Privacy Policy

Effective as of July 1, 2026

1. Privacy at a Glance

General Information

The following information provides a general overview of what happens to your personal data when you visit this website.

Personal data means any information that can be used to personally identify you. This includes, for example, your name, telephone number, email address, IP address, or any information you submit to us through a form.

Data Collection on This Website

Who is responsible for data collection on this website?

The website operator is responsible for data processing on this website. The contact details of the responsible party can be found in the section “Information on the Responsible Party.”

How do we collect your data?

Some data is collected when you provide it to us directly, for example through a contact form, by telephone, by email, or via WhatsApp.

Other data is collected automatically, or after you have given your consent, when you visit the website. This is done through our IT systems or through services used on the website. This data primarily includes technical information, such as your browser, operating system, time of access, referrer URL, IP address, and interactions with the website.

What do we use your data for?

We use your data to provide the website, process your inquiry, contact you, prepare offers, communicate with customers, analyze website usage, and measure and optimize our advertising activities, provided that a valid legal basis exists.

What rights do you have?

You have the right at any time to receive information about the personal data stored about you. You also have the right to request correction, deletion, restriction of processing, data portability, and to object to certain types of processing.

If you have given consent, you may withdraw that consent at any time with effect for the future. You also have the right to lodge a complaint with a competent data protection supervisory authority.

2. Hosting

Hetzner

This website is hosted by:

Hetzner Online GmbH
Industriestr. 25
91710 Gunzenhausen
Germany

Further information can be found in Hetzner’s privacy policy.

The use of Hetzner is based on Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure, fast, and reliable provision of our website. Where consent is required, processing is carried out on the basis of Art. 6(1)(a) GDPR and Section 25(1) TDDDG. Consent may be withdrawn at any time.

We have concluded a data processing agreement with Hetzner.

3. General Information and Mandatory Disclosures

Data Protection

We treat your personal data confidentially and in accordance with applicable data protection laws and this privacy policy.

When you use this website, various personal data may be processed. This privacy policy explains what data we process, for what purposes, and on what legal basis.

Please note that data transmission over the Internet may be subject to security vulnerabilities. Complete protection against access by third parties is not possible.

Information on the Responsible Party

The responsible party for data processing on this website is:

Laumen & Steinicke GbR
represented by Justin Steinicke & Yannik Laumen
Mittelstraße 18
52249 Eschweiler
Germany

Telephone: +49 152 15229699
Email: info@reinheitsgaranten.de

The responsible party is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data.

Storage Period

Unless a more specific storage period is stated in this privacy policy, we store your personal data only for as long as necessary for the respective processing purpose.

If you submit a legitimate deletion request or withdraw previously given consent, we will delete your data unless legally permissible reasons require or allow further storage. Such reasons may include statutory retention obligations, the fulfillment of contractual obligations, or the establishment, exercise, or defense of legal claims.

Legal Bases for Processing

If you have given consent to data processing, we process your personal data on the basis of Art. 6(1)(a) GDPR.

Where information is stored on your device or accessed from your device, this is carried out on the basis of Section 25(1) TDDDG, provided that consent is required.

If processing is necessary for the performance of a contract or for pre-contractual measures, it is carried out on the basis of Art. 6(1)(b) GDPR. If processing is necessary to comply with a legal obligation, it is carried out on the basis of Art. 6(1)(c) GDPR. In other cases, processing may be carried out on the basis of our legitimate interests pursuant to Art. 6(1)(f) GDPR.

Recipients of Personal Data

As part of our business activities, we work with external service providers. In this context, it may be necessary to transfer personal data to these service providers.

We disclose personal data only where this is necessary for the performance of a contract, where we are legally required to do so, where we have a legitimate interest, or where consent has been given.

Transfers to Third Countries

Some services used by us may transfer personal data to countries outside the European Union or the European Economic Area, particularly to the United States.

Such transfers take place only where an appropriate legal basis exists, for example an adequacy decision, standard contractual clauses of the European Commission, or explicit consent.

Withdrawal of Consent

You may withdraw consent you have previously given at any time with effect for the future. The lawfulness of any processing carried out before the withdrawal remains unaffected.

Right to Object under Art. 21 GDPR

If your personal data is processed on the basis of Art. 6(1)(e) or Art. 6(1)(f) GDPR, you have the right at any time to object to such processing on grounds relating to your particular situation.

If your personal data is processed for direct marketing purposes, you have the right at any time to object to the processing of your personal data for such purposes.

Right to Lodge a Complaint with a Supervisory Authority

You have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data violates data protection law.

Right to Data Portability

You have the right to receive data that we process automatically on the basis of your consent or for the performance of a contract in a commonly used, machine-readable format, or to have such data transmitted to a third party.

Access, Correction, and Deletion

Within the scope of the applicable legal provisions, you have the right at any time to request information about your stored personal data and to request the correction or deletion of such data.

Right to Restriction of Processing

You have the right to request that the processing of your personal data be restricted.

SSL or TLS Encryption

For security reasons and to protect the transmission of confidential content, this website uses SSL or TLS encryption.

4. Cookies, Consent, and Consent Mode

Cookies and Similar Technologies

This website uses cookies and similar technologies.

Technically necessary technologies are used on the basis of Section 25(2) TDDDG and Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure and functional operation of the website.

Non-essential cookies and comparable technologies used for statistics and marketing are used only on the basis of your consent pursuant to Section 25(1) TDDDG and Art. 6(1)(a) GDPR.

Our Own Consent Solution

We use our own consent solution. This allows you to decide separately whether statistics and marketing services may be activated. Necessary functions are always active.

Your selection is stored in your browser’s local storage under the name rg_consent. The selected categories, the time of selection, and the consent version identifier are stored. You can change or withdraw your selection at any time via “Cookie Settings” in the footer of the website.

Processing in connection with consent management is carried out on the basis of Art. 6(1)(c) GDPR to the extent that we are legally required to document consent, and on the basis of Art. 6(1)(f) GDPR. Our legitimate interest lies in legally compliant and user-friendly consent management. Access to the stored selection is carried out on the basis of Section 25(2) TDDDG.

Attribution Cookie for Campaign and Attribution Data

If you consent to marketing services, we may set our own attribution cookie named rg_attribution. This cookie is used to track the origin of an inquiry across multiple page views and to evaluate our advertising activities.

Where available, this cookie may store campaign and attribution parameters such as gclid, gbraid, wbraid, and UTM parameters. It may also store the landing page, the referrer URL, and the time of capture.

The attribution cookie is not used to store names, telephone numbers, email addresses, or message content. The storage period is up to 30 days unless you withdraw your consent earlier. If you withdraw your marketing consent, the attribution cookie will be deleted.

The storage of and access to the attribution cookie is based on your consent pursuant to Section 25(1) TDDDG. The subsequent processing of the personal data contained in it is carried out on the basis of Art. 6(1)(a) GDPR. Consent may be withdrawn at any time with effect for the future.

Google Consent Mode

We use Google Consent Mode to transmit your consent selection to the Google services managed through Google Tag Manager.

When the website is accessed, analytics_storage, ad_storage, ad_user_data, and ad_personalization are initially set to “denied.” Consent to statistics enables analytics_storage. Consent to marketing enables ad_storage, ad_user_data, and ad_personalization.

The Google Tag Manager container is loaded from Google before you give any optional consent. For technical reasons, this may involve the transfer of your IP address to Google. The Google Analytics and Google Ads tags managed through the container are configured so that they remain blocked before the required consent is given and do not trigger analytics or advertising measurement before such consent.

5. Contact and Inquiry Processing

Contact Form

If you contact us through the contact form, we process in particular your name, telephone number, email address, service location, and the content of your inquiry, insofar as you provide this information.

Processing is carried out to handle your inquiry, contact you, prepare an offer, and respond to follow-up questions. The legal basis is Art. 6(1)(b) GDPR where your inquiry relates to pre-contractual measures or a contract. In other cases, processing is carried out on the basis of our legitimate interest in effectively handling inquiries pursuant to Art. 6(1)(f) GDPR, or on the basis of your consent pursuant to Art. 6(1)(a) GDPR where such consent has been requested.

The data remains with us until the purpose of processing no longer applies, you request deletion, or you withdraw consent that has been given. Statutory retention obligations remain unaffected.

Transmission of Campaign and Attribution Data with the Contact Form

If you use our contact form, additional technical information and attribution data may be transmitted with the inquiry in addition to the information you enter, where such data is available. This includes, in particular, the time of submission, the landing page, the referrer URL, and campaign and attribution parameters such as gclid, gbraid, wbraid, and UTM parameters.

This data is used to understand the origin of inquiries, technically attribute inquiries, evaluate our marketing activities, and measure the effectiveness of our advertising measures. Names, telephone numbers, email addresses, and message content are not transmitted to Google Analytics or Google Ads in this context.

Where the processing is necessary for handling and attributing your inquiry, it is carried out on the basis of Art. 6(1)(b) GDPR or Art. 6(1)(f) GDPR. Our legitimate interest lies in the efficient processing of incoming inquiries, the traceability of inquiry sources, and the evaluation and optimization of our marketing activities. Where processing is based on your marketing consent, it is carried out on the basis of Art. 6(1)(a) GDPR. Consent may be withdrawn at any time with effect for the future.

Storage after the First Form Step

Our contact form is structured in multiple steps. If you enter your name and telephone number in the first step and click “Next,” this information is already transmitted to Formcarry and stored before you fully submit the form.

The purpose of this intermediate storage is to process your inquiry, avoid technical interruptions, and allow us to contact you in the event of follow-up questions or an abandoned inquiry process.

Processing is carried out on the basis of Art. 6(1)(b) GDPR insofar as it is necessary for pre-contractual measures. Where no specific contract initiation exists, processing is carried out on the basis of our legitimate interest in efficiently handling incoming inquiries and avoiding communication interruptions pursuant to Art. 6(1)(f) GDPR.

Use of Formcarry

We use Formcarry for our contact forms. Formcarry is a service provided by Teijal, Inc. d/b/a Formcarry, 3 Germay Dr, Unit 4 #1278, Wilmington, DE 19804, USA.

When you complete a form step or submit the complete form, the data entered is transmitted to Formcarry and processed there. This may include, in particular, your name, telephone number, email address, message, time of transmission, IP address, browser and device information, and other technical metadata.

According to Formcarry, personal data is processed on servers located within the European Union. Since Formcarry is a US-based provider, access to personal data from the United States in connection with support, maintenance, troubleshooting, and provision of the service cannot be excluded. According to Formcarry, standard contractual clauses of the European Commission and additional technical and organizational safeguards are used for such transfers.

Processing is carried out to handle your inquiry, contact you, prepare an offer, and respond to follow-up questions. The legal basis is Art. 6(1)(b) GDPR where your inquiry relates to pre-contractual measures or a contract. In other cases, processing is carried out on the basis of our legitimate interest in effectively handling incoming inquiries pursuant to Art. 6(1)(f) GDPR, or on the basis of your consent pursuant to Art. 6(1)(a) GDPR where such consent has been requested.

The data remains with us or with Formcarry until the purpose of processing no longer applies, you request deletion, consent that has been given is withdrawn, or we delete the data at Formcarry. Statutory retention obligations remain unaffected.

Formcarry’s data processing agreement is part of Formcarry’s terms of use and applies insofar as Formcarry processes personal data on our behalf.

Inquiries by Email, Telephone, or WhatsApp

If you contact us by email, telephone, or WhatsApp, we process the information you provide and the resulting personal data in order to handle your inquiry.

Processing is carried out on the basis of Art. 6(1)(b) GDPR where your inquiry relates to pre-contractual measures or a contract. In all other cases, processing is carried out on the basis of our legitimate interest in effectively handling inquiries pursuant to Art. 6(1)(f) GDPR, or on the basis of your consent pursuant to Art. 6(1)(a) GDPR.

When WhatsApp is used, data may be processed by WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. Further information can be found in WhatsApp’s privacy policy.

6. Analytics and Marketing Services

Google Tag Manager

We use Google Tag Manager, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Tag Manager is used to centrally manage website tags. The container is loaded by Google immediately when the page is accessed. In this process, technical connection data, in particular the IP address, browser information, referrer, and time of access, may be transmitted to Google. The loading of the container is carried out on the basis of Art. 6(1)(f) GDPR. Our legitimate interest lies in the technically controlled management of the services and consent settings used on the website.

The analytics and marketing tags managed through Google Tag Manager are triggered only after you have consented to the relevant category. Google Tag Manager also transmits the Consent Mode signals selected by you to the integrated Google services.

Google Analytics 4

We use Google Analytics 4, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics allows us to statistically evaluate the behavior of website visitors. This may involve the processing of visited pages, clicks, technical browser and device information, approximate location data, referrer, time of visit, and conversion events.

We do not transmit names, telephone numbers, email addresses, postal addresses, or message content to Google Analytics. Page URLs are transmitted to Google Analytics without search parameters and URL fragments.

Google Analytics is activated only after you have consented to statistics. The legal basis is Art. 6(1)(a) GDPR and Section 25(1) TDDDG. Consent may be withdrawn at any time. Further information can be found in Google Analytics’ privacy notices.

Google Ads Conversion Tracking

We use Google Ads Conversion Tracking, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

This allows us to measure whether users perform certain contact actions on our website after clicking on a Google advertisement. Conversions may include, in particular, the successful submission of the first contact form step, clicks on a telephone number, and clicks on WhatsApp.

When the first form step is successfully stored, the website transmits only a technical event without form values to Google Tag Manager. Names, telephone numbers, email addresses, and message content are not transmitted to Google Analytics or Google Ads. The completed second form step is not counted as an additional conversion.

Google Ads Conversion Tracking is activated only after you have consented to marketing. The legal basis is Art. 6(1)(a) GDPR and Section 25(1) TDDDG. Consent may be withdrawn at any time.

Conversion Linker

As part of Google Tag Manager, we use the Conversion Linker. It is used to store click information from Google Ads and correctly attribute conversions.

The Conversion Linker is activated exclusively after you have consented to marketing. The legal basis is Art. 6(1)(a) GDPR and Section 25(1) TDDDG.

7. External Links and Social Media

Our website contains links to external platforms, such as Instagram and WhatsApp. If you click such a link, you leave our website. The respective provider is responsible for any subsequent processing of personal data.

8. Changes to This Privacy Policy

We reserve the right to amend this privacy policy if technical, legal, or organizational changes occur. The current version is available on this website.