Privacy policy

Last updated: 21 October 2026

This privacy policy explains which personal data we process when you visit this website or contact us, for what purpose we do so and what rights you have.

This privacy policy applies to the website www.smesk.eu in all language versions. The addresses smesk.de and www.smesk.de redirect to this website.

Our products and services are aimed at companies, public institutions and self-employed professionals. In this context, too, we process personal data, for example the contact details of the people who make enquiries on behalf of an organisation. The General Data Protection Regulation (GDPR) of the European Union applies in full to this data.

1. Controller

The controller responsible for data processing on this website is:

C. Rudolf Salfer GmbH
Bahnhofstraße 17
84453 Mühldorf a. Inn
Germany

Telephone: +49 8631 3677 0
Email: info@smesk.de

Represented by its Managing Director, Florian Salfer. SMESK is a brand of C. Rudolf Salfer GmbH. Further details can be found in our legal notice.

2. Data protection officer

You can contact our data protection officer at:

GUARDIUM® Datenschutz
Data protection officer
Robert-Koch-Straße 7
84489 Burghausen
Germany
Telephone: +49 8677 66 86 243
Email: datenschutz@guardium.de

3. Key points at a glance

  • This website is hosted on a server in Germany. When you access it, technically necessary data such as your IP address is processed.
  • We do not use advertising cookies or any analytics services from Google or Meta.
  • A service that identifies visits from companies (SalesViewer) is only activated with your consent. You make your choice when you first visit the website and can change it at any time.
  • If you contact us via the form, by email or by telephone, we use the information you provide to answer your enquiry and to prepare a quotation.
  • You have the right of access, the rights to rectification, erasure, restriction of processing and data portability, the right to object and the right to lodge a complaint with a supervisory authority.

4. Provision of the website and server log files

Hosting

This website consists of static pages without a database of its own. We operate it on a server of Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany, in a data centre in Nürnberg. Page files, images, fonts, videos and program files are loaded from this server. We do not embed content from third-party servers. The only exception is SalesViewer, and only with your consent (see ‘Identification of company visits’).

Each time a page is accessed, the server automatically processes information transmitted by your browser:

  • IP address
  • Date and time of access
  • Page or file accessed
  • Website from which you came to us (referrer)
  • Browser type and version, operating system
  • Amount of data transferred and status code

This data is necessary to display the website to you, to operate it reliably and to protect it against attacks. We do not combine the server log files with other data. The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in providing our website securely and reliably.

Our web server stores this information in access logs. It shortens the IP address before storing it (by the last byte for IPv4 addresses and to the first 48 bits for IPv6 addresses), so that it can no longer be attributed to an individual internet connection. The access logs are rotated daily and deleted after seven days. Error messages from the web server are written to a log of limited size that is continuously overwritten. Hetzner provides the server and processes the data on our behalf (Art. 28 GDPR).

We do not set any cookies for the provision of the website.

Fonts

The fonts used on this website are stored on our own server. No connection is made to Google Fonts or other font services.

Videos

All videos are delivered from our own server. We do not embed video platforms such as YouTube or Vimeo.

5. Consent management

The only service on this website that requires your consent is SalesViewer (see ‘Identification of company visits’). On your first visit, we therefore ask you in a notice whether you agree. Accepting and rejecting are equally easy. The notice is part of this website and is loaded from our own server. We do not use a third-party service for it.

We store your decision only in your browser, in local storage under the entry smk_einwilligung (your choice, the version of the notice and the time). Nothing is transmitted to us or to third parties. We ask you again after six months or if we change the notice. The legal basis for storing your choice is Section 25(2) no. 2 of the German Telecommunications and Digital Services Data Protection Act (TDDDG), as this is necessary to respect your decision.

Changing or withdrawing your selection: Open the cookie settings. You can also reach them at any time via the link of the same name at the bottom of every page. A withdrawal takes effect for the future.

6. Identification of company visits (SalesViewer)

With your consent, we use SalesViewer, a service of SalesViewer® GmbH, Universitätsstraße 60, 44789 Bochum, Germany. SalesViewer shows us which companies and organisations are interested in our products. To do this, the IP address from which you access the website is compared with a database of company IP addresses. If the IP address belongs to a company, we learn the name of the company and which pages were visited from there. If the IP address does not belong to a company, for example in the case of a private internet connection, the visit is discarded, according to SalesViewer. According to the provider, SalesViewer does not set any cookies. According to the provider, the data is processed in data centres in Germany.

The data processed is your IP address, the pages accessed, the time and duration of the visit and technical characteristics of your browser. We do not receive the names of individual persons, only the name of the company or organisation. In the case of sole traders and self-employed professionals, however, the company name may indicate a person.

The legal basis is your consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) TDDDG. SalesViewer is not loaded without your consent. You can withdraw your consent at any time with effect for the future, as described in the section on consent management. SalesViewer also offers an option to object.

SalesViewer processes the data on our behalf. The results are stored for as long as we need them for our sales activities. Further information can be found in SalesViewer's privacy notice.

7. Enquiries via the express enquiry form

The express enquiry form is a quick way to reach us. When you use it, we process:

  • Email address (required so that we can reply)
  • Telephone number (optional, if you would like us to call you back)
  • Your message (required)
  • The page from which you submitted the form, and the time of submission

Your details are transmitted in encrypted form to our web server at Hetzner in Nürnberg and stored there briefly. Our automation platform retrieves the enquiry within a few minutes and forwards it to us by email. It is then deleted from the temporary storage. If an enquiry cannot be retrieved because of a technical fault, it is deleted there after seven days at the latest.

We run the automation platform with the software n8n on a virtual server at Microsoft Azure (Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland) in a data centre in Frankfurt am Main. If the enquiry is forwarded successfully, the platform does not store its content. If a technical error occurs during forwarding, the content remains in the platform's log for troubleshooting, for a maximum of 14 days.

To protect against automated submissions, the form contains a field that is invisible to humans, and we limit the number of submissions per IP address. For this purpose, the web server holds your IP address in its memory only briefly; it is not stored with your enquiry. We do not use any third-party services for this.

We then process your enquiry in our email system and, if it results in a quotation or an order, in our customer management system.

If you make an enquiry on your own behalf, for example as a self-employed professional, the legal basis is Art. 6(1)(b) GDPR (steps prior to entering into a contract). If you make an enquiry on behalf of a company, a school or a public authority, we base the processing of your contact details on our legitimate interest in communicating with the organisation making the enquiry and in providing it with a quotation (Art. 6(1)(f) GDPR).

We store your enquiry in our systems until it has been dealt with. If it does not result in a quotation, we delete it as soon as we no longer need it to communicate with you. If the enquiry leads to a quotation or a contract, the statutory retention periods under German commercial and tax law apply: six years for business letters and eight years for invoices and other accounting records (Section 257 of the German Commercial Code [HGB], Section 147 of the German Fiscal Code [AO]). The period begins at the end of the relevant calendar year.

8. Contact by email or telephone

If you contact us by email or telephone, we process the information you provide (for example your name, organisation, contact details and the content of your enquiry) in order to deal with your request. The same legal basis and storage period apply as for the express enquiry form. Our legitimate interest lies in answering enquiries addressed to us.

Our mailboxes are operated on our behalf by Microsoft as part of Microsoft 365 (Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland). The CodeTwo service adds the email signature to our outgoing emails; in doing so, the emails pass through its servers.

The email links on this website open your own email client. The subject line and template text are only pre-filled in your browser and are not transmitted until you send the email yourself.

9. Recipients of your data

We only pass on your data if a legal basis permits this. The recipients are:

  • Service providers that process data on our behalf: Hetzner Online (hosting and temporary storage for the form), Microsoft (email and server for the automation platform), CodeTwo (email signatures) and SalesViewer (only with consent)
  • Freight forwarders and installation partners, where this is necessary for the quotation, delivery or installation (Art. 6(1)(b) or (f) GDPR)
  • Public authorities, where we are required to do so by law (Art. 6(1)(c) GDPR)

We do not sell personal data and do not pass it on for advertising purposes.

10. Transfers to countries outside the EU

We operate this website on a server in Germany (Nürnberg) and our automation platform also in Germany (Frankfurt am Main). Our mailboxes and the server for the automation platform are provided by Microsoft. Microsoft is a group whose parent company is based in the USA. Processing in the USA, for example in the course of maintenance or support, therefore cannot be entirely ruled out. Microsoft Corporation is certified under the EU-US Data Privacy Framework (DPF), for which the European Commission has found an adequate level of data protection (Art. 45 GDPR). The list of certified companies is published by the US Department of Commerce. In addition, the standard contractual clauses of the European Commission apply (Art. 46(2)(c) GDPR); you can obtain a copy from us on request.

11. Storage period

Unless a specific period is stated in this privacy policy, we only store personal data for as long as is necessary for the purpose in question. We then delete it, unless statutory retention obligations require longer storage (in particular under the German Commercial Code and the German Fiscal Code). In that case, we restrict the processing and delete the data once the retention period has expired.

12. Your rights

With regard to your personal data, you have the following rights against us:

  • Right of access to the personal data we process (Art. 15 GDPR)
  • Right to rectification of inaccurate personal data (Art. 16 GDPR)
  • Right to erasure (Art. 17 GDPR)
  • Right to restriction of processing (Art. 18 GDPR)
  • Right to data portability (Art. 20 GDPR)
  • Right to withdraw consent with effect for the future (Art. 7(3) GDPR). The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

To exercise these rights, simply contact us at info@smesk.de or contact our data protection officer.

Right to object (Art. 21 GDPR)

Where we process your personal data on the basis of Art. 6(1)(f) GDPR (legitimate interest), you have the right to object, on grounds relating to your particular situation, at any time to the processing of your personal data. We will then no longer process the personal data unless we demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing is for the establishment, exercise or defence of legal claims. You can send your objection to info@smesk.de or to our data protection officer; no particular form is required.

Where we process your personal data for direct marketing purposes, you have the right to object at any time, without giving reasons, to the processing of your personal data for such marketing. If you object, we will no longer process your personal data for such purposes.

Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement. The supervisory authority competent for us is the Bavarian Data Protection Authority (Bayerisches Landesamt für Datenschutzaufsicht, BayLDA), Promenade 18, 91522 Ansbach, Germany, www.lda.bayern.de.

13. Obligation to provide data; no automated decision-making

You are under no statutory or contractual obligation to provide us with personal data. However, without an email address or telephone number, we cannot reply to an enquiry. For a quotation or a contract, we need the contact and delivery details of your organisation. Without the technical connection data, such as the IP address, the website cannot be displayed. We do not make any decisions based solely on automated processing, including profiling, within the meaning of Art. 22 GDPR.

14. Security

The connection between your browser and this website is encrypted (HTTPS). This protects what you enter in the form from being read by unauthorised persons on its way to us. Emails are not always encrypted along the entire transmission path.

15. Changes to this privacy policy

We update this privacy policy when our website, the services we use or the legal situation change. The version currently published here applies.

This privacy policy is available in several languages. In the event of any discrepancy between the language versions, the German version shall prevail.