We take data protection seriously
The protection of your personal data is of great importance to us. When you visit our website, data (IP address, pages viewed, date and duration of the visit) is collected on the server side; this data is not analysed on a personalised basis.
Your data will be treated confidentially. It will only be passed on to third parties as described below, where required by law, or where you have given your consent.
Controller
Ponnath DIE MEISTERMETZGER GmbH
Bayreuther Straße 40
95478 Kemnath
Telefon: +49 (0) 9642-300
E-Mail: connect@ponnath.de
Personal data
Personal data is information relating to you as an individual. This includes your name, address and email address. You do not need to provide any personal data in order to visit our website. In some cases, we require your name and address, as well as further information, in order to provide you with the service you have requested.
The same applies if, at your request, we send you information material or if we respond to your enquiries. We will always inform you of this in such cases. Furthermore, we only store the data that you have provided to us automatically or voluntarily.
When you use one of our services, we generally collect only the data necessary to provide you with that service. We may ask you for further information, but this is provided on a voluntary basis. Whenever we process personal data, we do so to provide you with our services, as well as for the purposes set out in this statement, on the respective legal basis specified.
Making contact
When you contact us (e.g. by email, telephone or via social media), the details provided by the enquirer are processed to the extent necessary to respond to the enquiry and to carry out any requested actions.
Responding to enquiries in the context of contractual or pre-contractual relationships is carried out to fulfil our contractual obligations or to respond to (pre-)contractual enquiries, and otherwise on the basis of our legitimate interests in responding to such enquiries.
Types of data processed: Personal details (e.g. names, addresses), contact details (e.g. email, telephone numbers), content data (e.g. entries in online forms). Data subjects: Communication partners. Purposes of processing: Contact enquiries and communication. Legal bases: Performance of a contract and pre-contractual enquiries (Art. 6(1)(b) GDPR), legitimate interests (Art. 6(1)(f) GDPR).
We will store your details until your enquiry has been fully processed; they will then be deleted, provided there are no statutory retention periods that prevent this. The provision of the data is necessary for the processing of your enquiry; without it, we cannot process your request.
Automatically stored data – server log files
The website provider automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. This information includes: the date and time of the request, the name of the file requested, the page from which the file was requested, the access status, the web browser and operating system used, the full IP address of the requesting computer, and the amount of data transferred.
This data is not combined with other data sources. Processing is carried out in accordance with Article 6(1)(f) of the GDPR on the basis of our legitimate interest in improving the stability and functionality of our website.
For reasons of technical security, in particular to defend against attempted attacks on our web server, we store this data temporarily. After seven days at the latest, the data is anonymised by truncating the IP address or deleted, so that a link to the individual user can no longer be established. The data is also processed in anonymised form for statistical purposes; it is not compared with other data sets or disclosed to third parties, even in part.
Cookies
When you visit our website, we may store information on your computer in the form of cookies. Many cookies contain a so-called cookie ID, a unique identifier that enables websites and servers to be linked to a specific web browser.
By using session cookies, we are able to provide you with a user-friendly service. Without your consent, we only use technically necessary cookies on the legal basis of legitimate interest in accordance with Article 6(1)(f) of the GDPR.
We only use personal data cookies to improve our website or for marketing/advertising purposes with your consent. On your first visit, you can consent to tracking or analysis via the cookie banner that appears on the screen. These cookies will only be stored if you explicitly consent to them; the legal basis in this case is your consent in accordance with Article 6(1)(a) of the GDPR.
CCM19
Our website uses CCM19’s consent technology to obtain your consent to the storage of certain cookies on your device or to the use of certain technologies, and to document this in accordance with data protection regulations. This technology is provided by Papoo Software & Media GmbH, Auguststr. 4, 53229 Bonn (hereinafter ‘CCM19’).
When you visit our website, a connection is established with Cookiebot’s servers to obtain your consents. Cookiebot then stores a cookie in your browser so that it can associate the consents you have given – or any withdrawal thereof – with you.
Cookiebot is used to obtain the legally required consents for the use of cookies. The legal basis for this is our legitimate interest in legally compliant and verifiable consent management in accordance with Article 6(1)(f) of the GDPR.
We have entered into a data processing agreement with the aforementioned provider in accordance with Article 28 of the GDPR.
Google Tag Manager
Our website uses the Google Tag Manager tool provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter: ‘Google’). We use Google Tag Manager to manage the tools deployed on our website.
Google Tag Manager is only loaded once you have given your consent. The legal basis is your consent in accordance with Article 6(1)(a) of the GDPR in conjunction with Section 25(1) of the TDDDG. The use of Google Tag Manager enables us to integrate further services into our website. The tool triggers other tags, which may in turn collect data. Google Tag Manager processes and transmits your IP address to servers in the USA.
The data transmitted consists solely of pseudonyms. Google bases the transfer of data to the USA on the Transatlantic Data Privacy Framework of 10 July 2023 (TADPF) and, in the event of data transfer to other third countries, on EU Standard Contractual Clauses. We have entered into a data processing agreement with Google.
Google Analytics
We use Google Analytics on our website, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. In this context, pseudonymous user profiles are created and cookies are used.
The use of Google Analytics is based on your consent pursuant to Article 6(1), first sentence, point (a) of the GDPR in conjunction with Section 25(1) of the TDDDG for the purpose of analysing and optimising our online offering and ensuring the efficient operation of this website.
By default, Google Analytics does not collect or store IP addresses permanently; the full IP address is not stored.
User data collected via cookies is automatically deleted after 14 months. Information regarding the use of our website is transmitted to Google’s servers in the USA and processed there. Google relies on the Transatlantic Data Privacy Framework of 10 July 2023 (TADPF) for this purpose and, in the event of data transfers to other third countries, on EU Standard Contractual Clauses. We only transfer data to Google on the basis of your consent; you may withdraw this consent at any time with future effect.
Security
We have put in place technical and organisational security measures to protect your personal data against loss, destruction, tampering and unauthorised access. All our employees and service providers working on our behalf are bound by the applicable data protection laws. Our security measures are subject to a continuous improvement process.
Data subjects’ rights
You have the right at any time to access, rectify, erase or restrict the processing of your stored data, the right to object to the processing, as well as the right to data portability and the right to lodge a complaint in accordance with the provisions of data protection law.
Right of access:
You may request information from us as to whether and to what extent we process your data.
Right to rectification:
If we process your data in an incomplete or inaccurate manner, you may request that it be rectified or completed at any time.
Right to erasure:
You may request the erasure of your data if we are processing it unlawfully or if the processing disproportionately infringes upon your legitimate interests. Retention obligations remain unaffected.
Right to restriction of processing:
You may request that processing be restricted if you contest the accuracy of the data, the processing is unlawful, you require the data for the purposes of legal proceedings, or you have lodged an objection.
Right to data portability:
You may request that we provide you with the data you have supplied in a structured, commonly used and machine-readable format, provided that the processing is based on consent or a contract and is carried out by automated means.
Right to object:
If we process your data on the basis of a legitimate interest, you may object at any time. You may object at any time to processing for the purposes of direct marketing without giving reasons.
Right to withdraw consent:
You may withdraw any consent you have given at any time with effect for the future. The lawfulness of the processing carried out up to the point of withdrawal remains unaffected.
Right to lodge a complaint:
If you believe that we are breaching applicable data protection law when processing your data, you may contact us or the supervisory authority responsible for you (the relevant State Office for Data Protection Supervision).
Automated decision-making
No automated decision-making, including profiling within the meaning of Article 22 of the GDPR, takes place.
Data Protection Officer
Projekt 29 GmbH & Co. KG
Ostengasse 14
93047 Regensburg
Tel.: 0941 2986930
E-Mail: anfragen@projekt29.de
Changes to this Privacy Policy
We reserve the right to amend this Privacy Policy should this become necessary due to new technologies. Should any fundamental changes be made, we will announce them on our website.
Date of this privacy policy: August 2026