Privacy Policy

Last updated: 15 July 2026


1. Controller and Data Protection Contact


The controller within the meaning of the General Data Protection Regulation (GDPR) and other applicable data protection laws is:


Pekutech GmbH

Dibberser Mühlenweg 85a

21244 Buchholz

Germany

Email: info@pekutech.de

Data protection enquiries may be sent to the email address stated above.


2. General Information on Data Processing


2.1 Categories of Data Processed


Depending on how you use our website, we process in particular the following categories of data:


contact data, for example your name, email address and telephone number,

content data, for example information contained in messages and contact forms,

contract and enquiry data, for example services requested or commissioned,

usage data, for example pages viewed, interactions, access times and time spent on the website,

device and log data, for example IP address, browser, operating system, referrer URL and device information,

consent and preference data, for example the choices made in the consent banner.


2.2 Legal Bases


We process personal data only where there is a legal basis for doing so. Depending on the processing activity, the following legal bases may apply in particular:


Article 6(1)(a) GDPR for processing based on your consent,

Article 6(1)(b) GDPR for pre-contractual measures and the performance of a contract,

Article 6(1)(c) GDPR for compliance with legal obligations,

Article 6(1)(f) GDPR for the purposes of our legitimate interests or those of third parties, provided that your interests, fundamental rights and freedoms do not override those interests.

Section 25 of the German Telecommunications Digital Services Data Protection Act (Telekommunikation-Digitale-Dienste-Datenschutz-Gesetz – TDDDG) also applies to the storage of information on your terminal device or access to information already stored on it. We use cookies, pixels, tags or comparable technologies that are not technically necessary only with your prior consent.


2.3 Recipients and Processors


We disclose personal data only where this is necessary for the respective purposes, where there is a legal obligation to do so, or where you have given your consent. Recipients may include hosting, IT, analytics, advertising and other technical service providers. Where service providers process data on our behalf, we conclude the legally required data processing agreements.


2.4 Retention Period


We retain personal data only for as long as necessary for the respective purpose. The data is then deleted or anonymised unless statutory retention obligations, evidentiary interests, or the establishment, exercise or defence of legal claims require longer retention. Specific retention periods or the criteria used to determine them are stated for the respective processing activities.


2.5 Security


We implement appropriate technical and organisational security measures. Data transmitted via our website is generally encrypted using TLS/SSL.


3. Provision of the Website and Server Log Files


When you access our website, the web server automatically processes data transmitted by your browser. This may include in particular:


IP address,

date and time of access,

page or file accessed,

amount of data transferred and access status,

referrer URL,

browser type and browser version,

operating system and internet service provider.

The processing is necessary to deliver the website, ensure its stability and security, analyse technical faults and prevent misuse. The legal basis is Article 6(1)(f) GDPR. Our legitimate interest lies in the secure, stable and functional operation of the website.


Server log files are normally deleted after no more than seven days. Longer retention may be necessary in individual cases where there are specific indications of a security incident or unlawful use.


4. Hosting by webgo


Our website is hosted by webgo GmbH, Wendenstraße 8–12, 20097 Hamburg, Germany. webgo processes the server, connection and log data required to operate the website on our behalf. The legal basis for our use of hosting services is Article 6(1)(f) GDPR. Our legitimate interest lies in the secure, efficient and cost-effective operation of our website.


We have concluded a data processing agreement with webgo pursuant to Article 28 GDPR. According to webgo, the website is hosted on servers located in Germany. Further information is available in webgo’s privacy policy.


5. Contacting Us


If you contact us by email, telephone or contact form, we process the data you provide in order to handle your enquiry and any follow-up questions.


If your enquiry relates to a contract or pre-contractual measures, the legal basis is Article 6(1)(b) GDPR. Other enquiries are processed on the basis of Article 6(1)(f) GDPR. Our legitimate interest lies in the proper handling and documentation of your enquiry. Where you have expressly given your consent, the legal basis is Article 6(1)(a) GDPR.


We delete enquiries once they have been conclusively dealt with and no statutory retention obligations or legitimate evidentiary interests require continued storage. Business correspondence may in particular be subject to retention obligations under commercial and tax law.


6. Cookies, Consent Management and Similar Technologies


Our website uses cookies and comparable technologies, such as local storage, pixels and tags. Cookies are small text files stored on your terminal device. Comparable technologies may store information on or read information from your terminal device.


6.1 Technically Necessary Technologies


We use technically necessary technologies where they are strictly required to provide website functions expressly requested by you, ensure security or store your privacy settings. Access to your terminal device is governed by Section 25(2) TDDDG. Where personal data is processed in this context, the legal basis is Article 6(1)(f) GDPR. Our legitimate interest lies in the secure and functional operation of the website.


6.2 Analytics and Marketing Technologies


We use analytics and marketing technologies only with your prior, freely given consent. The legal bases are Section 25(1) TDDDG for storing or accessing information on your terminal device and Article 6(1)(a) GDPR for the subsequent processing of personal data.


You may withdraw or change your consent at any time with effect for the future via the “Cookie Settings” available on the website. The lawfulness of processing carried out before consent was withdrawn remains unaffected. Refusing technologies that are not necessary must not impair the basic use of our website.


The specific cookies, providers, purposes and durations used are also displayed in the consent banner or Cookie Settings.


7. Google Tag Manager


We use Google Tag Manager, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Google Tag Manager is a management system that enables us to integrate and control website tags centrally. In particular, these tags may activate the Google Analytics and Google Ads services described below.


We configure Tag Manager so that analytics and marketing tags that are not technically necessary are executed only after you have consented to the relevant category. We do not use Tag Manager itself to create separate user profiles. However, when Tag Manager is retrieved, technical connection data, in particular your IP address, browser and device information, the time of access and the page accessed, may be transmitted to Google.


The legal bases are Section 25(1) TDDDG and Article 6(1)(a) GDPR. You may withdraw your consent at any time via the Cookie Settings. The retention period depends on the services activated through Tag Manager and is described in the relevant sections.


Further information is available under Privacy and security in Google Tag Manager and in Google’s Privacy Policy.


8. Google Analytics 4


We use Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics helps us understand how visitors use our website, which content they access, and how we can improve the usability and effectiveness of our services.


8.1 Data Processed


Google Analytics may process in particular the following information:


pages viewed and screen views,

the time, duration and approximate sequence of visits,

interactions and events, for example clicks, scroll depth or form events,

referrer URL and campaign information,

browser, operating system, device type and screen resolution,

approximate geographic region,

online identifiers and cookie IDs.

We do not transmit to Google Analytics any information that Google can directly recognise as personal contact data, such as names, email addresses or telephone numbers. According to Google, the IP addresses of users in the European Union are neither logged nor stored. The IP address is used to derive an approximate geographic region and is then discarded.


8.2 Purpose, Legal Basis and Withdrawal of Consent


The processing is carried out to measure reach, statistically analyse website use, and optimise content, technology and marketing. The legal bases are Section 25(1) TDDDG and Article 6(1)(a) GDPR. Google Analytics is activated only after you have consented to the “Statistics” category or a comparable category. You may withdraw your consent at any time via the Cookie Settings.


8.3 Processing on Our Behalf, Settings and Retention Period


Google’s data processing terms for measurement services apply to the processing. Google generally processes Analytics data as a processor acting on our instructions. Where we activate optional data-sharing settings, Google and we may each act as independent controllers for the processing described in those settings.


We limit the retention period for user-related event data in Google Analytics to 14 months. Aggregated reports may remain available for longer, provided that they no longer relate directly to an identifiable person. Event data may be deleted earlier where you withdraw your consent and attribution or deletion is technically possible.


8.4 Advertising Features and Google Signals


Where we link Google Analytics to Google Ads, use Google Signals or use comparable advertising features, we do so only after you have consented to the “Marketing” category. Analytics data may then be used to measure advertising campaigns, create audiences and deliver personalised advertising. You may withdraw this consent at any time via the Cookie Settings.


Further information is available under Data privacy and security in Google Analytics, Data processing for users in the EU and in Google’s Privacy Policy.


9. Google Ads: Conversion Tracking and Personalised Advertising


We use Google Ads, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Ads enables us to display advertisements in Google services and on websites of advertising partners, measure the success of our campaigns and—subject to your consent—create audiences for interest-based or personalised advertising.


9.1 Conversion Tracking


If you reach our website through a Google advertisement and have consented to marketing tracking, Google may store a conversion cookie or comparable identifier. This enables us to determine whether an advertisement led to a specific action on our website, for example a contact enquiry. As a rule, we receive statistical analyses and no information that directly identifies individual users.


The following data may be processed in particular:


cookie and online identifiers,

Google click IDs and campaign parameters,

pages viewed and conversion events triggered,

time of access, browser, device and operating system information,

IP address and approximate geographic region.


9.2 Remarketing and Personalised Advertising


After you have given your consent, we may assign visitors to our website to audiences in order to display interest-based advertisements to them in Google services or the Google advertising network. Google may combine information from our website with information from other Google services and partner offerings, particularly where you are signed in to a Google account and have allowed personalised advertising there.


9.3 Legal Basis, Withdrawal of Consent and Retention Period


The legal bases are Section 25(1) TDDDG and Article 6(1)(a) GDPR. Google Ads is activated only after you have consented to the “Marketing” category or a comparable category. You may withdraw your consent at any time via the Cookie Settings.


The durations of the cookies and identifiers used vary depending on the function and are displayed in the Cookie Settings. Conversion and campaign data is deleted or anonymised as soon as it is no longer required to measure and document the campaign and no statutory or contractual retention grounds require continued storage.


Further information is available in the Google Ads data processing terms, the information on conversion tracking and Google’s Privacy Policy. You can also manage personalised advertising settings in your Google account.


10. Google Consent Mode


We use Google’s consent functions (“Consent Mode”) to communicate to Google tags whether you have consented to storage and processing for analytics or advertising purposes. In particular, the consent statuses for analytics storage, advertising storage, transmission of advertising-related user data and personalised advertising are taken into account.


Our configuration is intended to ensure that Google Analytics and Google Ads are not executed for analytics or marketing purposes before the relevant consent has been given. The consent management functions themselves do not replace the consent banner displayed on the website. Your selection made there remains decisive.


11. Transfers of Data to Google in Third Countries


When Google services are used, it cannot be ruled out that personal data may be processed by Google LLC or other Google companies in the United States or other countries outside the European Economic Area.


Google LLC is certified under the EU-U.S. Data Privacy Framework. An adequacy decision of the European Commission applies to transfers to appropriately certified US companies. In addition, the standard contractual clauses approved by the European Commission and other safeguards may be used.


Further information is available in Google LLC’s Data Privacy Framework listing and from the European Commission on EU-U.S. data transfers.


12. Automated Decision-Making and Profiling


We do not make decisions based solely on automated processing of data collected through this website that produce legal effects concerning you or similarly significantly affect you. Within Google Analytics and Google Ads, usage and interest profiles may be created for analytics or advertising purposes where you have given your consent.


13. Your Rights


Subject to the statutory requirements, you have the following rights against us in particular:


access to the personal data concerning you that we process pursuant to Article 15 GDPR,

rectification of inaccurate data or completion of incomplete data pursuant to Article 16 GDPR,

erasure of your data pursuant to Article 17 GDPR,

restriction of processing pursuant to Article 18 GDPR,

data portability pursuant to Article 20 GDPR,

objection to processing based on Article 6(1)(e) or (f) GDPR pursuant to Article 21 GDPR,

withdrawal of consent with effect for the future pursuant to Article 7(3) GDPR,

lodging a complaint with a data protection supervisory authority pursuant to Article 77 GDPR.


13.1 Specific Notice Concerning the Right to Object


You have the right, on grounds relating to your particular situation, to object at any time to the processing of personal data where the processing is based on Article 6(1)(e) or (f) GDPR. Where personal data is processed for direct marketing purposes, you may object to the processing at any time without stating reasons; this also applies to profiling insofar as it is related to such direct marketing.


13.2 Right to Lodge a Complaint


You may lodge a complaint with any competent data protection supervisory authority. The authority generally competent for our registered office is:


Der Landesbeauftragte für den Datenschutz Niedersachsen

(State Commissioner for Data Protection of Lower Saxony)

Prinzenstraße 5

30159 Hannover

Germany

Telephone: +49 511 120-4500

Email: poststelle@lfd.niedersachsen.de

Online complaint form


14. Updates to This Privacy Policy


We update this Privacy Policy where our data processing activities, the services used or the applicable legal framework change. The current version published on this website applies.