Privacy Policy (Datenschutz)

1. Data Controller (Verantwortlicher)

The controller responsible for the processing of personal data on this website within the meaning of the General Data Protection Regulation (GDPR / DSGVO) is:

Steel Pro Rebar Germany Gmbh
Hans-Roth-Straße 10
8093 Feldkirchen bei Graz, Austria
Email: sales@steelrebargermany.de
Phone: +49 163 1141934 (WhatsApp)

For all data protection questions, please also see our Imprint (Impressum) or reach us via our contact page.

2. Scope of This Policy

This privacy policy applies to personal data collected and processed through the website steelrebargermany.de and any enquiry or contact forms hosted on it. It does not apply to third-party websites linked from this site.

3. What Personal Data We Collect

3.1 Server Log Files

When you visit this website, our hosting provider automatically collects and temporarily stores information in server log files. This includes:

• IP address of the requesting device
• Date and time of the request
• Name and URL of the file retrieved
• Website from which the request originates (referrer URL)
• Browser type, version, and operating system
• Name of your internet service provider

These data are processed to ensure the technical operation and security of the website. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in secure, stable website operation). Log data are deleted after [X days — confirm with your host, typically 7–30 days].

3.2 Contact and Enquiry Data

When you send us an enquiry via our contact form or by email, we collect the information you provide — typically your name, company name, email address, phone number, and the content of your message. This data is used exclusively to respond to your enquiry and, where applicable, to prepare a quotation or initiate a contractual relationship.

The legal basis is Art. 6(1)(b) GDPR (processing necessary for pre-contractual measures or performance of a contract) and, where no contract is involved, Art. 6(1)(f) GDPR (legitimate interest in responding to business enquiries). Enquiry data are retained for up to 7 years (statutory commercial & tax retention periods under Austrian UGB / BAO) and then deleted, unless statutory retention obligations apply (e.g. commercial or tax law: typically 6–10 years under HGB / AO).

3.3 Cookies

This website uses cookies — small text files stored on your device. We distinguish between:

• Strictly necessary cookies: Required for the website to function (e.g. session cookies, consent banner state). These are set on the basis of Art. 6(1)(f) GDPR / § 25(2) TTDSG and do not require your prior consent.
• Analytics / performance cookies: We use Google Site Kit to understand how visitors interact with the website. These cookies are only set after you have given explicit consent via our cookie consent banner. The legal basis is Art. 6(1)(a) GDPR. You may withdraw your consent at any time by clicking the cookie settings link in the footer.
• Marketing / third-party cookies: [Describe any marketing cookies in use, or state: “We currently do not use marketing cookies.”]

A detailed list of cookies in use is provided in our consent management tool / cookie declaration https://policies.google.com/privacy.

4. Hosting and Data Processing Agreement

This website is hosted by [Hosting Provider — e.g. Hostinger / Hetzner / IONOS; confirm the actual provider]. Where the hosting provider operates EU/EEA-based servers, your data remain within the European Economic Area.

We have entered into a Data Processing Agreement (Auftragsverarbeitungsvertrag, AVV) with our hosting provider pursuant to Art. 28 GDPR, ensuring that your personal data are processed only on our documented instructions and with appropriate technical and organisational safeguards.

5. Analytics

We use [Google Analytics / Google Site Kit — confirm tool in use] to analyse website traffic and user behaviour in aggregate. Analytics cookies and data transfers are only activated after you have given explicit consent (Art. 6(1)(a) GDPR).

Where data are transferred to servers outside the EU/EEA (e.g. to the United States), such transfers take place under appropriate safeguards (EU Standard Contractual Clauses). You can opt out at any time by withdrawing consent or by installing the Google Analytics Opt-out Browser Add-on.

[If no analytics tool is in use, replace this section with: “We currently do not use analytics or tracking services on this website.”]

6. Purposes and Legal Bases of Processing

7. Data Retention

Personal data are deleted or anonymised as soon as the purpose for which they were collected has been fulfilled and no statutory retention obligation requires further storage:

• Server logs: Deleted after 30 days.
• Enquiry / contact data: Retained for 6 months after the last communication, then deleted, unless the enquiry led to a contract (commercial/tax retention periods of up to 10 years may apply under §§ 238, 257 HGB / § 147 AO).
• Cookie consent records: Retained for 6 months to demonstrate consent, then deleted.
• Analytics data: Retained by Google Site Kit for [X months — configure in GA settings to the minimum necessary].

8. Your Rights as a Data Subject

Under the GDPR you have the following rights regarding your personal data:

• Right of access (Art. 15 GDPR): You may request confirmation of whether we process personal data about you and obtain a copy.
• Right to rectification (Art. 16 GDPR): You may request correction of inaccurate or incomplete personal data.
• Right to erasure (Art. 17 GDPR): You may request deletion of your personal data, subject to applicable legal retention obligations.
• Right to restriction of processing (Art. 18 GDPR): You may request that we restrict processing of your data in certain circumstances.
• Right to data portability (Art. 20 GDPR): Where processing is based on consent or contract and carried out by automated means, you may receive your data in a structured, machine-readable format.
• Right to object (Art. 21 GDPR): You may object at any time to processing based on legitimate interest (Art. 6(1)(f) GDPR). We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent (Art. 7(3) GDPR): Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
• Right to lodge a complaint (Art. 77 GDPR): You have the right to lodge a complaint with a supervisory authority, in particular in the EU Member State of your habitual residence, place of work, or place of the alleged infringement. The competent supervisory authority for this site is: [Name and address of the relevant German Landesbeauftragter für Datenschutz — confirm based on the company’s registered German state; for federal public bodies: BfDI].

To exercise any of these rights, contact us at sales@steelrebargermany.de or via our contact page.

9. No Automated Decision-Making

We do not carry out automated decision-making or profiling within the meaning of Art. 22 GDPR. Providing personal data via our contact form is voluntary; without it we cannot respond to your enquiry.

10. Links to Third-Party Websites

Our website may contain links to external third-party websites. We have no control over those sites and are not responsible for their privacy practices. We recommend reviewing the privacy policy of any third-party site you visit.

11. Changes to This Policy

We may update this privacy policy from time to time to reflect changes in law, technology, or our data-processing activities. The current version is always available at https://steelrebargermany.de/privacy-policy/. The date of the most recent revision is indicated below.

Last updated: 2 July 2026

12. Contact for Data Protection Enquiries

For all data protection questions or to exercise your rights, please contact:

Steel Pro Rebar Germany Gmbh — Data Protection Contact
Email: sales@steelrebargermany.de
Address: Hans-Roth-Straße 10, 8093 Feldkirchen bei Graz, Austria

See also: Imprint (Impressum) | Contact Us