Privacy Policy

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) and other data protection provisions is Unisolution GmbH, Lise-Meitner-Str. 1, 85662 Hohenbrunn, Germany, represented by its managing director Mike Sigrist.

Phone: +49 8102 984 93 10. Email: info@unisolution-gmbh.de.

2. Data protection officer

We have appointed a data protection officer for our company. You can reach them at:

Mr Dieter Heide, Unisolution GmbH, Lise-Meitner-Str. 1, 85662 Hohenbrunn. Phone: +49 8102 984 93 13. Email: dieter.heide@unisolution-gmbh.de.

For any questions about the processing of your personal data or about exercising your rights, you may contact our data protection officer directly at any time.

3. Principles and scope

Protecting your personal data is a central concern for us. We process your data solely on the basis of the applicable statutory provisions (GDPR, BDSG, TDDDG). This policy informs you about the nature, scope, purpose and legal bases of the processing of personal data in connection with accessing and using this website.

This website is deliberately data-minimal: it runs without tracking, without cookies for marketing or analytics purposes, and without embedding external services (content delivery networks, third-party web fonts, analytics or social media services). Fonts, scripts, images and all other content are served exclusively from our own server. No profiling or cross-site tracking of your behaviour takes place.

This website does not use cookies. Consent under Section 25 TDDDG is therefore not required.

4. Server logs and hosting

When you access this website, your browser automatically sends information to our server, which is processed temporarily in a log file. This includes: the requested resource, the date and time of access, the transmitted status code and volume of data, the referring URL, the browser type and version, the operating system and the IP address of the requesting device.

This data is technically required to deliver the website and to ensure its stability and security. IP addresses are evaluated only in truncated or pseudonymized form for abuse prevention (in particular rate limiting), are not combined with other data and are not stored permanently. Legal basis is Art. 6 (1) (f) GDPR; our legitimate interest lies in the secure and stable operation of the website.

The website is hosted by STRATO GmbH, Otto-Ostrowski-Straße 3, 10249 Berlin, Germany. STRATO GmbH processes the aforementioned data on our behalf as a processor under a contract pursuant to Art. 28 GDPR. The servers are located in Germany; no transfer to third countries takes place in the context of hosting.

5. Parts search

The parts search offered on this website processes only your search query (e.g. a manufacturer or part number) in order to display matching stock information. Your search queries are not stored in a personally identifiable form and are not retained permanently.

To prevent abuse, your IP address is evaluated only briefly and in pseudonymized form (see section 4). Legal basis is Art. 6 (1) (f) GDPR (secure and functional operation of the search).

6. Contacting us via forms

This website offers forms for contacting us and for parts inquiries. When you submit a form, we process the data you provide: name, email address and your message, as well as - where you provide them - company, phone number, part number and quantity. We use this data solely to handle your request and for any follow-up questions.

Your details are transmitted to us by email to info@unisolution-gmbh.de. Your details are not stored in a database on the web server.

The legal basis is Art. 6 (1) (b) GDPR (pre-contractual measures) for inquiries aimed at concluding a contract, and otherwise Art. 6 (1) (f) GDPR (legitimate interest in responding to inquiries).

To protect against automated abuse (spam) we use a form field invisible to you (a honeypot), a timing check and a security token. No additional personal data is collected in the process.

7. Contacting us by email or phone

If you contact us directly by email or phone, we process the data transmitted (for email in particular your email address and the content of your message; for calls the information you provide) solely to handle your request. The legal basis is Art. 6 (1) (b) GDPR where your inquiry is aimed at concluding or performing a contract, and otherwise Art. 6 (1) (f) GDPR.

8. Email processing (Microsoft 365)

For receiving and processing emails - including the inquiries transmitted to us via the forms - we use Microsoft 365. The provider is Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland, which processes the data as a processor under a contract pursuant to Art. 28 GDPR.

In the course of using Microsoft 365, personal data may be transferred to Microsoft Corporation in the USA. Microsoft is certified under the EU-U.S. Data Privacy Framework; in addition, Microsoft has agreed to the European Commission's Standard Contractual Clauses, so that an adequate level of data protection is ensured. The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in secure and efficient email communication).

9. Recipients of the data and processors

Your personal data is disclosed only in the cases described in this policy and only to the extent necessary. As processors under Art. 28 GDPR we use: STRATO GmbH (hosting) and Microsoft Ireland Operations Limited (email).

Beyond this, we disclose data only where we are legally obliged to do so (for example to authorities) or where you have expressly consented. We do not transfer your data for commercial purposes and do not sell data.

10. Retention

We store personal data only for as long as is necessary for the respective purposes. We keep inquiry data for as long as needed to handle your request and for any follow-up questions.

Where an inquiry leads to a business relationship or its initiation, we retain the data within the statutory retention periods - in particular under commercial and tax law (generally six or ten years pursuant to Sections 257 HGB, 147 AO). Server logs are processed only briefly and then deleted.

11. Your rights as a data subject

Under the GDPR you have the following rights: access to the data processed about you (Art. 15), rectification of inaccurate data (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and the right to withdraw a given consent at any time with effect for the future (Art. 7 (3)).

To exercise your rights, an informal message to the contact details in section 1 or to our data protection officer (section 2) is sufficient.

12. Right to object

You have the right, on grounds relating to your particular situation, to object at any time to the processing of personal data concerning you which is based on Art. 6 (1) (f) GDPR (Art. 21 GDPR).

If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to establish, exercise or defend legal claims. Please address your objection to the contact details in section 1 or section 2.

13. Right to lodge a complaint with a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a data protection supervisory authority if you consider that the processing of your data infringes the GDPR (Art. 77 GDPR).

The supervisory authority competent for us is the Bavarian State Office for Data Protection Supervision (Bayerisches Landesamt für Datenschutzaufsicht, BayLDA), Promenade 18, 91522 Ansbach, Germany. You may also contact the supervisory authority of your habitual residence.

14. Automated decision-making and obligation to provide data

No automated decision-making, including profiling, within the meaning of Art. 22 GDPR takes place.

Providing your personal data is neither legally nor contractually required. However, without the details marked as mandatory in a form, we may not be able to process your request, or not fully.

15. Data security

All data transmitted between your browser and our server is encrypted in line with the state of the art (TLS). Our server enforces strict security policies, in particular a strict Content-Security-Policy; no content is loaded from third-party servers.

We also take appropriate technical and organizational measures to protect your data against loss, misuse and unauthorized access. Our security measures are continuously adapted in line with technological developments.

16. Currency and changes to this privacy policy

This privacy policy is currently valid and bears the date stated above. As the website develops or due to changed legal or regulatory requirements, it may become necessary to amend it. The version published here at any given time applies.