Data Protection

Privacy Policy

This policy explains what personal data we collect when you use this website, why we collect it, who receives it and what rights you have. It applies to cncspindleservice.com and all of its language versions.

1. Who is responsible for your data

The controller within the meaning of Art. 4(7) of the General Data Protection Regulation (GDPR) is:

CNC Spindle Service
Paul Kloss
Uferstraße 9
53757 Sankt Augustin
Germany
Phone: +49 2686 9886926
Email: [email protected]

We have not appointed a data protection officer, as we are not required to do so under Art. 37 GDPR.

2. Visiting this website (server log files)

When you open a page, your browser automatically transmits technical data which our hosting provider records in server log files:

  • your IP address
  • date and time of the request
  • the page or file requested
  • the referring page, where your browser sends one
  • browser type, version and operating system

This data is needed to deliver the site, keep it stable and defend against attacks. The legal basis is our legitimate interest in a secure and functioning website, Art. 6(1)(f) GDPR. Log data is not merged with other data sources and is deleted by our hosting provider after a short retention period. Our hosting provider processes this data on our behalf under a data processing agreement pursuant to Art. 28 GDPR.

This website is delivered through the content delivery network of Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. Cloudflare processes your IP address in order to route requests and to filter attacks, and may set a technically necessary security cookie (__cf_bm or similar). Cloudflare, Inc. is certified under the EU–US Data Privacy Framework, which the European Commission has recognised as providing an adequate level of protection. Legal basis: Art. 6(1)(f) GDPR.

3. Contact form

If you send us an enquiry through the form on this site, we process the data you enter:

  • name (required)
  • email address (required)
  • description of the issue (required)
  • company, phone number, machine brand, country (optional)
  • the language version of the site you used

We use this data solely to answer your enquiry and to prepare a quotation. The legal basis is Art. 6(1)(b) GDPR, since processing is necessary for steps taken at your request prior to entering into a contract, together with your consent under Art. 6(1)(a) GDPR, which you give by ticking the consent box before sending the form.

Transfer to Telegram — please read before sending the form

Enquiries submitted through the form are forwarded to us as a message in the messenger service Telegram, operated by Telegram FZ-LLC, Business Center, Al Shatha Tower, Dubai Media City, Dubai, United Arab Emirates. All of the form content listed above is transmitted to Telegram and stored there in our message history.

The United Arab Emirates is a third country for which the European Commission has not issued an adequacy decision under Art. 45 GDPR, and we do not rely on standard contractual clauses for this transfer. The transfer therefore takes place solely on the basis of your express consent under Art. 49(1)(a) GDPR, which you give by ticking the consent box.

We are required to point out the resulting risk: your data may be accessed by authorities in the United Arab Emirates, and enforcing your data protection rights there may be more difficult than within the EU. If you prefer not to accept this, please do not use the form — write to us at [email protected] or call +49 2686 9886926 instead. You can withdraw your consent at any time with effect for the future; the lawfulness of processing carried out before withdrawal is unaffected.

4. Contact by email, telephone or post

If you contact us directly, we process the contact details and the content of your message in order to deal with your request. The legal basis is Art. 6(1)(b) GDPR where your enquiry relates to a contract or pre-contractual steps, and otherwise our legitimate interest in answering enquiries addressed to us, Art. 6(1)(f) GDPR.

5. Fonts

This site uses the typefaces Barlow Condensed, Inter and JetBrains Mono, which are loaded from the servers of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. When a page loads, your browser connects to Google's servers, and your IP address is transmitted to Google in the process. We use these fonts to present the site consistently across devices; the legal basis is Art. 6(1)(f) GDPR. Google may transfer data to servers in the USA; Google LLC is certified under the EU–US Data Privacy Framework. Further information is available in Google's privacy policy at policies.google.com/privacy.

6. Cookies, analytics and advertising

We do not use any analytics, tracking, profiling or advertising services on this website. There is no Google Analytics, no Meta pixel and no advertising network. We do not set any cookies of our own; the only cookie that may be set is the technically necessary security cookie of our CDN provider described in section 2, which does not require consent under § 25(2) TTDSG.

7. How long we keep your data

We keep enquiry data for as long as is necessary to deal with your request and for any follow-up questions. Where an enquiry leads to a business relationship, we are required to retain the related commercial and tax documents for six or ten years under § 257 HGB and § 147 AO. Server log data is deleted after a short retention period, as described in section 2. Beyond that, we delete personal data as soon as the purpose for which it was collected no longer applies.

8. Your rights

Under the GDPR you have the right to:

  • obtain information about the personal data we hold about you (Art. 15)
  • have inaccurate data corrected (Art. 16)
  • have your data erased (Art. 17)
  • have processing restricted (Art. 18)
  • receive your data in a portable format (Art. 20)
  • object to processing based on legitimate interests (Art. 21)
  • withdraw consent you have given at any time, with effect for the future (Art. 7(3))

To exercise any of these rights, write to [email protected]. We do not use automated decision-making or profiling within the meaning of Art. 22 GDPR.

9. Right to lodge a complaint

If you believe we are processing your data unlawfully, you may lodge a complaint with a supervisory authority — for example the authority responsible for us:

Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Rheinland-Pfalz
Hintere Bleiche 34
55116 Mainz, Germany
datenschutz.rlp.de

10. Data security

This website is delivered over an encrypted TLS connection (HTTPS), which you can recognise by the padlock in your browser's address bar. This protects the content you send us in transit against being read by third parties.

11. Changes to this policy

We update this privacy policy when changes to the site or to the law make it necessary. The current version always applies.

Last updated: 16 August 2026