Skip to content
Apex Industrial Service Group Locations
DE

Privacy policy

Here you can find out which personal data is processed when you use this website and when you send a request.

This is a translation for convenience. In case of doubt, the German version at apex-isg.de/datenschutz.html applies.

Controller

APEX INDUSTRIAL SERVICE GROUP
Schulstrasse 3
54636 Trimport
Contact for data protection enquiries: Volker Rieboldt, Schulstrasse 3, 54636 Trimport

Data protection officer

No data protection officer has been appointed. The conditions of section 38 of the German Federal Data Protection Act are not met: fewer than twenty people are constantly engaged in the automated processing of personal data. Questions about data protection are answered by the controller named above.

Hosting with Hostinger

Hostinger is the hosting provider for this website. Contracting party: HOSTINGER INTERNATIONAL LIMITED, a limited liability company under Cypriot law, 61 Lordou Vironos str., 6023 Larnaca, Cyprus.

When you open a page, the server processes in particular your IP address, the address requested and technical browser information in order to deliver the page to your device. Access logs may additionally contain the time, the response status, the amount of data and the referring page, if your browser sends it.

This processing serves delivery, operational security and troubleshooting. The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is to provide our information and contact services reliably and to fend off attacks.

Places of processing
The website is hosted on a server in Düsseldorf, Germany. Backups are stored in France.
Access logs and retention
When a page is opened, the provider processes technical details: IP address, time, the address requested and the referring address, information about browser and device, and the internet service provider. The provider does not state a fixed retention period; it states that it stores the details for as long as is necessary for operations and for legal obligations.
Data processing agreement
A data processing agreement is in place. As a Data Processing Addendum it forms part of the terms of use and does not have to be concluded separately. The sub-processors used are listed in its Annex 3.
Additional hosting features
Hostinger's content delivery network (CDN) is active: page content is delivered via upstream servers, which technically process the IP address of the request. Hostinger's access analytics and protection cookies are not used.

The hosting provider processes website data within the scope of the services commissioned. The agreed services and the data processing agreement pursuant to Article 28 GDPR are decisive. Hostinger provides further information in its Data Processing Addendum ready.

Contact and request form

When you submit the form, we process the details entered there in order to handle your request and reply to you.

The following is collected: service area, description of the task (up to 5,000 characters), name and email address as mandatory details, and optionally company, phone number, place of work and preferred period.

Recipients are the people responsible internally for your request and the mail provider commissioned. Mail provider and delivery path: the form message is sent via the web server of the hosting provider in Düsseldorf. Requests are currently received and stored in a mailbox at Google (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland).

If your request relates to a contract with you or to pre-contractual steps taken at your request, the basis is Article 6(1)(b) GDPR. Other requests, and communication with contacts at a company, are handled on the basis of Article 6(1)(f) GDPR. Our legitimate interest is the proper handling of business matters and maintaining the communication this requires.

Providing your details is voluntary. Without the mandatory details marked as such, we cannot handle the form request. There is no obligation to fill in optional fields. You can also use the contact details given in the legal notice use.

We keep requests only for as long as this is necessary for handling them and for any statutory retention obligations. The specific periods and deletion criteria: requests that do not lead to an order are deleted no later than six months after the last message. If a request leads to an order, it becomes part of the business correspondence and is subject to the statutory retention periods: six years under section 257 of the German Commercial Code, and ten years for tax-relevant documents under section 147 of the German Fiscal Code.

Your details are used solely for this request. They are not used for advertising, you are not signed up to a newsletter, and they are not passed on to third parties for other purposes.

Technical log of the form

Each request sent creates one line in the server log with the time, a generated reference, the processing status, the status code and the duration. Not included the text of your message, your name, your email address and your IP address.

Retention of and access to these logs: the request form keeps a technical log with the time, a sequential reference, the status, the status code, the processing time and the delivery path. Name, message, email address and IP address are not included; to limit the number of requests, only a shortened hash of the IP address is used. Only the operator has access, via the hosting account. Entries are overwritten after 30 days at the latest.

To protect against abusive bulk sending, we limit the number of requests per connection within a ten-minute counting window. For this, your IP address is linked to a counter in memory. Expired entries are removed during the next clean-up in the course of an accepted request, or on a restart. The application does not write them permanently to a file or database. This processing is based on Article 6(1)(f) GDPR and our legitimate interest in limiting abusive requests. The hosting provider's possible access logs described above are separate from this.

Reply by email

When we reply to your request, we process your email address and the message history at our mail provider. Email is an open transmission path; on its way through the network a message is not protected against being read throughout. If you want to tell us something confidential, say so and we will agree another route.

Cookies, browser storage and additional services

Our own website code sets no cookies. Fonts, images and the interactive industry drawing are loaded from our own server. What you select in the industry model is neither stored nor sent to an analytics service. Only audience measurement sets cookies, and only after your consent; which ones they are and how long they last is set out in the audience measurement section at the end of this page.

Which additional features are currently switched on, and whether a choice is required, is set out under Cookies and privacy settings. Additional features of the hosting provider have to be taken into account in the hosting configuration named above.

Data-minimising default

One optional service requiring consent is active: audience measurement with Google Analytics. That is why a banner appears on your first visit, in which you can allow or decline it. Without your permission nothing is measured and nothing is transferred to Google. The technical processing by the hosting provider is unaffected by this.

Transfer to third countries

Whether data is processed outside the EU and the European Economic Area depends on the service providers used, their sub-processors and the specific setup. A server location in the EU alone does not rule out other places of processing. Details of the transfers actually envisaged: a transfer to countries outside the European Economic Area is possible because the provider also uses data centres and service providers there, among others in the United States, Brazil and Singapore. The basis for this is the European Commission's standard contractual clauses.

Where such a transfer is envisaged, the relevant basis under Articles 44 et seq. GDPR, the countries and recipients concerned and, where applicable, appropriate safeguards and how to obtain a copy of them are stated here. Processing exclusively within Europe has not yet been confirmed for this template.

Your rights

Subject to the respective legal conditions, you have the right of access (Article 15 GDPR), rectification (Article 16), erasure (Article 17), restriction of processing (Article 18) and data portability (Article 20). Where processing is based on your consent, you can withdraw it at any time with effect for the future. Please contact the body named above to do so.

Under Article 77 GDPR you can lodge a complaint with a data protection supervisory authority, in particular in the member state of your habitual residence, your place of work or the alleged infringement. Supervisory authority at our registered office: Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Rheinland-Pfalz, Hintere Bleiche 34, 55116 Mainz, www.datenschutz.rlp.de.

Objection to certain processing

Where we process data on the basis of Article 6(1)(f) GDPR, you can object under Article 21 GDPR on grounds relating to your particular situation. We will then stop processing the data unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or unless the processing serves to establish, exercise or defend legal claims. You can object to processing for direct marketing at any time; your data will then no longer be processed for those purposes.

Encrypted transmission

This website is delivered exclusively over an encrypted connection (TLS, recognisable by the „https“ in the address bar and the padlock icon in your browser). What you enter in the request form therefore cannot be read by third parties on its way to us.

Providing your details is voluntary

You are under no legal or contractual obligation to provide us with data. Without the details marked as required in the request form, however, we cannot handle your request or reply to you. No further disadvantage arises for you.

No automated decision-making

No automated decision-making, including profiling, within the meaning of Article 22 GDPR takes place. Your request is read and answered by a person.

Status and changes

This policy describes the current technical state of this website. If a feature is added that passes data to third parties, this text is updated first – and only then is the feature switched on.

Audience measurement with Google Analytics

Purpose. We want to know which pages are visited, how long someone stays and how they found their way here. We use that to improve the website. It is not intended to identify any particular person.

Legal basis. Your consent alone – for storing and reading information on your device under section 25(1) of the German TDDDG, and for the subsequent processing under Article 6(1)(a) GDPR. Without your consent no Google script is loaded, no cookie is set and nothing is transferred to Google.

provider. Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, as the provider for the European Economic Area; the parent company is Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

What is processed. Shortened IP address, time of the visit, pages viewed and time spent, the previously visited page, details of device, operating system, browser and language setting, an approximate location at regional level, and a randomly assigned identifier stored in the cookies _ga and _ga_2TDRW73FGQ . Both cookies expire after two years.

What is switched off. The advertising features of Google Analytics, cross-device attribution („Google signals“) and the sharing of measurement data with Google's advertising products are switched off. The IP address is processed in shortened form.

What is passed on to Google. Three features in the account settings are switched on: aggregated measurement data that can no longer be attributed to individuals feeds into benchmarks and forecasts; Google's technical support may view the account in the event of a fault; and Google evaluates information about how the account is used in order to make recommendations. None of this is used for advertising.

Transfer to the USA. A transfer to Google LLC in the USA cannot be ruled out. The basis is the European Commission's adequacy decision of 10 July 2023 on the EU-US Data Privacy Framework, under which Google LLC is certified, supplemented by the Commission's standard contractual clauses. Despite these safeguards it cannot be ruled out that US authorities access the data and that no legal remedy meeting European standards is open to you against this. By giving your consent you also consent to this transfer (Article 49(1)(a) GDPR).

Data processing agreement. Google's data processing terms, which form the data processing agreement under Article 28 GDPR, were accepted for this account on 26 September 2026.

Retention period. The Google account is set to two months for event-level data and fourteen months for user-level data. The fourteen months start again as soon as the same person visits the website again. The cookies on your device expire after two years.

Withdrawal. You can withdraw your consent at any time, without giving reasons and without disadvantage – via „Cookies & settings“ in the footer. Withdrawal takes effect for the future; processing up to that point remains lawful. You can also delete the cookies stored for this website in your browser settings.

SOS – emergency support

An acute staffing shortfall, a quality problem, a production stoppage or a project need at short notice? Contact us directly – 24 hours a day, 7 days a week.

Or write to us: info@apex-isg.de