Privacy policy

Data protection is a high priority for us. The processing of personal data, e.g. name, address, e-mail address or telephone number, is always carried out in accordance with the legal requirements of the General Data Protection Regulation and in compliance with the country-specific data protection regulations applicable to us. This privacy policy provides information about the type, scope and purpose of the personal data we collect, use and process.
We would like to point out that despite the highest security precautions on our part, there may be security gaps in Internet-based data transmission. We cannot guarantee complete protection.

1. name and contact of the data controller

The controller within the meaning of the General Data Protection Regulation is
Odenwälder Lackfabrik GmbH
Mr. Thomas Gilles
Werkstrasse 21
64732 Bad König

Phone: +49 (0) 6063 5771-0
Fax: +49 (0) 6063 5771-29

2. collection of general data, forwarding of data

Our website collects general data and information when it is accessed. This general data and information is stored in the server log files. The following can be recorded

  • the browser type and version used
  • the operating system used by the accessing system
  • the website from which an accessing system accesses our website
  • the date and time of access to our website
  • the IP address,
  • the internet service provider of the accessing system
  • other data and information used for security purposes in the event of attacks on our information technology systems.

When using this general data and information, we do not draw any conclusions about the data subject. Rather, this information is required to correctly deliver the content of our website, to optimize its content and advertising, to ensure the long-term functionality of our IT systems and the technology of our website, and to provide law enforcement authorities with the information necessary for criminal prosecution in the event of a cyber attack.
This anonymously collected data and information is evaluated by us statistically and also with the aim of increasing data protection and data security in our company in order to ultimately ensure an optimum level of protection for the personal data processed by us. The anonymous data of the server log files are stored separately from all personal data provided by a data subject.

Your personal data will not be transferred to third parties for purposes other than those listed below.

We only pass on your personal data to third parties if:

  • you have given your express consent to this (cf. Art. 6 para. 1 sentence 1 lit. a GDPR),
  • the disclosure is necessary for the assertion, exercise or defense of legal claims and there is no reason to assume that you have an overriding interest worthy of protection in not disclosing your data (cf. Art. 6 para. 1 sentence 1 lit. f GDPR),
  • in the event that there is a legal obligation to pass on the data (see Art. 6 para. 1 sentence 1 lit. c GDPR),
  • the disclosure is legally permissible and necessary for the processing of contractual relationships with you (cf. Art. 6 para. 1 sentence 1 lit. b GDPR).

3. cookies

Our website uses cookies. Cookies are text files that are placed and stored on a computer system via an internet browser.

Numerous websites and servers use cookies. Many cookies contain a so-called cookie ID. A cookie ID is a unique identifier for the cookie. It consists of a string of characters that can be used to assign websites and servers to the specific internet browser in which the cookie was stored. This enables the websites and servers visited to distinguish the individual browser of the data subject from other Internet browsers that contain other cookies. A specific Internet browser can be recognized and identified via the unique cookie ID.

By means of a cookie, the information and offers on our website can be optimized for the benefit of the user. At the same time, cookies enable us to recognize the users of our website. The purpose of this recognition is to make it easier for users to use our website. For example, the user of a website with cookies does not have to re-enter their access data on a subsequent visit because this is done for them by the website and the cookie stored on the user's computer system.

You can prevent the setting of cookies by our website at any time by means of a corresponding setting of the Internet browser you are using and thus permanently object to the setting of cookies. Furthermore, cookies that have already been set can be deleted by you at any time via the Internet browser or other software programs. If the person concerned deactivates the setting of cookies in the Internet browser used, not all functions of our website may be fully usable.

4 Routine deletion and blocking of personal data

We process and store personal data only for the period of time required to achieve the purpose of storage or if this is prescribed by the legislator in the laws or regulations relevant to us.
If the storage purpose no longer applies or if a legally prescribed storage period expires, the personal data will be blocked or deleted in accordance with the statutory provisions.

5. contacting us on our website

You have the option of contacting us on our website by providing personal data. The personal data that is transmitted to us is determined by the respective input mask that you use to contact us. The personal data you enter here is collected and stored exclusively for our own purposes.

When you contact us on our website, the IP address assigned to you, the date and the time of registration are stored. This data is stored against the background that this is the only way to prevent misuse. In this respect, the storage of this data is necessary for the security of both parties. This data is not passed on to third parties unless there is a legal obligation to pass it on or the passing on serves the purpose of criminal prosecution.

Upon request, we will provide any data subject at any time with information about which personal data about the data subject is stored. Furthermore, we will correct or delete personal data at the request or notice of the data subject, provided that this does not conflict with any statutory retention obligations. Our contact information for your message in this regard can be found in section 1 of this statement.

If you contact us by e-mail or via the contact form, the personal data you provide will be stored automatically. Such personal data transmitted by you to us on a voluntary basis will be stored for the purpose of processing or contacting the person concerned. This personal data will not be passed on to third parties.

6 Rights of the data subjects

Data subjects within the meaning of data protection law have the right

  • to request information about your personal data processed by us in accordance with Art. 15 GDPR. In particular, you can request information about the purposes of processing, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right of appeal, the origin of your data if it was not collected by us, and the existence of automated decision-making including profiling and, if applicable, meaningful information on its details;
  • in accordance with Art. 16 GDPR, to immediately request the correction of incorrect or incomplete personal data stored by us
  • in accordance with Art. 17 GDPR, to request the erasure (right to be forgotten) of your personal data stored by us, unless the processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defense of legal claims
  • in accordance with Art. 18 GDPR, to demand the restriction of the processing of your personal data if the accuracy of the data is disputed by you, the processing is unlawful but you refuse to delete it and we no longer need the data, but you need it to assert, exercise or defend legal claims or you have lodged an objection to the processing in accordance with Art. 21 GDPR
  • in accordance with Art. 20 GDPR, to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request that it be transmitted to another controller
  • in accordance with Art. 7 para. 3 GDPR, to revoke your consent to us at any time. As a result, we will no longer continue the data processing that was based on this consent in the future;
  • if your personal data is processed by us on the basis of legitimate interests pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR, to object to the processing of your personal data pursuant to Art. 21 GDPR, provided that there are reasons for this arising from your particular situation or the objection is directed against direct advertising. In the latter case, you have a general right to object, which we will implement without you having to specify a particular situation. All you need to do is send an email to the email address stated in section 1 of this declaration;
  • to lodge a complaint with a supervisory authority pursuant to Art. 77 GDPR, without prejudice to any other administrative or judicial remedy. As a rule, you can contact the supervisory authority of your usual place of residence for this purpose.

7 Data security

We use the widespread SSL (Secure Socket Layer) method in conjunction with the highest level of encryption supported by your browser. You can tell whether an individual page of our website is transmitted in encrypted form by the closed display of the key or lock symbol in the lower status bar of your browser.

We also use suitable technical and organizational security measures to protect your data against manipulation, misuse, partial or complete loss, or against unauthorized access by third parties. Our security measures are continuously updated in line with technological developments.

8 Legal basis of the processing

Art. 6 I lit. a GDPR serves as the legal basis for processing operations for which we obtain consent for a specific processing purpose.

If the processing of personal data is necessary for the performance of a contract to which the data subject is a party, as is the case, for example, with processing operations necessary for the processing of an order for goods, the processing is based on Art. 6 I lit. b GDPR. The same applies to such processing operations that are necessary for the implementation of measures, for example in cases of inquiries from interested parties about our products, offers or services.

If we are subject to a legal obligation that requires the processing of personal data, e.g. to fulfill tax obligations, the processing is based on Art. 6 I lit. c GDPR. The tracking measures we use on our website are carried out on the basis of Art. 6 para. 1 sentence 1 lit. f GDPR. With the tracking tools used, we want to achieve a needs-based design and permanent optimization of our website. We also use the tracking tools to statistically record the use of our website and evaluate it to optimize our offer for you. These interests are to be regarded as legitimate within the meaning of the aforementioned provision. The respective data processing purposes and data categories can be found in the individual tracking tools, which we will point out and inform you about separately below. Ultimately, processing operations could be based on Art. 6 I lit. f GDPR. Processing operations that are not covered by any of the aforementioned legal bases are based on this legal basis if the processing is necessary to safeguard a legitimate interest of our company or a third party, provided that these interests do not outweigh your fundamental rights and freedoms. We are permitted to carry out such processing operations in particular because they have been specifically mentioned by the European legislator. In this respect, it took the view that a legitimate interest could be assumed if the data subject is a customer of the controller (cf. recital 47 sentence 2 GDPR).

9 Duration of data storage

The criterion for the duration of the storage of personal data is the respective legally prescribed retention period. After this period has expired, the personal data is routinely deleted, provided that it is no longer required for contract fulfillment or contract initiation.

10. on the use and application of Google Analytics (with anonymization function)

The controller has integrated the Google Analytics component (with anonymization function) on this website. Google Analytics is a web analysis service. Web analysis is the collection, gathering and evaluation of data about the behavior of visitors to websites. Among other things, a web analysis service collects data on the website from which a data subject came to a website (so-called referrer), which subpages of the website were accessed or how often and for how long a subpage was viewed. Web analysis is mainly used to optimize a website and for the cost-benefit analysis of Internet advertising.

The operating company of the Google Analytics component is Google Inc, 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA. The data controller uses the addition "_gat._anonymizeIp" for web analysis via Google Analytics. This addition is used by Google to shorten and anonymize the IP address of the data subject's Internet connection if our website is accessed from a member state of the European Union or from another state party to the Agreement on the European Economic Area.

The purpose of the Google Analytics component is to analyze the flow of visitors to our website. Google uses the data and information obtained, among other things, to evaluate the use of our website, to compile online reports for us that show the activities on our website, and to provide other services related to the use of our website.

Google Analytics places a cookie on the data subject's IT system. What cookies are has already been explained above. By setting the cookie, Google is enabled to analyze the use of our website. Each time one of the individual pages of this website is accessed, which is operated by the controller and on which a Google Analytics component has been integrated, the Internet browser on the information technology system of the data subject is automatically prompted by the respective Google Analytics component to transmit data to Google for the purpose of online analysis. During the course of this technical procedure, Google gains knowledge of personal information, such as the IP address of the data subject, which serves Google, inter alia, to understand the origin of visitors and clicks, and subsequently create commission settlements.

The cookie is used to store personal information, such as the access time, the location from which access was made and the frequency of visits to our website by the data subject. Each time our website is visited, this personal data, including the IP address of the Internet connection used by the data subject, is transmitted to Google in the United States of America. This personal data is stored by Google in the United States of America. Google may share this personal data collected through the technical process with third parties.

The data subject may, as stated above, prevent the setting of cookies through our website at any time by means of a corresponding adjustment of the web browser used and thus permanently deny the setting of cookies. Such a setting of the Internet browser used would also prevent Google from placing a cookie on the data subject's IT system. In addition, a cookie already set by Google Analytics can be deleted at any time via the Internet browser or other software programs.

Furthermore, the data subject has the option of objecting to and preventing the collection of data generated by Google Analytics relating to the use of this website and the processing of this data by Google. To do this, the data subject must download and install a browser add-on from the link This browser add-on informs Google Analytics via JavaScript that no data and information about visits to websites may be transmitted to Google Analytics. The installation of the browser add-on is considered an objection by Google. If the data subject's IT system is deleted, formatted or reinstalled at a later date, the data subject must reinstall the browser add-on in order to deactivate Google Analytics. If the browser add-on is uninstalled or deactivated by the data subject or another person who is attributable to their sphere of control, it is possible to reinstall or reactivate the browser add-on.

Further information and the applicable data protection provisions of Google may be retrieved under and under Google Analytics is used under

11. application and use of Google Maps

Our website uses Google Maps API to display geographical information visually, e.g. to make it easier for you to find us.

The operating company of the Google Maps services is Google Inc, 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.

When using Google Maps, Google also collects, processes and uses data about the use of the map functions by visitors. You can find more information about data processing by Google in the Google data protection information. You can also change your personal data protection settings there in the data protection center.

Further information on this can be found in the Google Inc. privacy policy at

12. changes to this privacy policy

Due to current circumstances, such as changes to the relevant data protection regulations or case law, we will - where necessary - update our privacy policy.


Status of the declaration: August 2021