Privacy policy

Last updated: 29 October 2026

1. Controller

The controller responsible for data processing on cetrac.com is:
cetrac GmbH
Diezmannstraße 13
04207 Leipzig
Germany
Phone +49 341 3084890-0 · E-mail info@cetrac.de

2. Hosting

The website runs on a dedicated server of cetrac GmbH, rented from Hetzner Online GmbH, Industriestraße 25, 91710 Gunzenhausen, Germany. The data centre is located in the European Union. Hetzner processes data only to the extent necessary to operate the server. The legal basis is our legitimate interest in a secure and reliable operation of the website (Art. 6(1)(f) GDPR).

3. Server log files

With every request, the web server automatically stores: IP address, date and time, requested address, status code, amount of data transferred, the previously visited page (referrer) as well as browser and operating system. We use this data only to keep the service running, to find errors and to fend off attacks (Art. 6(1)(f) GDPR). The log files are overwritten regularly and are not combined with other data.

4. Cookies and similar technologies

We set technically necessary cookies without consent (§ 25(2) no. 2 TDDDG, Art. 6(1)(f) GDPR). All others only with your consent (§ 25(1) TDDDG, Art. 6(1)(a) GDPR).

5. Our own visitor statistics

We analyse visits with our own statistics on our server, without third parties. We record the pages viewed with their title, the time, the previously visited page, campaign information from the address (utm parameters), language and device type (mobile or desktop).

• Without consent we do not set a cookie for this. Page views on the same day are grouped using a key that changes daily and cannot be reversed, formed from the IP address and the browser identifier.
• With consent "Statistics" we set the cookie cv to link your visits across several days.
• The full IP address is stored for a few minutes only: during this time we look up the associated host name (reverse DNS) to recognise the company name for company networks. The IP address is then shortened (last block removed) and the full address deleted.
• If you send us an enquiry, we link the current visit to this enquiry. This shows us which offers you looked at, so we can answer more precisely.
• We delete visit data after 180 days. If a visit is linked to an enquiry, the storage period of the enquiry applies (no. 8).

Without a cookie, the legal basis is our legitimate interest in improving our services and in being able to classify enquiries from companies (Art. 6(1)(f) GDPR); with a cookie, your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG). You can object to the processing without a cookie at any time (no. 11).

6. Regional contact person

So that visitors from Bavaria, Baden-Württemberg, Austria, Switzerland and Liechtenstein see the contact person of our southern location directly, we roughly determine the region from the IP address. This is done with a database on our own server (DB-IP City Lite), without any request to third parties, and the result is not stored (Art. 6(1)(f) GDPR).

7. Google Tag Manager, Google Analytics, Google Ads and Meta Pixel

Only if you choose "Allow all" in the cookie notice do we load Google Tag Manager. It can load Google Analytics (audience measurement), Google Ads (measuring which ad led to an enquiry) and the Meta Pixel (measuring ads on Facebook and Instagram). Your IP address, device and browser information, the pages viewed, the event "enquiry sent" (without the content of the enquiry) and, where applicable, whether you came to us via an AI assistant such as ChatGPT or Perplexity are transmitted to the providers, and cookies are set.

The providers are Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, and Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland. A transfer to the USA is possible. Google LLC and Meta Platforms, Inc. are certified under the EU-US Data Privacy Framework (adequacy decision of the European Commission, Art. 45 GDPR).

The legal basis is your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG). Without "Allow all", none of this is loaded. For the collection and transmission of data by the Meta Pixel, we and Meta are joint controllers (Art. 26 GDPR); the agreement is available at facebook.com/legal/controller_addendum. Meta alone is responsible for any further processing: facebook.com/privacy/policy.

8. Enquiries via form, enquiry basket and scaffold calculator

When you send us an enquiry, we process the details from the form (name, e-mail address and, optionally, company, phone number, postcode and place of delivery, delivery or collection, request for a viewing or call-back, VAT ID, message) and the items requested. The enquiry is stored in our database, assigned to your customer record in our customer management (created with a first enquiry) and sent by e-mail to the responsible sales team; you receive a confirmation by e-mail. To send e-mails, we use the service Brevo of Sendinblue GmbH, Köpenicker Straße 126, 10179 Berlin, Germany. Incoming enquiries are checked automatically for spam.

The legal basis is the initiation or performance of a contract (Art. 6(1)(b) GDPR), your consent in the form (Art. 6(1)(a) GDPR) and our legitimate interest in handling enquiries (Art. 6(1)(f) GDPR). We store enquiries as long as necessary to handle them. If the enquiry leads to a business transaction, the statutory retention periods under commercial and tax law apply (up to ten years).

9. Contact by e-mail or phone

If you contact us by e-mail or phone, we process your details to handle your request (Art. 6(1)(b) and (f) GDPR). No. 8 applies accordingly to the storage period.

10. Encryption

The website is transmitted exclusively in encrypted form (HTTPS with TLS). You can recognise this by the lock symbol and "https://" in the address bar.

11. Your rights

You have the right to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). You can withdraw consent at any time with effect for the future (Art. 7(3)), for example with the button below. Where we process data on the basis of a legitimate interest, you can object at any time for reasons arising from your particular situation (Art. 21 GDPR). An e-mail to info@cetrac.de is sufficient.

You can also lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), in particular in the country where you live or work. No automated decision-making or profiling with legal effect takes place.

12. Change your choice in the cookie notice