and misuse. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in a secure and functioning website. The log files are not combined with other data and are automatically deleted after the retention period set by IONOS, unless they are needed for longer to investigate a specific security incident.

3. No cookies, no tracking, no external content

We do not use cookies or comparable technologies to recognise visitors. We do not use any analytics, tracking, advertising or social media services. Fonts, images and scripts are loaded exclusively from our own server; no connection is made to third parties such as Google Fonts. A consent request (“cookie banner”) is therefore not required.

4. Contact form and contact by email

When you send us a message via the contact form, we process the information you enter: first name, last name, email address, subject and message (required) as well as, optionally, phone number and company. If you contact us by email or phone, we process the data you provide in doing so. We cannot process your enquiry without the required information.

The form data is not stored on the web server; it is transmitted by email via an encrypted connection through the IONOS mail server to our mailbox info.ddle@dedietrich.com, where it is processed. This mailbox is operated within the email system of the De Dietrich Group.

The purpose of the processing is to handle and answer your enquiry. The legal basis is Art. 6(1)(b) GDPR insofar as your enquiry is aimed at concluding or performing a contract, and otherwise Art. 6(1)(f) GDPR; our legitimate interest lies in answering enquiries.

We delete your enquiry once it has been fully dealt with and no statutory retention obligations apply. If the enquiry leads to a contract or constitutes business correspondence, we retain it for up to six or eight years in accordance with German commercial and tax law (Section 257 HGB, Section 147 AO).

5. Protection of the contact form against misuse

To protect against automated spam submissions, we use the following measures, all of which run entirely on our own server at IONOS:

• ALTCHA: When you fill in the form, your browser solves a short computational task (“proof of work”). The task is generated by our server, and the solution is sent back to it together with the form. No cookies are set, no data is transmitted to third parties and no profiles are created. The ALTCHA software used (open source, MIT licence) is installed on our server; there is no connection to its developer.
• Rate limiting: To prevent mass submissions, we briefly store an irreversible hash value of your IP address, generated with a secret key, together with the time of submission. This data is automatically deleted after one hour at the latest.
• Invisible check field: A form field that is invisible to humans detects automated entries.

The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in protecting our website and our mailbox against misuse. Insofar as functions of your browser are used for the computational task, this is strictly necessary for sending the form at your request (Section 25(2) No. 2 of the German Telecommunications Digital Services Data Protection Act, TDDDG).

6. Recipients and transfers to third countries

Apart from us, the recipients of your data are our hosting provider IONOS as well as the companies of the De Dietrich Group and their service providers that operate the Group’s email system, each acting as a processor (Art. 28 GDPR). Beyond that, we only pass on enquiries within the De Dietrich Group where this is necessary to process them (Art. 6(1)(b) or (f) GDPR).

The website itself is operated exclusively in Germany. Where service providers of the email system process data outside the European Union or the European Economic Area, this only takes place on the basis of an adequacy decision of the EU Commission (Art. 45 GDPR) or appropriate safeguards such as the EU standard contractual clauses (Art. 46(2)(c) GDPR).

7. Encryption

Our website is delivered exclusively via an encrypted connection (HTTPS/TLS). Data you transmit via the contact form therefore cannot be read by third parties.

8. Your rights

You have the following rights with regard to your personal data:

• right of access (Art. 15 GDPR),
• right to rectification (Art. 16 GDPR),
• right to erasure (Art. 17 GDPR),
• right to restriction of processing (Art. 18 GDPR),
• right to data portability (Art. 20 GDPR).

Right to object (Art. 21 GDPR): Where we process your data on the basis of Art. 6(1)(f) GDPR, you may object to this processing at any time on grounds relating to your particular situation. We will then no longer process the data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

Right to lodge a complaint: You have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (LDI NRW), Kavalleriestraße 2–4, 40213 Düsseldorf, Germany, www.ldi.nrw.de.

9. No automated decision-making

No automated decision-making, including profiling, within the meaning of Art. 22 GDPR takes place.

10. Changes to this privacy policy

We will update this privacy policy if our website, the services we use or the legal requirements change. The version published on this page applies.

Last updated: November 2026