Privacy Policy

The controller responsible for the processing of personal data on this website is:

Oberflächen-Team Stefan Diedrichsen Neustädter Str. 4 23730 Sierksdorf Germany

Phone: +49 175 9002231
Email: info@oberflaechen-team.de
Website: www.oberflaechen-team.de

We only process personal data insofar as this is necessary for the provision of this website, the handling of enquiries, or the performance of pre-contractual and contractual measures.

Processing takes place in accordance with the General Data Protection Regulation (GDPR) and the applicable data protection laws.

When you visit this website, technical access data is automatically processed by the hosting provider. This may include in particular:

• IP address
• date and time of access
• pages accessed
• volume of data transferred
• browser type and version
• operating system
• referrer URL
• hostname of the accessing device

This data is processed for the technical provision, stability and security of the website.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure and uninterrupted operation of the website.

Deployment and hosting of this website are provided through the Lovable platform (Lovable Labs Incorporated). Delivery and protection of the website take place via the content delivery and security network of Cloudflare (Cloudflare, Inc. / Cloudflare Germany GmbH).

In this context, technical access data such as IP address, time of access, requested resource, browser type and referrer is processed in order to deliver the website, protect it against attacks and automated abuse, and ensure availability.

For this purpose Cloudflare sets the technically necessary security cookie __cf_bm (bot management) with a typical lifetime of approximately 30 minutes. The legal basis for storing and reading this information on your device is Section 25(2) no. 2 TDDDG in conjunction with Art. 6(1)(f) GDPR; the cookie is strictly necessary for the secure provision of the service requested by the user.

The legal basis for the remaining processing is Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure, fast and uninterrupted provision of the website. Where data is transferred to third countries, in particular to the USA, the transfer is based on appropriate safeguards such as the EU Commission's standard contractual clauses.

Further information: Lovable privacy notice · Cloudflare privacy notice

If you contact us via the contact form or by email, we process the information you provide in order to handle your enquiry.

This may include in particular:

• name
• email address
• phone number
• role / company
• yacht and project data
• location
• timeframe
• selected project areas
• message text

Processing is carried out to handle your enquiry, to provide a technical assessment of the project, and to prepare a quotation.

The form data is transmitted to us technically by email via the service provider Resend (Resend, Inc., USA). In doing so, Resend processes the sender and recipient address, the subject, technical metadata of the transmission, as well as the plain-text and HTML content of the message. According to Resend's documentation, email data is retained for 30 days by default; different retention periods may apply to enterprise configurations.

Processing also takes place in the USA. It is based on appropriate safeguards within the meaning of Art. 44 et seq. GDPR, in particular the EU Commission's standard contractual clauses and the provider's data processing terms (DPA).

Further information: Resend privacy notice

The legal basis is Art. 6(1)(b) GDPR insofar as the enquiry relates to pre-contractual or contractual measures. In other cases, processing is based on Art. 6(1)(f) GDPR. Our legitimate interest lies in the proper handling of incoming enquiries.

We treat client information, yacht details, project data and transmitted content confidentially.

Images, project information or client-related content are not published without express approval. On request, we work in compliance with NDA requirements.

We store personal data only for as long as is necessary to handle the enquiry, to perform the contract, or to fulfil statutory retention obligations.

Data from enquiries is deleted when it is no longer required for processing and no statutory retention obligations prevent deletion.

Personal data is only disclosed to third parties if this is necessary for handling the enquiry, for the performance of a contract, for the technical provision of the website, or on the basis of legal obligations.

Data is not disclosed for advertising purposes.

Technically necessary storage serves the operation of the website only, for example storing your privacy decision. The legal basis is Section 25(2) no. 2 TDDDG in conjunction with Art. 6(1)(f) GDPR.

This website uses Google Ads conversion tracking through the Google Tag in order to measure whether users interact with the website after clicking on an advertisement, for example by submitting a contact form.

We use Google Consent Mode v2 in "Basic" mode: no Google scripts are loaded and no data is transmitted to Google before your active consent. Only after consent is the Google Tag loaded and conversion measurement activated. Without consent, all consent signals remain set to "denied".

Where consent is given, technical information about website access, interactions with pages and conversion actions may be processed. This may involve a transfer of personal data to the USA; Google bases such transfers on standard contractual clauses and is certified under the EU-US Data Privacy Framework.

The legal basis for storing and reading information on your device is Section 25(1) TDDDG; the subsequent processing is based on Art. 6(1)(a) GDPR.

Your decision is stored locally in your browser and is requested again automatically after 180 days. You can withdraw or change your consent at any time with effect for the future via the "Privacy settings" link in the footer.

Provider:

Google Ireland Limited Gordon House, Barrow Street Dublin 4 Ireland

Further information can be found in Google's privacy policy.

All fonts used are served locally from our own server. There is no connection to Google Fonts, Fontshare or other font services, and no data is transmitted to third parties for this purpose.

Based on the current setup, no external services such as Google Maps, YouTube, Vimeo, Calendly, reCAPTCHA or newsletter services are integrated.

Should such services be used in the future, this privacy policy will be updated accordingly.

Within the limits of applicable law, you have the following rights:

• right of access to the personal data we hold about you
• right to rectification of inaccurate data
• right to erasure
• right to restriction of processing
• right to data portability
• right to object to certain processing
• right to withdraw consent with effect for the future

To exercise your rights, you can contact us at any time: info@oberflaechen-team.de

You have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data infringes data protection law.

The competent supervisory authority in Schleswig-Holstein is:

Unabhängiges Landeszentrum für Datenschutz Schleswig-Holstein Holstenstraße 98 24103 Kiel Germany

This privacy policy applies in the version published on this website.

We reserve the right to adapt this privacy policy if technical, legal or organisational changes require it.