Privacy policy

The controller responsible for processing personal data on this website within the meaning of the General Data Protection Regulation (GDPR) is:

Paul Ferdinand Peddinghaus GmbH
Haßlinghauser Str. 156
58285 Gevelsberg
Germany
Phone +49 (0) 2332 72-0
Email zwe@peddinghaus-pfp.de
Managing Director: Julia C. Peddinghaus

You can reach our data protection officer at:
Caroline Vanhaecke
Paul Ferdinand Peddinghaus GmbH, Haßlinghauser Str. 156, 58285 Gevelsberg, Germany
Email info@peddinghaus-pfp.de

• This website does not set cookies and does not load content from third-party servers.
• When you visit, our web server stores technical access data. We delete it after 14 days.
• For visitor statistics we analyse this access data with Matomo on our own server. IP addresses are shortened in the process.
• We do not sell data or pass it on for advertising.

Each time you open a page or file, your browser transmits data to our web server for technical reasons. The server stores the following in a log file:

• the IP address of the requesting device
• date and time of access
• the address requested (URL), including search terms entered in the site search
• the HTTP status code and the amount of data transferred
• the address of the previously visited page (referrer), if your browser transmits it
• your browser identifier (user agent) with browser and operating system

The purpose is to deliver the website, to detect and defend against attacks and disruptions, and to analyse errors. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in the secure and proper operation of the website.

The log files are rotated daily and deleted automatically after 14 days.

A web application firewall checks incoming requests for attack patterns. Suspicious requests are logged with IP address, time and content of the request and deleted after 14 days at the latest. If attack attempts from one IP address accumulate, the server blocks this address for a set period, usually between ten minutes and one week. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is the security of our systems.

To see which content is in demand and to improve the website, we analyse the server logs with the software Matomo. Matomo runs on our own server in Germany; the data does not leave our systems. The analysis works without cookies and without any code in your browser; nothing is stored on or read from your device.

Before storage in Matomo, the last two bytes of your IP address are removed (192.168.10.20 becomes 192.168.0.0). The country of origin is also determined only from the shortened address. This means you can no longer readily be identified. We delete the individual access records in Matomo after 180 days; the statistics derived from them contain no personal data.

The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is designing our website to meet demand. You may object to this analysis at any time. Tell us your IP address and we will exclude it from the analysis.

This website does not set cookies. It does not store or read any information on your device unless this is strictly necessary to display the page you requested (Section 25(2) No. 2 of the German TDDDG). Consent is therefore not required. Should we use services requiring consent in future, we will ask you first and update this policy.

All fonts, images and documents are loaded from our own server. No connections to third parties such as Google, YouTube or content delivery networks are made when a page is opened.

Our pages contain links to other services, for example to videos on YouTube, to peddinghaus.com, peddilaser.com and to our online shop peddinghaus-shop.de. Only when you click such a link does your browser leave our website. The respective provider is responsible for processing there, and its privacy notice applies.

If you contact us by phone or email, we process your details, for example name, company, contact details and the content of your enquiry, in order to deal with your request. The legal basis is Art. 6(1)(b) GDPR if your enquiry relates to a contract or quotation, otherwise Art. 6(1)(f) GDPR; our legitimate interest is answering your enquiry. We delete the data once your request has been dealt with, unless statutory retention obligations apply: we keep commercial and business letters for six years and accounting records for ten years (Section 257 German Commercial Code, Section 147 German Fiscal Code).

Your data is processed only by us and by service providers acting for us as processors under Art. 28 GDPR and bound by our instructions:

• IONOS SE, Elgendorfer Str. 57, 56410 Montabaur: operation of the server in a data centre in Germany
• an IT service provider for setting up, maintaining and running the website. For encrypted backups it uses Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen as a sub-processor, also with a data centre in Germany. Hetzner has no access to the key and cannot read the backups.

No data is transferred to countries outside the European Union.

The connection between your browser and our server is encrypted with TLS, recognisable by “https” in the address bar. Server and website are protected by technical and organisational measures, including a firewall, regular security updates and encrypted backups.

You have the following rights regarding personal data concerning you:

• access (Art. 15 GDPR)
• rectification (Art. 16 GDPR)
• erasure (Art. 17 GDPR)
• restriction of processing (Art. 18 GDPR)
• data portability (Art. 20 GDPR)
• withdrawal of consent with effect for the future (Art. 7(3) GDPR)

Right to object (Art. 21 GDPR): Where we process data on the basis of Art. 6(1)(f) GDPR, you may object at any time on grounds relating to your particular situation. We will then no longer process the data unless we can demonstrate compelling legitimate grounds that override your interests, or the processing serves the establishment, exercise or defence of legal claims.

Please contact zwe@peddinghaus-pfp.de or our data protection officer at info@peddinghaus-pfp.de.

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen, Kavalleriestraße 2-4, 40213 Düsseldorf, www.ldi.nrw.de.

You are not obliged to provide us with personal data. Without the technical access data, however, the website cannot be delivered. There is no automated decision-making, including profiling, under Art. 22 GDPR.

Status: November 2026. We will update this policy if our website or the legal situation changes.