Privacy Policy

1. Controller

D-ESMAT Engineering Office
Technology Center Dresden
Gostritzer Str. 61
01217 Dresden
Germany

D-ESMAT is the controller within the meaning of the General Data Protection Regulation (GDPR) and other national data protection laws.

2. General Information on Data Processing

We process the personal data of our users only to the extent necessary to provide a functional website as well as our content and services. Processing generally only takes place with the consent of the data subject or when permitted by legal provisions.
We process personal data in accordance with the provisions of the European General Data Protection Regulation (GDPR) and other applicable legal regulations. We process your personal data so that you can make use of our services.

3. Purposes of Data Processing and Legal Basis

3.1. Performance of a Contract and Precontractual Measures

Legal basis: Art. 6(1)(b) GDPR.

We process personal data insofar as this is necessary for initiating, performing, or handling a contractual relationship. This includes all steps required to offer, plan, and provide our engineering services. This particularly includes responding to inquiries, preparing and sending offers, technical and commercial project preparation, performing calculations, planning and expert assessments, as well as ongoing communication with clients, project partners, authorities, and other parties involved.

3.2. Legitimate Interests

Legal basis: Art. 6(1)(f) GDPR.

Processing may be necessary in exceptional cases to safeguard legitimate interests of us or third parties, provided your interests do not override these.
Examples include:
• Ensuring IT security

3.3. Based on Consent
Legal basis: Art. 6(1)(a) in conjunction with Art. 7 GDPR.

If consent has been granted for specific processing purposes, processing is permitted on this basis. Consent may be withdrawn at any time with effect for the future. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

4. Data Collection on the Website

4.1. Provision of the Website and Creation of Log Files

When accessing our website, the browser used on your device automatically sends information to our server. This information is temporarily stored in log files.Collected data includes:

• IP address of the requesting device
• Date and time of access
• Name and URL of the retrieved file
• Website from which access occurs (referrer URL)
• Browser used, operating system, and name of your access providerThese data are processed for:
• Ensuring smooth website connection
• Ensuring comfortable website use
• Evaluating system security and stability
• Administrative purposes

Processing is carried out by:

ALL INKL.COM – Neue Medien Münnich
Owner: René Münnich
Hauptstraße 68
D 02742 Friedersdorf
under a data processing agreement pursuant to Art. 28 GDPR.

4.2. Use of Cookies

Our website uses only technically necessary cookies (e.g., session cookies).
Legal basis: Art. 6(1)(f) GDPR.

4.3. Contact via Email or Contact Form

If you contact us, the data you provide will be stored.
Processed data:
• Name*
• Email address*
• City/Country
• Phone number
• Message content*
• Project data (if provided)
*Required fields

Data is processed exclusively for handling inquiries and responding to them. Data is deleted at the end of the year unless legal retention periods require otherwise.

5. Disclosure of Data

Your data is only shared if:
• necessary for contract performance (e.g., project partners, subcontractors)
• legally required
• you have given consent
Transfers to third countries occur only under the conditions of Art. 44 ff. GDPR.

6. Data Security
We use technical and organizational measures to protect your data, including:
• SSL encryption
• Access restrictions
• Regular updates and security checks

7. Storage Periode
Storage duration depends on processing purposes.
We store personal data for the duration of the business relationship and according to statutory retention obligations (e.g., HGB, AO), typically 2–10 years or longer for certain categories.

8. Rights of Data Subjects

You have the following rights (if legal requirements are met):
• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object (Art. 21 GDPR)
• Right to withdraw consent (Art. 7(3) GDPR)

A simple informal message is sufficient to exercise your rights.

9. Right to Lodge a Complaint

You may lodge a complaint with the supervisory authority:

Saxon Commissioner for Data Protection and Transparency
Maternistraße 17
01067 Dresden
Phone: +49 351 85471 101
Fax: +49 351 85471 109
Email: post@sdtb.sachsen.de
Website:
www.datenschutz.sachsen.de

10. Updates and Changes to this Privacy Policy

This privacy policy is valid as of May 2026.
Changes may become necessary due to website developments or legal/administrative requirements.

The current version is available at
www.d-esmat.de/en/datenschutz_en.html