Privacy Policy

This English version is provided for convenience. In case of discrepancies, the German version (Datenschutzerklärung) is legally binding.

Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) for the processing described in this policy is:

CAD-IS Industrie Service GmbH
Registered office: Bürgerstraße 17
60437 Frankfurt am Main, Germany
(Register court Frankfurt am Main · HRB 46879)
Operating site: Dieselstraße 22 · 61184 Karben, Germany
Represented by: Managing Director Dipl.-Ing. Recai Kahveci
Phone: +49 6039 4861170
Email: recai.kahveci@cad-is.com

Principles

Protecting your personal data is important to us. This policy explains which data we process when you visit this website and when you contact us, for which purposes and on which legal basis.

Hosting & server log files

This website is hosted by:

STRATO GmbH
Otto-Ostrowski-Straße 7
10249 Berlin, Germany
www.strato.de

A data processing agreement pursuant to Art. 28 GDPR is in place with STRATO. STRATO processes the data exclusively within the European Union.

When you access our website, STRATO automatically processes server log files. These may contain in particular the following information:

IP address of the requesting device
Date and time of access
Page or file accessed
Amount of data transferred
Browser type and version
Operating system
Referrer URL (previously visited page)

Processing serves the technical provision, stability and security of the website. The legal basis is Art. 6 (1) (f) GDPR (legitimate interest). Visitor-related log files are deleted by STRATO after a maximum of 7 days. Other log data is deleted after a maximum of 12 months.

Cookies and local storage

We only store information on your device or read it from your device if this is strictly necessary for technical reasons or if you have given your consent (Section 25 of the German TDDDG).

Consent banner: On your first visit, a banner asks whether you agree to the use of Google Analytics ("Accept") or not ("Essential only"). Without your consent, the Google Analytics script is not loaded, no cookies are set and no usage data is transferred to Google.

Storing your choice: Your decision is stored in your browser's local storage (localStorage, entry "cad_consent_v2") so that the banner does not reappear on every page view. This storage is strictly necessary (Section 25 (2) no. 2 TDDDG). The entry stays in your browser, is not transmitted to us and remains until you delete it via "Cookie settings" or your browser settings. If we change the scope of the consent, we will ask again.

Withdrawal and changes: Using the "Cookie settings" link at the bottom of every page, you can withdraw your consent at any time with effect for the future or decide again. This deletes your stored choice and this website's Google Analytics cookies, and the banner appears again. Withdrawal does not affect the lawfulness of processing carried out before it.

Internal visits: The entry "cad_intern" is only set if the website is opened with the addition "?intern=1". This is intended only for our employees so that their visits are filtered out of the statistics as internal traffic.

Google Analytics 4 (only with your consent)

Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google may transfer data to its parent company Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Purpose: Statistical analysis of how our website is used, e.g. which pages are viewed, how visitors find us and which pages lead to inquiries. We use this to improve the content and structure of the website.

Data processed:

pages viewed, time and duration of the visit, browser language
origin of the visit, e.g. search engine, referring website or click on a Google ad
approximate location (country, region, city), derived from the IP address
device information: device category, brand and model, operating system, browser, screen resolution
interactions: scrolling to the end of a page, clicks on links to other websites, file downloads (e.g. PDF certificates), clicks on our email address or phone number. Google Analytics does not record the content of your emails or calls.
a randomly generated identifier (client ID) in the _ga cookie, used to recognise repeat visits from the same browser

According to Google, Google Analytics does not store IP addresses of users from the EU, Switzerland and the United Kingdom: the IP address is used only on servers in these regions to derive the approximate location and is then discarded. When the Google Analytics script is loaded from www.googletagmanager.com, your IP address is necessarily transmitted to Google; according to Google, these request logs are deleted within 14 days.

The analytics data is pseudonymous. We do not try to attribute it to specific persons and do not combine it with other data, such as our business contacts. We do not use Google signals or the User-ID feature. We do not link Google Analytics to Google Ads and do not share analytics data for advertising purposes.

Legal basis: Your consent under Section 25 (1) TDDDG (storing and reading cookies) and Art. 6 (1) (a) GDPR (further processing). Consent is voluntary and can be withdrawn at any time (see "Cookies and local storage").

Data processing agreement: Google processes the data on our behalf on the basis of the Google Ads Data Processing Terms pursuant to Art. 28 GDPR, which we have accepted.

Transfer to the USA: Google LLC is certified under the EU-US Data Privacy Framework. Transfers to Google LLC are therefore covered by the European Commission's adequacy decision (Art. 45 GDPR). In addition, Google has agreed to the European Commission's Standard Contractual Clauses (Art. 46 (2) (c) GDPR).

Retention period: Google deletes data on individual visits (event data) after 2 months and user-level data after 14 months without a new visit. The cookies _ga and _ga_8N9QNG7K5L last up to 2 years unless you delete them earlier or withdraw your consent. Aggregated statistics without personal reference may be kept longer.

Opt-out: Select "Essential only" in the banner or withdraw your consent via "Cookie settings". You can also install Google's browser add-on at tools.google.com/dlpage/gaoptout. Further information: policies.google.com/privacy.

Ads on Google (Google Ads)

We may run ads on Google, e.g. in Google Search or Google Maps. No Google Ads tag is embedded on this website: there is no conversion tracking via Google Ads and no remarketing, and no advertising cookies are set. If you reach us via an ad, the address you open contains a Google click identifier ("gclid"). If you have consented to Google Analytics, your visit is counted there as a visit via an ad (see above).

Google processes the display of the ad and your click on it under its own responsibility. More information: policies.google.com/privacy; ad settings: myadcenter.google.com.

Forms

This website does not contain any contact forms. Inquiries reach us by email or phone (see "Contact by email or phone"). The email button opens your own email program with a template. We only receive data once you send the email.

Fonts

This website uses only fonts available on your system (system fonts). No fonts are loaded from external servers.

External links

Our website contains a link to our company profile on LinkedIn. When you click this link, you leave our website and are redirected to the LinkedIn platform. The provider is LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland. Merely visiting our website does not transfer any personal data to LinkedIn via this link. Only when you click the link and access LinkedIn can LinkedIn process personal data. We have no influence on the nature and scope of data processing by LinkedIn. Further information on the processing of personal data by LinkedIn can be found in LinkedIn's privacy policy (linkedin.com/legal/privacy-policy).

Our website also contains a link to a video on YouTube. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Merely visiting our website does not transfer any personal data to YouTube. Only when you click the link and access YouTube can YouTube process personal data. We have no influence on the nature and scope of data processing by YouTube. Further information can be found in YouTube's privacy policy (policies.google.com/privacy).

No external map services are embedded in this website. Merely visiting our website does not transfer any data to map services. Where the website or its structured data refers to map services, data is transferred to the respective provider only when you open the corresponding external link.

Contact by email or phone

If you contact us by email or phone, we process the data you provide – in particular your name, contact details, the content of your message and any drawings, CAD data or project information you send – in order to handle your inquiry.

The legal basis is Art. 6 (1) (b) GDPR insofar as you yourself are or wish to become our contractual partner. If you write to us as an employee of a company, the legal basis is Art. 6 (1) (f) GDPR; our legitimate interest is handling your inquiry and initiating and performing contracts with your company.

The data is deleted as soon as your inquiry has been fully processed and no statutory retention obligations apply. Business and tax-relevant communication may be retained for up to 10 years in accordance with German commercial and tax law (Section 257 HGB, Section 147 AO).

We use service providers that process data on our behalf under Art. 28 GDPR, in particular STRATO GmbH for our mailboxes (see "Hosting"). Otherwise, we only disclose data insofar as this is necessary to handle your inquiry or to fulfil an order (e.g. to a manufacturing partner), you have consented or we are legally obliged to do so.

No obligation to provide data, no automated decisions

You are not legally or contractually obliged to provide us with personal data. However, the website cannot be delivered without the server log files, and we cannot answer an inquiry without your contact details. No automated decision-making, including profiling within the meaning of Art. 22 GDPR, takes place.

Your rights

You have the following rights with regard to your personal data:

Right of access (Art. 15 GDPR)
Right to rectification (Art. 16 GDPR)
Right to erasure (Art. 17 GDPR)
Right to restriction of processing (Art. 18 GDPR)
Right to data portability (Art. 20 GDPR)
Right to object to processing (Art. 21 GDPR)
Right to withdraw consent with effect for the future (Art. 7 (3) GDPR)

If the processing of your personal data is based on consent, you have the right to withdraw this consent at any time with effect for the future. The lawfulness of processing carried out on the basis of consent up to the withdrawal remains unaffected.

If you have questions about data protection or wish to exercise your rights as a data subject, you can contact us at any time at: recai.kahveci@cad-is.com

Right to object under Art. 21 GDPR

Where we process your data on the basis of legitimate interests (Art. 6 (1) (f) GDPR), you have the right to object to this processing at any time on grounds relating to your particular situation. We will then no longer process the data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

Where we process your data for direct marketing, you may object at any time without giving reasons. We will then no longer use your data for this purpose.

You can object informally, most easily by email to recai.kahveci@cad-is.com.

Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), in particular in the country of your habitual residence, place of work or place of the alleged infringement. The supervisory authority competent for us is:

The Hessian Commissioner for Data Protection and Freedom of Information (Der Hessische Beauftragte für Datenschutz und Informationsfreiheit)
Wilhelmstraße 7 · 65185 Wiesbaden, Germany
datenschutz.hessen.de

Changes to this privacy policy

We update this privacy policy when our website, our processing or the legal situation changes. The version published here applies.

Last updated: 29 October 2026