Privacy Policy

1. Responsible person

Rapid3d4Service
Jahnstraße 11
45883 Gelsenkirchen
E-Mail: rapid3d4service@gmail.com

2. Hosting & Server Logfiles

This website is operated by an external service provider (hosting). When our pages are accessed, the hosting provider automatically collects server log files, including IP address, date and time of access, time zone difference, requested URL, HTTP status code, amount of data transferred, referrer URL and browser/operating system information (user agent).

Purpose and legal basis: Technisch erforderliche Bereitstellung, Stabilität und Sicherheit der Website sowie Missbrauchsabwehr (Art. 6 Abs. 1 lit. f DSGVO – berechtigtes Interesse).

Storage duration: Logfiles werden üblicherweise kurzfristig gespeichert und anschließend gelöscht. Wir haben die Speicherdauer auf maximal 30 Tage begrenzt, sofern nicht sicherheitsrelevante Ereignisse eine längere Aufbewahrung erfordern.

Hosting provider note: Die technische Bereitstellung erfolgt über Railway (Cloud-Hosting). Mit dem Hoster besteht ein Vertrag zur Auftragsverarbeitung gemäß Art. 28 DSGVO.

3. contactaufnahme (E-Mail / Formular)

If you contact us by e-mail or via a contact form, we will process the data you provide (e.g. name, e-mail address, message) to process your request and any follow-up questions.

Rechtsgrandlage: Art. 6 para. 1 lit. b GDPR (pre-contractual measures/contract fulfillment) or Art. 6 para. 1 lit. f GDPR (legitimate interest in efficient communication).

Storage duration: Requests will be deleted after processing has been completed, at the latest after 6 months, provided there are no legal obligations to retain data.

4. Cookies

We use technically necessary cookies or comparable storage where required for operation, security and explicitly requested functions. Marketing technologies are disabled by default and are activated only with your explicit consent. Your decision is stored locally in your browser so that we can respect your choice.

5. Google Ads and Google AdSense

With your explicit consent, we may use Google Ads (Google tag/gtag.js) to measure advertising interactions and Google AdSense to display advertisements. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Online identifiers, device/browser information, IP addresses, usage and interaction data may be processed, and cookies or similar technologies may be used.

The sole legal basis is your consent (Article 6(1)(a) GDPR and Section 25(1) TDDDG for storing or accessing information on your device). Google marketing and AdSense scripts are not loaded without consent. Any transfer to third countries is subject to the safeguards used by Google.

You may withdraw your consent at any time with future effect through Cookie settings. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

6. External reviews (Elfsight)

With your consent, our website may load an Elfsight review widget. Only then is a connection to Elfsight established; your IP address, device/browser data and usage data may be transmitted. The purpose is to display external customer reviews. The legal basis is your consent under Article 6(1)(a) GDPR and, where information is stored on or read from your device, Section 25(1) TDDDG. The Elfsight script is not loaded without consent.

7. Google Maps

With your explicit consent, a Google Maps map may be embedded on the About us page. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Loading the map may transmit your IP address, device/browser information and usage data to Google, and may use cookies or similar technologies. The sole purpose is to display our location. The legal basis is your consent under Article 6(1)(a) GDPR and, where information is stored on or read from your device, Section 25(1) TDDDG. No connection to Google Maps is established without consent.

8. Customer account and Google sign-in

If you initiate the optional Google sign-in, you will be redirected to Google. To sign you in, we process the identity data provided by Google, particularly a Google identifier and your verified email address. The purpose is the sign-in or account linking you requested. The legal basis is Article 6(1)(b) GDPR. Google sign-in is voluntary; normal account use does not depend on marketing consent.

9. Payment service providers

When you select an offered payment method, the order, contact and payment data necessary to process the payment are transmitted to the respective payment provider (particularly Stripe or PayPal). This processing serves to fulfil the contract and your chosen payment under Article 6(1)(b) GDPR and, where applicable, to meet legal obligations under Article 6(1)(c) GDPR. Payment services are not preloaded for marketing purposes.

10. Email delivery via Google

We use Google’s Gmail API for transactional messages, contact replies and order communications. This involves processing the recipient’s address, message content and delivery metadata. The legal basis depends on the purpose of the message, particularly Article 6(1)(b) GDPR for contractual communications and enquiries, and Article 6(1)(f) GDPR for necessary business communications.

11. AI chatbot (OpenAI)

When you actively use the AI chatbot and submit a message, the text you enter is sent to OpenAI to generate a response. Please do not enter sensitive personal data or personal data unnecessary for your enquiry. Transmission takes place only through your active use of the chatbot. The purpose is to answer your enquiry; the legal basis is Article 6(1)(b) GDPR for pre-contractual enquiries and otherwise Article 6(1)(f) GDPR for user-friendly responses to website questions.

12. Newsletter

A newsletter is sent only on the basis of separate, voluntary consent. Consent is not a condition of purchase and may be withdrawn at any time with future effect. Actual newsletter delivery requires proof of consent and an unsubscribe process; where the website only displays a non-binding form without actual subscription, no newsletter processing takes place through it.

13. Transfers to third countries

Sofern unser Hosting-Anbieter oder eingebundene Dienstleister Daten außerhalb der EU/des EWR verarbeiten, stellen wir ein angemessenes Datenschutzniveau sicher, z. B. durch EU-Standardvertragsklauseln gem. Art. 46 DSGVO.

14. Data recipients

Eine Übermittlung personenbezogener Daten an Dritte findet nur statt, wenn dies zur Vertragserfüllung notwendig ist, wir gesetzlich dazu verpflichtet sind oder Sie eingewilligt haben. IT-Dienstleister, die uns beim Betrieb, bei Wartung und Bereitstellung der Website unterstützen, handeln als Auftragsverarbeiter nach Art. 28 DSGVO.

15. Overview of retention periods

• Server logfiles: max. 30 days
• Contact requests: until completion of processing, max. 6 months
• Vertrags-/invoicesdaten: in accordance with the applicable statutory retention requirements
• Consent setting: locally in your browser until changed, browser data are deleted, or a new request is technically required
• Customer account: until the account is deleted; contract data subject to statutory retention requirements are unaffected

16. Rights of data subjects

You have the right,

• Request information about the processing of your personal data (Art. 15 GDPR),
• to have inaccurate data rectified (Art. 16 GDPR),
• Have data deleted (Art. 17 GDPR),
• to have the processing restricted (Art. 18 GDPR),
• Request data portability (Art. 20 GDPR),
• object to processing based on Article 6(1)(e) or (f) GDPR (Article 21 GDPR),
• withdraw consent at any time with future effect (Article 7(3) GDPR).

Zudem haben Sie das Recht, sich bei einer Datenschutzaufsichtsbehörde zu beschweren, insbesondere in dem Mitgliedstaat Ihres gewöhnlichen Aufenthalts, Ihres Arbeitsplatzes oder des Orts des mutmaßlichen Verstoßes.

17. Security (TLS/SSL)

Wir setzen dem Stand der Technik entsprechende technische und organisatorische Maßnahmen ein. Die Übertragung erfolgt – sofern unterstützt – verschlüsselt über TLS/SSL (erkennbar an https:// und dem Schloss-Symbol im Browser).

18. Obligation to provide data

No personal data is required for purely informational use of the website. However, we require the contact details provided in order to process inquiries; without these, it may not be possible to process them.

19. No automated decision-making

Es findet keine automatisierte Entscheidungsfindung einschließlich Profiling im Sinne von Art. 22 DSGVO statt.