Courtesy translation. The German version of this page is legally binding.

Last updated: November 2026

1. Controller

The controller responsible for processing personal data on this website is:
ANKORATEC GmbH
Deipe Laake 34
33106 Paderborn
Germany
Represented by: Maria Bisch
Phone: +49 5254 9376426
Email: info@ankoratec.de

A data protection officer has not been appointed, as there is no legal obligation to do so.

2. Overview

This privacy policy applies to the website ankoratec.de. We process personal data only insofar as this is necessary to operate the website, to answer your enquiries or on the basis of your consent. We do not use advertising trackers or third-party web analytics on this website (for cookie-free audience measurement on our own server, see section 6a), and we do not sell data.

3. Hosting and server logs

This website is hosted by STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany. When you access the website, the server automatically processes information transmitted by your browser (server log files):

  • IP address
  • date and time of access
  • page or file requested
  • amount of data transferred and status code
  • browser type and version, operating system
  • referrer URL (previously visited page)

The purpose is to deliver the website, to ensure stability and security and to defend against attacks. The legal basis is our legitimate interest in secure and functional operation (Art. 6(1)(f) GDPR). We have a data processing agreement with STRATO (Art. 28 GDPR). The server log files are deleted automatically by STRATO in accordance with the retention periods that apply there.

4. SSL/TLS encryption

For security reasons, this website uses SSL/TLS encryption. You can recognise an encrypted connection by “https://” in the address bar of your browser.

5. Contact form and contact by email

If you contact us via the contact form or by email, we process the data you provide (name, email address, your message and, where applicable, company and telephone number) in order to answer your enquiry. The information from the contact form is sent to us by email and additionally stored in the database of this website.

The legal basis is Art. 6(1)(b) GDPR, insofar as your enquiry relates to a contract or pre-contractual measures; otherwise our legitimate interest in answering enquiries (Art. 6(1)(f) GDPR). We delete the data as soon as your enquiry has been finally processed and no statutory retention obligations (e.g. for business letters under commercial and tax law) apply.

For our email mailboxes we use Microsoft 365 provided by Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. We have a data processing agreement with Microsoft. A transfer to the USA to Microsoft Corporation cannot be ruled out; Microsoft is certified under the EU-US Data Privacy Framework (adequacy decision of the EU Commission).

5a. Requesting info brochures (ALUNATEC APEX)

On the “ALUNATEC APEX” page you can request info brochures for individual apps. We process: name, company, business e-mail address, optionally position, country and message, the selected apps and the language of the documents, your interest in a pilot test, your browser language setting, the page on which you made the request, the time of the request and the wording of your consent.

The purpose is sending the requested documents by e-mail, contacting you about the selected apps, and an aggregated evaluation of which apps are of interest. The legal basis is your consent (Art. 6(1)(a) GDPR). You can withdraw your consent at any time with effect for the future by e-mail to info@ankoratec.de.

Technical operation is carried out on our behalf by ALUNATEC Ingenieurbüro, Paderborn, using the following service providers:

  • Microsoft (Azure): server processing the request (automation), data centre West Europe (Netherlands).
  • Microsoft (Azure Communication Services): sending the e-mails from noreply@notify.alunatec.de, data location Germany.
  • Supabase (contracting entity Supabase Pte. Ltd., Singapore): storing the requests and providing the brochures via time-limited download links (14 days), project region North EU (Stockholm, Sweden).

The server and the database are located in the EU. Supabase’s contracting entity is Supabase Pte. Ltd. in Singapore; Supabase belongs to a group headquartered in the USA. Access from countries outside the EU therefore cannot be excluded. The basis for such transfers is, for Microsoft, the EU Standard Contractual Clauses under Microsoft’s data protection addendum and certification under the EU-U.S. Data Privacy Framework; for Supabase, the EU Standard Contractual Clauses (Module 2) under Supabase’s data processing addendum; there is no EU adequacy decision for Singapore.

Your details are deleted automatically after 24 months, or earlier if you withdraw your consent, unless statutory retention obligations apply.

6. Cookies and consent management (CookieYes)

We use technically necessary cookies that are required to operate the website (Section 25(2) TDDDG, Art. 6(1)(f) GDPR). We use all other cookies and external content only with your consent (Section 25(1) TDDDG, Art. 6(1)(a) GDPR).

To manage your consent we use the consent tool CookieYes of CookieYes Limited, 3 Warren Yard, Warren Park, Wolverton Mill, Milton Keynes, MK12 5NW, United Kingdom. In doing so, your consent decision, an anonymised part of your IP address, time and browser information are logged and stored in a cookie (“cookieyes-consent”, duration 1 year). The legal basis is our legal obligation to be able to prove consent (Art. 6(1)(c) in conjunction with Art. 7(1) GDPR). For the United Kingdom there is an adequacy decision of the EU Commission.

You can change or withdraw your consent at any time with effect for the future via the link or icon for the cookie settings on this website. Details on the individual cookies can be found in our cookie policy.

6a. Audience measurement (Independent Analytics)

To statistically evaluate the use of our website, we use the WordPress plugin “Independent Analytics”. The following are recorded: pages viewed, time, referring website (referrer), device type, browser, operating system, as well as country and city. The plugin does not use cookies and does not store IP addresses; these are processed only briefly in order to recognise repeat visits. The data is stored exclusively in the database of our website at our hosting provider and is not transmitted to third parties.

The legal basis is our legitimate interest in designing and improving our offering to meet demand (Art. 6(1)(f) GDPR).

7. Links to other websites (e.g. Google Maps, LinkedIn)

Our website contains simple links to other websites, for example for route planning with Google Maps or to our LinkedIn profile. These are pure links without embedded content or plugins. Data is only transmitted when you click such a link and visit the external website. The respective provider is responsible for the linked websites.

8. Recipients of data

Your data is received only by those persons at ANKORATEC GmbH who need it for the stated purposes, and by the service providers named above (STRATO, Microsoft and CookieYes; for brochure requests additionally ALUNATEC Ingenieurbüro and Supabase). Data is passed on to other third parties only if we are legally obliged to do so.

9. Your rights

You have the right to access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR) and data portability (Art. 20 GDPR). You can withdraw any consent you have given at any time with effect for the future (Art. 7(3) GDPR).

Right to object: Insofar as we process data on the basis of legitimate interests (Art. 6(1)(f) GDPR), you may object at any time on grounds relating to your particular situation (Art. 21 GDPR).

For all requests, it is enough to send an email to info@ankoratec.de.

10. Right to lodge a complaint

You can lodge a complaint with a data protection supervisory authority. The authority responsible for us is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (LDI NRW), Kavalleriestraße 2–4, 40213 Düsseldorf.

11. Obligation to provide data, no automated decision-making

You are not obliged to provide us with personal data. However, without your contact details we cannot answer your enquiry. Automated decision-making, including profiling (Art. 22 GDPR) does not take place.

12. Changes

We will adapt this privacy policy if the website or the legal situation changes. The version published here applies in each case.