Privacy Policy

Scope and controller

This notice describes the ebm-experts website with its contact form for direct email delivery. Updated: 7 September 2026.

Controller:
Dipl. Ing. Andreas Lichtenauer
ebm-experts

Business address:
Am Wolfsbach 36
53229 Bonn
Germany

Email: a.lichtenauer@ebm-experts.com
Telephone: +49 172 3907250

Website delivery and hosting

When you visit, your browser transmits your IP address, the requested file, access time, and browser and device information to the web server. Depending on the browser, the referring page may also be transmitted. This enables delivery, troubleshooting and protection against attacks. The legal basis is Article 6(1)(f) GDPR; our legitimate interest is reliable and secure operation.

Our hosting provider is STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany. STRATO processes the relevant data to provide the hosting service. According to STRATO, visitor IP addresses used to detect and prevent attacks are retained for a maximum of seven days. IP addresses in access logs supplied to customers are anonymised. Further information: https://www.strato.de/faq/vertrag/fragen-zur-auftragsverarbeitungsvertrag-avv-und-der-neuen-eu-datenschutzgrundverordnung-dsgvo/.

Contact form and email

Submitting the form transmits your name, email address and message to our web server. Your company is optional. Required fields are necessary to process the form. You may alternatively contact us by email.

The PHP script forwards your enquiry to a.lichtenauer@ebm-experts.com and uses your email address for replies. The website does not create a database of form entries. Messages are processed by the email systems involved and stored in the recipient’s mailbox. The HTML email contains an embedded logo, without an open-tracking pixel implemented by us.

For a contract with you or steps requested by you before entering into a contract, processing relies on Article 6(1)(b) GDPR. Other enquiries are handled under Article 6(1)(f) GDPR based on our interest in business communication. Processing concerning a company’s contact person generally relies on that legitimate interest.

The controller and hosting and email service providers have access as necessary. Our email service is also provided by STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany. Enquiries are deleted after completion unless further handling, statutory retention or the protection of legal claims requires continued storage. Retention of business records depends on the type and content of correspondence and applicable statutory obligations; further use is limited to the relevant retention purpose.

Protection against automated submissions

The form uses a hidden verification field and a server-side sending limit. The script temporarily stores a hash derived from the IP address and a server-side value, a counter and an expiry time in a server file. This hash is a pseudonymous identifier, not guaranteed anonymisation. Form message contents are not stored in this file.

The rate-limit window is one hour. Expired records are removed during cleanup on the next valid form request; without another request they may remain in the temporary file for longer. Processing relies on Article 6(1)(f) GDPR, based on our legitimate interest in preventing spam and keeping the contact service available. No external CAPTCHA provider is used.

Language preference and browser storage

Selecting EN or DE stores en or de under the key ebm-language in your browser’s Local Storage. It is read on later visits. The application does not set an expiry date. You can remove the entry by clearing this website’s browser data. The form does not send this stored value to the server. The language may also appear in the URL parameter lang and therefore in server logs.

Storage is used solely to retain your expressly selected language. The necessary storage and access rely on section 25(2)(2) of the German TDDDG; where personal data is involved, processing relies on Article 6(1)(f) GDPR and the interest in providing the requested language. This website does not set analytics or advertising cookies.

Images, fonts and other services

Images, the logo, stylesheets and scripts are served with the website from its own web address. Fonts use locally available system fonts. This website contains no external font services, maps, videos, social media plugins, analytics tools or advertising pixels. Any additional hosting-provider functionality must be separately checked against the hosting configuration.

Transmission and automated decisions

The website is accessible over HTTPS, encrypting transmission of the form to the web server. End-to-end encryption of the subsequent email communication is not configured. Please do not include particularly sensitive information in the form.

The website does not use profiling or automated decision-making producing legal or similarly significant effects. Technical spam checks may prevent a form submission.

Your rights

Subject to applicable legal conditions, you have rights of access, rectification, erasure, restriction and data portability. Where processing is based on consent, you may withdraw it for the future.

Objection: Where processing relies on Article 6(1)(f) GDPR, you may object on grounds relating to your particular situation. Contact a.lichtenauer@ebm-experts.com for privacy requests.

You may complain to a data protection supervisory authority, particularly where you habitually reside, work or believe an infringement has occurred. For a controller based in Bonn, the competent authority is generally the North Rhine-Westphalia Commissioner for Data Protection and Freedom of Information: https://www.ldi.nrw.de/kontakt/ihre-beschwerde.