Data protection declaration

Status: 26. September 2026

1. Responsible and contact

Responsible for the processing of personal data is CRETEC GmbH, Industriestraße 35, 63654 Büdingen, Germany, represented by Managing Director Alexander Trebing. Telephone: +49 (0) 6042 533 95-40, e-mail: mail@cretec.gmbh.

For questions about data protection and the exercise of your rights, you can contact us under these contact details.

2. Provision of the website and hosting

This website is hosted by STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin. Upon retrieval of the website, technically necessary data are processed, in particular IP address, date and time, requested page or file, amount of data transmitted, HTTP status, browser information and, if applicable, the previously visited page (referrer). The processing serves the delivery of content, operational security and error analysis.

The legal basis is Art. 6 par. 1 lit. f DSGVO. Our legitimate interest lies in the secure and reliable provision of our Internet offer. STRATO processes hosting data as a processor. According to STRATO, IP addresses are stored for a maximum of seven days to detect and defend against attacks. In the access protocols provided for website operators, IP addresses are anonymized. Anonymised technical statistics can be kept for longer.

Further information: STRATO: Data processing during website visit.

3. Cookies, analytics and locally provided content

The website itself does not use analytics or marketing cookies. Neither Google Analytics nor advertising pixels, social media plugins or external writing services are included. Fonts, images and the QBIC Wheels video are loaded from the web space of this website. Playing the video does not connect to YouTube or Vimeo. The website does not use Local Storage for its own functions.

4. Project request, e-mail and telephone

The input mask on the contact page creates an e-mail draft exclusively in your browser. The inputs are not sent to a server by the website and are not stored in a website database. Only when you open the draft in your e-mail program and send it yourself will we receive your message. Alternatively, you can copy the text and send it through your email program.

When contacting us, we process your provided information, for example name, e-mail address, company, telephone number and content of the request, as far as this is necessary for processing and answering. In the case of requests for initiation or execution of a contract, the legal basis is art. 6 par. 1 lit. b GDPR; for other inquiries Art. 6 par. 1 lit. f DSGVO. Our legitimate interest is proper communication with interested parties and business partners.

The provision of information is voluntary. Without a back contact option or the information required for your request, we may not be able to process it.

5. E-mail service providers and recipients

For business email communication, we use Microsoft 365 / Exchange Online. Microsoft and subcontractors may process message content, contact data and technical communications data for the provision of the e-mail service. Access from countries outside the EU or the EEA is not generally excluded. Microsoft provides in particular EU standard contractual clauses for the services covered as guarantees for corresponding transfers. Information about these guarantees can be obtained from us and under Microsoft: EU Standard Contract Clauses.

Further recipients are only considered if this is necessary for processing your request, fulfilling the contract or fulfilling legal obligations, for example commissioned IT service providers, consultant professional secret holders or competent authorities.

6. Memory duration

We store personal contact data for as long as it is necessary to process your request or to execute a contract. They will then be deleted, unless there are any legal storage obligations or necessary proof purposes. In the case of commercial documents subject to storage, the storage period is governed by the relevant commercial and tax regulations. After these deadlines, the data will be deleted. The storage of technical access data is described in Section 2.

7. External links and downloads

Some links lead to external specialist publications, documents or other websites. Only when you call up such a link, the respective provider receives the data required for the call. For its data processing, its data protection notice applies. Locally provided PDF documents and images, on the other hand, are delivered directly from our web space.

8. Your rights

Under the legal conditions, you have the right to information (Art.) 15 GDPR), correction (Art. 16 GDPR), deletion (Art. 17 GDPR), restriction of processing (Art. 18 GDPR) and data portability (Art. 20 GDPR. You can revoke a given consent at any time with effect for the future; the legality of the processing carried out until the revocation remains unaffected.

Right of appeal: As far as we have data on the basis of art. 6 par. 1 lit. f GDPR, you can process at any time according to art for reasons arising from your special situation. 21 Contradictory GDPR. We then no longer process the data, unless we can prove compelling legitimate reasons that outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims. You can object to processing for direct marketing purposes at any time without giving reasons.

Apply for the exercise of your rights mail@cretec.gmbh.

9. Right of appeal

You have, according to type. 77 GDPR the right to complain to a data protection supervisory authority. For companies based in Hessen, the Hessian Commissioner for Data Protection and Freedom of Information is responsible in particular. Contact and Complaint Option: datenschutz.hessen.de.

10. Automated decisions

In the context of using this website, there is no automated decision-making including profiling in the sense of the art. 22 GDPR.