Legal

Privacy policy

With the following information we explain which personal data is processed when you visit flachpaletten.de, for what purpose, and what rights you have. Personal data is any data with which you can be personally identified. This is a translation for convenience; the German version is legally binding.

1. Data protection at a glance

This website is deliberately designed to be economical with data:

  • We do not use cookies or comparable storage technologies.
  • We do not use any analytics, tracking or advertising services.
  • Fonts and graphics are delivered from our own server, not from third-party providers.
  • Enquiries from the form are not stored; they are only forwarded as an e-mail to our inbox.

Essentially, we therefore only process the technical access data required to deliver the website and the information you provide to us yourself by e-mail or telephone.

2. Controller

The controller responsible for data processing on this website is:

LT GmbH
Elly-Beinhorn-Str. 12
73760 Ostfildern
Germany

Phone: +49 160 8472379
E-mail: info@lt-gmbh.de

The controller is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data.

3. Data protection officer

We have appointed a data protection officer for our company:

Christian Schwinge
Ingenieurbüro Frahm GmbH
Kurze Straße 30
70794 Filderstadt
Germany

Phone: +49 711 7737676-0
E-mail: christian.schwinge@ibfrahm.de

4. Hosting

This website is hosted by an external service provider:

Vercel Inc.
440 N Barranca Ave #4133
Covina, CA 91723
USA

The enquiry form is processed in a Vercel data centre in Frankfurt am Main (Germany). Vercel delivers the pages themselves via a worldwide server network (content delivery network); visitors from Europe are usually served from servers in Europe. The personal data arising when this website is accessed is processed on the host’s servers. The host processes this data only to the extent necessary to fulfil its service obligations and follows our instructions. We have a data processing agreement with Vercel in accordance with Art. 28 GDPR (Data Processing Addendum).

As Vercel is a company based in the USA, a transfer of personal data to the USA cannot be ruled out. Vercel is certified under the EU-U.S. Data Privacy Framework, so an adequacy decision of the European Commission applies (Art. 45 GDPR). In addition, the European Commission’s standard contractual clauses are agreed in the data processing agreement (Art. 46 (2) (c) GDPR). Further information: vercel.com/legal/privacy-policy.

The host is used in the interest of a secure, fast and efficient provision of our online offering (Art. 6 (1) (f) GDPR) and, where you contact us, to carry out pre-contractual measures (Art. 6 (1) (b) GDPR).

5. Server log files

Each time this website is accessed, your browser automatically transmits information that is stored in so-called server log files:

  • IP address of the requesting device
  • Date and time of the request
  • Page or file requested
  • Referrer URL (the previously visited page)
  • Browser type and version as well as operating system used
  • Amount of data transferred and status code of the request

This data is not merged with other data sources and is not used to analyse your usage behaviour. It serves exclusively to deliver the website without technical errors and to detect and prevent faults and misuse. The legal basis is Art. 6 (1) (f) GDPR; our legitimate interest lies in the security and stability of the offering. The log files are stored only for as long as necessary for these purposes and then deleted. Data whose further storage is required for evidence purposes is excluded from deletion until the incident concerned has been finally resolved.

6. SSL/TLS encryption

For security reasons, this site uses SSL or TLS encryption. You can recognise an encrypted connection by the browser’s address bar starting with “https://” and by the padlock symbol. When encryption is active, the data you transmit to us cannot be read by third parties.

7. Cookies and storage on your device

This website does not set cookies and does not store any information on your device, for example in the browser’s local storage. A consent banner is therefore not required. Should we use services in future that store or read information on your device and are not strictly necessary for it, we will obtain your consent in advance in accordance with Section 25 (1) TDDDG and update this policy.

8. Contacting us

Enquiries by e-mail or telephone

If you contact us by e-mail or telephone, we process the information you provide (for example name, company, contact details, model, quantity, requested date and details of part and process) as well as your enquiry in order to handle your request and answer follow-up questions. We do not pass on this data without your consent.

Processing is based on Art. 6 (1) (b) GDPR if your enquiry is related to the performance of a contract or is necessary to carry out pre-contractual measures, for example a request for a quotation. In all other cases, processing is based on our legitimate interest in the effective handling of enquiries addressed to us (Art. 6 (1) (f) GDPR).

Enquiry form

When you submit the form on the contact page, we process the information you enter (name, e-mail address, your enquiry and, optionally, company, phone, model, version, quantity and requested date) in order to answer your enquiry. Name, e-mail address and enquiry are required. The information is processed by a server function of our host Vercel in Frankfurt am Main (see section 4 “Hosting”) and delivered to our inbox via the mail server of our e-mail provider Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. The form data is not stored in a database; it is only forwarded as an e-mail. The information on enquiries by e-mail applies to further processing and the legal basis.

If a product page links to the contact page, the contact page takes over the selected model via the page address (for example “?modell=MFP1”). This information is only evaluated in your browser and is not stored.

Storage period

Your enquiry data remains with us until you ask us to delete it, withdraw your consent to storage or the purpose of storage no longer applies, for example after your enquiry has been processed. If a contractual relationship arises, the statutory retention periods apply, in particular under Section 257 of the German Commercial Code (HGB) and Section 147 of the German Fiscal Code (AO) (usually six or eight years for business letters and accounting records).

9. Fonts

This website uses the font “Inter Tight”. The font files are loaded locally from our server. No connection to servers of Google or other third-party providers is established.

10. Downloads

In the download area we provide checklists as CSV files. Downloading them only generates the server log data described in section 5. The files contain no tracking functions.

11. Recipients and transfers to third countries

Apart from us, recipients of your data are only the host Vercel Inc. named in section 4 and our e-mail provider Hetzner Online GmbH, each as processor. A transfer to the USA is possible via the host Vercel; it takes place on the basis of the EU-U.S. Data Privacy Framework and, in addition, the standard contractual clauses (see section 4). Beyond this, no data is transferred to countries outside the European Union or the European Economic Area.

12. General storage period

Unless a more specific storage period is stated in this privacy policy, your personal data remains with us until the purpose of processing no longer applies. If you assert a justified request for deletion or withdraw consent, your data will be deleted unless there are other legally permissible reasons for storage, such as retention periods under tax or commercial law. In this case, deletion takes place once these reasons no longer apply.

13. Your rights

Within the scope of the statutory provisions, you have the following rights at any time:

  • Access to your personal data stored by us, its origin, recipients and the purpose of processing (Art. 15 GDPR)
  • Rectification of inaccurate data (Art. 16 GDPR)
  • Erasure of your data (Art. 17 GDPR)
  • Restriction of processing (Art. 18 GDPR)
  • Data portability, insofar as processing is based on your consent or a contract and is carried out by automated means (Art. 20 GDPR)
  • Withdrawal of consent given, with effect for the future (Art. 7 (3) GDPR); the lawfulness of processing carried out before withdrawal remains unaffected
  • Objection to processing (Art. 21 GDPR, see below)

The right to restriction of processing exists in particular if you dispute the accuracy of your data (for the duration of the review), if processing was unlawful and you request restriction instead of erasure, if we no longer need the data but you need it to establish, exercise or defend legal claims, or if you have objected and the balancing of interests is still pending.

An informal message to the contact details given in section 2 is sufficient to exercise your rights.

Right to object under Art. 21 GDPR

If data processing is based on Art. 6 (1) (e) or (f) GDPR, you have the right to object at any time to the processing of your personal data on grounds relating to your particular situation; this also applies to profiling based on these provisions. If you object, we will no longer process your personal data concerned unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims (Art. 21 (1) GDPR).

If your personal data is processed for direct marketing purposes, you have the right to object at any time to processing for such marketing; this also applies to profiling insofar as it is related to such direct marketing. After an objection, your data will no longer be used for direct marketing purposes (Art. 21 (2) GDPR).

Right to lodge a complaint with a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the member state of your habitual residence, place of work or place of the alleged infringement (Art. 77 GDPR). The authority responsible for us is:

Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg
Lautenschlagerstraße 20
70173 Stuttgart, Germany
www.baden-wuerttemberg.datenschutz.de

14. Obligation to provide data and automated decisions

You are under no legal or contractual obligation to provide us with personal data. Without contact details, however, we cannot answer your enquiry. There is no automated decision-making, including profiling, within the meaning of Art. 22 GDPR.

15. Objection to advertising e-mails

We hereby object to the use of contact details published under the legal notice obligation for sending unsolicited advertising and information material. The operators of this website expressly reserve the right to take legal action in the event of unsolicited advertising, for example by spam e-mails.

16. Changes to this privacy policy

We will update this privacy policy as soon as the website or the legal requirements change. The version published here applies.

As of: September 2026