1. Data controller
The controller is Medienfuchs GmbH, Technologiezentrum Werk24, Werkstraße 24, 71384 Weinstadt-Endersbach, Germany, represented by Irene Ruof. Email: info@medienfuchs.gmbh. Phone: +49 7151 9458482.
2. Hosting and technical access data
We host our website and its enquiry database with Febas, proprietor Roman Baumgärtner, Ostlandstraße 5, 49565 Bramsche, Germany. The servers are located in Germany. Febas processes the data needed for the technical operation of the website on our behalf.
Technical access data is processed when you visit the website. This includes your IP address, date and time, requested address, response status, data volume, browser and operating-system information, and the previously visited page (referrer) if your browser transmits it. Processing enables delivery, troubleshooting and protection against attacks. The legal basis is our legitimate interest in a secure, functioning service under Article 6(1)(f) GDPR. Access data is retained only as long as necessary for these purposes, or until specific security incidents are resolved.
3. Contact form, email and telephone
To handle your enquiry we process your email address, message and selected service, plus your name and company if provided voluntarily. The form also stores language, selected design, receipt time, processing status, a reference number and this notice’s version in our MariaDB database. Technical request keys prevent duplicates. Receipt is confirmed only after successful storage.
To process your enquiry, we also send the contact details provided, the service area, your message and its reference number to our mailbox info@medienfuchs.gmbh. The connection to the mail server is encrypted. To ensure reliable delivery, we store the sending status, timestamps and number of delivery attempts. Temporary failures trigger further attempts.
For enquiries about a contract with you or pre-contractual steps at your request, the basis is Article 6(1)(b) GDPR. For other enquiries, especially as a company contact, we rely on Article 6(1)(f) GDPR. Our legitimate interest is responding appropriately and maintaining business contacts. Email and telephone details are processed for the same purposes.
Providing data is voluntary and not required by law or contract. We cannot process the form without an email address and message. Alternatively, contact us by telephone. Enquiries are not automatically used for advertising or to train AI systems.
4. Protection against abuse
To prevent automated enquiries we check an invisible form field and limit requests. A secret-key hash of the IP address is used; the IP is not stored with the enquiry. The hash and counter apply for a 15-minute window. Expired counters are removed with the next successful enquiry or daily cleanup. The basis is Article 6(1)(f) GDPR, our interest in form availability and security.
5. Recipients and retention
Access is granted to the people handling your enquiry and to technical service providers where necessary to operate the website and communicate with you. Providers processing data on our behalf act as processors. Any further disclosure requires a legal basis. The website and enquiry database are operated in Germany. Page visits do not contact external analytics or marketing services.
We delete enquiries when handling is complete and no follow-up questions, legal retention duties or necessary establishment, exercise or defence of legal claims prevent deletion. If a contract follows, relevant business records are subject to applicable commercial and tax retention periods. Mandatory retention relies on Article 6(1)(c) GDPR; safeguarding legal claims on Article 6(1)(f).
The same deletion criteria apply to notifications in the email mailbox. Sending metadata is deleted together with the associated enquiry record. Deleting the database record alone does not automatically delete the email; it is removed separately as part of the same deletion process.
6. Language, cookies and embedded content
The page address determines the language. We use no language, analytics or advertising cookies.
To support navigation, including the back and forward functions, the website stores the current page address and any URL parameters in the browser’s session storage (sessionStorage). This entry applies to the current tab session and is updated when pages change. It is deleted when the tab session ends; the browser’s session-restore function may restore it. Form entries and page content are not stored there.
Form entries remain only in the open page’s memory until successfully submitted, or until you leave, reload or close the form page. Storage and access necessary for navigation are based on § 25(2) no. 2 TDDDG. To the extent that personal data is processed, the basis is our legitimate interest in functioning page navigation under Article 6(1)(f) GDPR.
Fonts, images, icons and 3D software load from our website. Animations are computed in your browser. No external video players, newsletter services, analytics tools or social-media plugins are embedded. External links lead to providers with their own privacy notices.
7. Your rights and objections
Subject to statutory conditions, you have rights to access (Article 15 GDPR), rectification (16), erasure (17), restriction (18) and data portability (20). Information and the handling of your rights are generally free of charge. Where Article 20 GDPR applies, you may receive the data you provided in a structured, commonly used and machine-readable format and request its direct transfer to another controller where technically feasible. Where processing relies on consent, you may withdraw it at any time for the future; earlier lawful processing remains unaffected.
Under Article 21 GDPR you may object to processing based on Article 6(1)(f) for reasons relating to your situation. You may object to direct marketing at any time without giving reasons. Exercise your rights at info@medienfuchs.gmbh. We make no automated decisions with legal or similarly significant effects and carry out no profiling.
8. Right to complain
You may complain to a data protection authority, particularly where you live, work or believe an infringement occurred. The authority for our registered office is the Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg, Heilbronner Straße 35, 70191 Stuttgart, Germany.
Data protection authority9. Security and date
The public website is served over HTTPS. Access controls, input validation and protected database connections safeguard processing. Please send only information needed for your enquiry and arrange confidential documents with us beforehand. Unencrypted email is unsuitable for sensitive documents.
Updated: 28 September 2026. This information covers the functions described here and will be updated if processing changes.