This privacy policy applies to the website gambtec.de and its subdomains. Last updated: April 2026.

1. Controller

2. General principles

We process personal data only insofar as this is necessary to provide a functional website and our content and services. The processing takes place exclusively on the basis of statutory permissions and your consent.

3. Hosting

This site is hosted on a dedicated server with Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. Servers are located in Germany. Hetzner processes data on our behalf as a contract processor pursuant to Art. 28 GDPR.

When you access our pages, the server automatically logs the following information ("server logs"):

• IP address (anonymised after 7 days)
• Date and time of the request
• URL accessed and HTTP status
• Volume of data transferred
• Browser type, language and operating system
• Referrer URL

Legal basis: Art. 6 (1) (f) GDPR — legitimate interest in operational stability and security. Storage period: 7 days.

4. Contact form

If you contact us via the contact form, the data you provide (name, company, email, phone, subject, message) is transmitted to us via TLS-encrypted connection and used solely to process your inquiry.

Outgoing emails are sent via the SMTP service of Strato AG, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany. Inquiries are additionally stored in our internal database for processing and audit-traceability.

Legal basis: Art. 6 (1) (b) GDPR (initiation of a contract) and (f) GDPR (legitimate interest in being able to respond). Storage period: as long as is necessary for processing, then deleted in accordance with statutory retention obligations (max. 6 years for tax-relevant correspondence).

5. Machinery stock

Our machinery stock page loads images and listing details directly from eBay.de. When loading these images, your IP address is transmitted to eBay (eBay GmbH, Albert-Einstein-Ring 2-6, 14532 Kleinmachnow). For details, see eBay's privacy policy.

Legal basis: Art. 6 (1) (f) GDPR — legitimate interest in displaying our current product range.

6. Reach measurement & web analytics

For reach measurement we use a self-hosted web analytics tool to understand which content on our website is in demand. No personal profiles are created and no cookies are set; analytics data is not forwarded to third parties. (For advertising conversion tracking, see point 7.)

6.1 GoatCounter (self-hosted)

GoatCounter does not store IP addresses. For session recognition, a daily rotating hash is computed over IP + user agent — re-identification is not possible. Data is stored exclusively on our server in Germany.

Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in reach measurement). Storage period: aggregated indefinitely, but without personal reference.

6.2 Cookies & consent

For reach measurement (GoatCounter) and technically necessary functions we set no cookies. Advertising cookies (Google Ads, see point 7) are set only after your explicit consent via our cookie banner. Without consent, no advertising tracking takes place. You can change or withdraw your choice at any time via the „Cookie settings“ link in the footer.

7. Google Ads – conversion tracking & consent mode

To measure the success of our Google advertising, we use Google Ads conversion tracking, a service provided by Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland („Google“). If you reach our website via one of our Google ads, Google can use cookies and similar technologies to detect whether you carry out an action relevant to us (e.g. submitting an enquiry). This allows us to evaluate which ads are effective.

Consent & consent mode: These cookies are set exclusively with your consent. We use Google Consent Mode v2: without your consent, no advertising cookies are set and no personal identifiers are transmitted to Google. You can change or withdraw your choice at any time via „Cookie settings“ in the footer.

Legal basis: Art. 6 (1) (a) GDPR (consent) and § 25 (1) TDDDG (German Telecommunications Digital Services Data Protection Act) for storing or reading information on your device.

Data transfer to the USA: When using Google Ads, data may be transferred to Google LLC in the USA. Google is certified under the EU-US Data Privacy Framework; standard contractual clauses apply in addition. An adequate level of data protection comparable to EU law cannot be guaranteed in every case despite these measures.

Further information: policies.google.com/privacy.

8. Your rights

Under the GDPR, you have the following rights at any time:

• Right of access (Art. 15) — what data we hold about you
• Right to rectification (Art. 16) of incorrect data
• Right to erasure (Art. 17), unless retention obligations apply
• Right to restriction of processing (Art. 18)
• Right to data portability (Art. 20)
• Right to object to processing based on Art. 6 (1) (f) GDPR

For all of the above, contact us at info@gambtec.de.

9. Right to lodge a complaint

You have the right to lodge a complaint with a data-protection supervisory authority. The competent authority for us is:

10. SSL encryption

This site uses TLS encryption (HTTPS) to protect the transmission of your data. Certificates are issued by Let's Encrypt and renewed automatically.