Privacy policy

Table of Contents
1. Controller and contact
2. General information on data processing
3. Hosting and visiting the website
4. Cookies, consent and cookie banner
5. Abuse prevention (hCaptcha)
6. Customer account
7. Orders and contract performance
8. Payment
9. Shipping
10. Withdrawal, cancellation and returns
11. Contact and customer service
12. Newsletter and email marketing
13. Reviews
14. Analytics and advertising
15. Surveys
16. Social networks and embedded content
17. Transfers to third countries
18. Storage period
19. Your rights
20. Right to object
21. Right to lodge a complaint with a supervisory authority
22. Version and changes


1) Controller and contact
1.1 The controller responsible for processing personal data on industrialkonzept.com and for orders placed through this shop is HOUSE OF KONZEPT GmbH, Am Sand 2, 91757 Treuchtlingen, Germany, represented by its managing directors Johannes Stumpf, Noah Schuster and Ediz Gökmen Yapici, registered with the Local Court (Amtsgericht) of Ansbach under HRB 8343, email: service@industrialkonzept.com.
1.2 For any questions about data protection and to exercise your rights, you can reach us at the address or email address above.

2) General information on data processing
2.1 Personal data is any information relating to an identified or identifiable natural person, for example name, address, email address or IP address.
2.2 We process personal data on the following legal bases of the General Data Protection Regulation (GDPR):
– Art. 6(1)(a) GDPR, where you have given consent;
– Art. 6(1)(b) GDPR, where processing is necessary for the performance of a contract with you or for pre-contractual steps taken at your request;
– Art. 6(1)(c) GDPR, where we are legally obliged, for example under tax and commercial retention rules;
– Art. 6(1)(f) GDPR, where processing is necessary for our legitimate interests or those of a third party and your interests do not override them. We state the interest in each case.
2.3 Storing information on your device and accessing it (for example cookies, local storage, pixels) is additionally governed by Section 25 of the German Telecommunications Digital Services Data Protection Act (TDDDG). Without your consent this is only permitted where it is strictly necessary to provide the service you have explicitly requested (Section 25(2) no. 2 TDDDG). We use everything else only with your consent (Section 25(1) TDDDG, Art. 6(1)(a) GDPR).
2.4 We use service providers who process data on our behalf and under our instructions (processors, Art. 28 GDPR). We have concluded data processing agreements with them. Other recipients, such as payment services or advertising platforms, partly process data under their own responsibility; we point this out in each case.
2.5 The website is encrypted with TLS. You can recognise this by “https://” and the padlock symbol in your browser’s address bar.
2.6 You are under no statutory or contractual obligation to provide personal data. Without the information marked as mandatory in the checkout, however, we cannot conclude and perform a contract; without the information in the contact form we cannot answer your enquiry.
2.7 We do not make decisions based solely on automated processing, including profiling, within the meaning of Art. 22 GDPR. Payment service providers may, under their own responsibility, make automated decisions about certain payment methods (see section 8).

3) Hosting and visiting the website
3.1 Our shop runs on the Shopify platform. The provider is Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland (“Shopify”). Shopify provides servers, the shop system, checkout, customer accounts and order management and processes, as our processor, all data you enter in the shop or that arises during your visit. Shopify may transfer data to affiliated companies in Canada (Shopify Inc.; Canada is covered by an adequacy decision of the European Commission) and in the USA (see section 17). Shopify’s privacy information: shopify.com/legal/privacy.
3.2 Each time you visit the website, Shopify processes technically necessary data transmitted by your browser: IP address, date and time, page requested, referrer URL, browser type and version, operating system, language setting and amount of data transferred (server log files). The purpose is to deliver and display the website and to ensure stability and security, for example to fend off attacks. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is the secure and functioning operation of the shop. Shopify determines how long log files are kept.
3.3 Images, scripts and fonts of the shop are delivered via Shopify’s servers (cdn.shopify.com). The shop does not embed fonts from Google Fonts.
3.4 For error analysis and performance measurement, the Shopify platform sends technical telemetry data to Shopify servers. The legal basis is Art. 6(1)(f) GDPR (stable operation).

4) Cookies, consent and cookie banner
4.1 We use cookies and similar technologies (local storage, session storage, pixels). Cookies are small text files stored by your browser. Some are deleted when you close the browser (session cookies), others remain stored for a certain period.
4.2 Strictly necessary cookies are those without which the shop does not work, for example for the cart, checkout, signing in to your customer account, language and currency settings, abuse prevention and storing your cookie choice. We use them without consent under Section 25(2) no. 2 TDDDG; the subsequent processing is based on Art. 6(1)(b) GDPR (contract) or Art. 6(1)(f) GDPR (a functioning shop).
4.3 We use all other cookies and technologies for analytics, advertising and convenience features only with your consent (Section 25(1) TDDDG, Art. 6(1)(a) GDPR). The individual services are described in sections 14 and 15.
4.4 We obtain your consent through a cookie banner. The provider is Pandectes, Pudisoo küla, Männimäe/1, 74626 Kuusalu vald, Estonia (“Pandectes”). Your choice, a random consent ID, date and time, truncated IP address, country/region and device type are stored so that we can prove consent. The legal basis is Art. 6(1)(c) in conjunction with Art. 7(1) GDPR (duty to demonstrate consent). Your choice is stored for 365 days. Pandectes’ privacy information: pandectes.io/privacy-policy.
4.5 You can change your choice or withdraw consent with effect for the future at any time by deleting the cookies of industrialkonzept.com in your browser; the cookie banner will then appear again on your next visit. You can also delete or block cookies in your browser; some shop features may then not work.

5) Abuse prevention (hCaptcha)
5.1 To protect our forms (for example contact, newsletter and sign-in forms) against automated input and spam, Shopify uses the hCaptcha service. The provider is Intuition Machines, Inc., 1065 SW 8th St #704, Miami, FL 33130, USA. hCaptcha uses data such as IP address, browser and device information and interactions with the page to check whether an input comes from a human. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is protecting the shop against abuse and spam. Where information is stored on or read from your device, this is strictly necessary for the secure submission of the form you are using (Section 25(2) no. 2 TDDDG). Intuition Machines is certified under the EU-U.S. Data Privacy Framework (according to the provider’s privacy notice). Privacy information: hcaptcha.com/privacy.

6) Customer account
6.1 You can create a customer account. For this and for signing in, we process your email address and the data you store in the account (for example name, addresses, orders). You sign in with a one-time code that Shopify sends to your email address. The legal basis is Art. 6(1)(b) GDPR.
6.2 You can have your customer account deleted at any time by sending us an email. Data we must keep due to legal obligations will be restricted until the retention periods expire (see section 18).

7) Orders and contract performance
7.1 When you place an order, we process the data you enter in the checkout: name, billing and delivery address, email address, where applicable phone number and company, the items ordered, payment method and order history. The purpose is the performance of the contract, including order confirmation, invoice, shipping, payment, customer service, warranty and returns. The legal basis is Art. 6(1)(b) GDPR, and Art. 6(1)(c) GDPR for retaining invoices and accounting records.
7.2 In addition to Shopify, we use the software Billbee by Billbee GmbH, Germany, as a processor for order handling. Billbee takes order data from Shopify, passes it to our fulfilment warehouse and creates shipping labels. Privacy information: billbee.io/en/legal/privacy-policy.
7.3 We pass invoices and accounting records to our tax advisers where necessary for bookkeeping and to meet tax obligations (Art. 6(1)(c) GDPR).

8) Payment
8.1 Depending on the payment method you choose, we pass the data required for payment (name, address, email address, order amount, order number, where applicable IP address and device data for fraud prevention) to the relevant payment service provider. The legal basis is Art. 6(1)(b) GDPR, and for fraud prevention Art. 6(1)(f) GDPR (protection against payment default and abuse). We do not receive your full card details.
8.2 Shopify Payments: we process card payments and other payment methods offered at checkout, such as Apple Pay or Google Pay, via Shopify Payments. The payment service provider is Stripe Payments Europe, Limited, 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, D02 H210, Ireland (“Stripe”). Stripe may transfer data to Stripe, Inc. in the USA; Stripe, Inc. is certified under the EU-U.S. Data Privacy Framework. For Apple Pay and Google Pay, the privacy terms of Apple or Google, with whom you have a separate agreement for this, also apply. Stripe’s privacy information: stripe.com/privacy.
8.3 Shop Pay: if you use Shop Pay, Shopify stores your data for faster checkout. Shopify is itself responsible for your Shop Pay account. Privacy information: privacy.shopify.com.
8.4 PayPal: if you pay with PayPal, we pass your payment data to PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (“PayPal”). PayPal processes the data under its own responsibility and may, for certain payment methods (for example pay by invoice or instalments, where offered), carry out a credit check and transmit data to credit agencies for this purpose. PayPal’s privacy information: paypal.com/de/legalhub/paypal/privacy-full.
8.5 Klarna: if you choose a Klarna payment method, we pass your contact and order data (name, address, email address, where applicable phone number, order amount, items, delivery method) to Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden (“Klarna”). Klarna processes the data under its own responsibility. For pay later and instalments, Klarna checks your identity and creditworthiness, also using credit agencies and probability values (scores), and on that basis decides automatically whether you can use the selected payment method. You can ask Klarna to have a person review the decision, to express your point of view and to contest the decision (Art. 22(3) GDPR). Klarna’s privacy information: klarna.com/international/privacy-policy.

9) Shipping
9.1 Our goods are mainly stored and shipped by Sellship GmbH, Gutenbergstr. 1, 91560 Heilsbronn, Germany, as our processor; some are shipped from our warehouse in Treuchtlingen. For this purpose the warehouse receives name, delivery address, order number and items ordered. The legal basis is Art. 6(1)(b) GDPR.
9.2 For delivery, we pass name and delivery address to the carrier we instruct, usually DHL (DHL Paket GmbH, Sträßchensweg 10, 53113 Bonn, Germany), and depending on the shipment also other parcel services and freight forwarders. We book bulky shipments and pallets via the shipping platform Jumingo, which forwards the data to the executing freight forwarder. The legal basis is Art. 6(1)(b) GDPR.
9.3 We pass your email address and phone number to the carrier where this is necessary for delivery, for example to announce the delivery, to arrange an appointment for freight deliveries or for shipments to countries outside the EU where customs authorities require it (Art. 6(1)(b) GDPR).
9.4 For shipments to countries outside the EU, we transmit the data required for customs clearance (recipient, address, value of goods, contents) to the carrier and the customs authorities. The legal basis is Art. 6(1)(b) and (c) GDPR.

10) Withdrawal, cancellation and returns
10.1 For withdrawing from your contract, cancelling before shipment and for returns, we use the Shopify app ReturnZap by ReturnZap LLC, 1954 Airport Rd Unit #536, Atlanta, GA 30341, USA, as a processor. Via the withdrawal function at industrialkonzept.com/pages/withdraw and the returns portal, we process the information you provide there (for example email address, order number, affected items, optionally a reason or photos) and send you an acknowledgement of receipt by email.
10.2 The legal basis is Art. 6(1)(c) GDPR (statutory duty to provide the withdrawal function and to acknowledge receipt) and Art. 6(1)(b) GDPR (unwinding of the contract). We process voluntary information such as reasons or photos on the basis of Art. 6(1)(f) GDPR; our legitimate interest is handling the return and improving our offering.
10.3 ReturnZap processes data in the USA (see section 17). Privacy information: returnzap.com/privacy-policy.

11) Contact and customer service
11.1 If you write to us by email, via the contact form, the sample request form or the Help Center, we process your information (name, email address, where applicable phone number, order number and your message) to answer your enquiry. The legal basis is Art. 6(1)(b) GDPR if your enquiry relates to a contract or an order, otherwise Art. 6(1)(f) GDPR; our legitimate interest is answering your request.
11.2 To handle customer enquiries and for our Help Center (support.industrialkonzept.com), we use Gorgias by Gorgias, Inc., USA, as a processor. Gorgias stores the messages and links them to your orders from Shopify so that we can help you quickly. Gorgias processes data in the USA (see section 17). Privacy information: gorgias.com/legal/privacy.
11.3 When you open the Help Center, fonts from Google Fonts (Google Ireland Limited) and an analytics script from Cloudflare (Cloudflare Web Analytics, Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA) are also loaded; your IP address is transmitted to Google or Cloudflare in the process. The Help Center contact form is protected against spam by Google reCAPTCHA (Google Ireland Limited). The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is a consistent presentation, analysing the use of the Help Center and protection against abuse.
11.4 Emails to our addresses are stored with Google Workspace by Google Ireland Limited, which acts as our processor.
11.5 We process applications you send us by email to carry out the application procedure (Art. 6(1)(b) GDPR, Section 26 BDSG). If no employment results, we delete the documents six months after the procedure ends, unless you have consented to longer storage. We process enquiries about our trade programme for professionals sent by email to assess and carry out the cooperation (Art. 6(1)(b) GDPR).
11.6 Our Advisor answers questions about products, shipping and returns instantly with the help of artificial intelligence. It is only a first step; you can reach us in person at any time via the contact form. When you use the Advisor, we process your questions, the answers, the page on which you open it and your language setting in order to answer you. The answers are generated by the language model Claude of Anthropic Ireland, Limited, 6th Floor, South Bank House, Barrow Street, Dublin 4, D04 TR29, Ireland ("Anthropic"), acting as our processor. Anthropic may process the data in the USA; for this we have agreed the European Commission's Standard Contractual Clauses (see section 17). Anthropic does not use your input to train its models and deletes it after 30 days at the latest. Our server for the Advisor is operated by SiteGround Spain S.L., Calle de Prim 19, 28004 Madrid, Spain, as our processor in a data centre in Frankfurt am Main. There we store questions and answers without your name and without your IP address for 30 days in order to improve the Advisor and to detect misuse; after that they are deleted. Your conversation is also kept in your browser's storage (session storage) so that it remains when you change pages; it is deleted when you close the tab. The legal basis is Art. 6(1)(b) GDPR insofar as your question prepares a purchase, otherwise Art. 6(1)(f) GDPR; our legitimate interest is answering your questions quickly. Storing the conversation in your browser is strictly necessary for the service you requested (Section 25(2) no. 2 TDDDG). Please do not enter sensitive data such as payment or health data in the Advisor. Privacy information from Anthropic: anthropic.com/legal/privacy.

12) Newsletter and email marketing
12.1 If you subscribe to our newsletter (“Members Access”) in the footer, via a sign-up form on the website or in the checkout, we use your email address and, where applicable, your name to send you information about new collaborations, products, journal articles and offers. The legal basis is your consent (Art. 6(1)(a) GDPR, Section 7(2) no. 2 of the German Act against Unfair Competition, UWG).
12.2 We store the time of your subscription and, where applicable, your confirmation so that we can prove consent (Art. 6(1)(c) in conjunction with Art. 7(1) GDPR).
12.3 We send the newsletter with Klaviyo; the provider is Klaviyo, Inc., 125 Summer Street, Floor 6, Boston, MA 02110, USA (“Klaviyo”), acting as our processor. Klaviyo analyses whether and when you open a newsletter and which links you click in order to improve the newsletter and tailor it to your interests; this is part of your consent. Klaviyo processes data in the USA; Klaviyo, Inc. is certified under the EU-U.S. Data Privacy Framework. Privacy information: klaviyo.com/legal/privacy-notice.
12.4 You can unsubscribe at any time via the unsubscribe link in every email or by contacting us. This does not affect the lawfulness of processing carried out until then. After you unsubscribe, we keep your email address on a suppression list so that you receive no further newsletters (Art. 6(1)(f) GDPR).
12.5 If we have received your email address in connection with a purchase, Section 7(3) UWG allows us to use it without consent to advertise our own similar goods, as long as you have not objected. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is direct marketing. You can object to this use at any time via the unsubscribe link in every email or by contacting us, without incurring any costs other than transmission costs at basic rates.
12.6 We only send reminder emails about an uncompleted checkout if you have consented to email marketing.

13) Reviews
13.1 For customer reviews we use REVIEWS.io; the provider is REVIEWS.io Limited, 29 St Nicholas Place, Leicester, LE1 4LD, United Kingdom (“REVIEWS.io”). The United Kingdom is covered by an adequacy decision of the European Commission.
13.2 After delivery, we send you an email via REVIEWS.io asking you to review your purchase. For this purpose we transmit name, email address, order number and items purchased to REVIEWS.io. The legal basis is Art. 6(1)(f) GDPR in conjunction with Section 7(3) UWG; our legitimate interest is obtaining feedback on our products. You can object to this at any time, via the unsubscribe link in the email or by message to us, without incurring any costs other than transmission costs at basic rates.
13.3 If you submit a review, REVIEWS.io publishes it with the name you have provided, shortened where applicable. REVIEWS.io is itself responsible for reviews you submit directly on reviews.io.
13.4 To display reviews on our website, a script from REVIEWS.io is loaded; your IP address is transmitted to REVIEWS.io in the process. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is displaying genuine customer reviews. Privacy information: reviews.io/legal/user-privacy-policy.

14) Analytics and advertising
14.1 We use the following services only with your consent (Section 25(1) TDDDG, Art. 6(1)(a) GDPR), which you give in the cookie banner and can withdraw at any time (see section 4). Data is passed to the services via Shopify’s customer events interface, which follows your choice in the cookie banner.
14.2 Shopify analytics: Shopify collects statistics on the use of the shop for us (for example pages viewed, referral source, cart and purchase events) and sets the cookies _shopify_analytics and _shopify_marketing for this purpose. For provider and third-country transfers see section 3.1.
14.3 Google Analytics 4: we use Google Analytics 4 (measurement ID G-15VKCGTS98) by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, D04 E5W5, Ireland (“Google”), to analyse the use of the shop statistically. Google sets cookies for this (_ga, _ga_*) and processes data such as truncated IP address, device and browser information, pages viewed, time spent, referral source and purchase events under a pseudonymous identifier. Analytics data is deleted after the period set in Google Analytics, at the latest after 14 months.
14.4 Google Ads: we use Google Ads (account AW-11016987914) with conversion tracking and remarketing. Conversion tracking measures whether you make a purchase after clicking one of our ads. Remarketing allows Google to show you our ads on other websites and in Google services after you have visited our shop. Google sets cookies for this (for example _gcl_au and IDE on doubleclick.net). When you complete a purchase, email address, phone number, name and address may additionally be transmitted to Google in encrypted (hashed) form for more accurate measurement (enhanced conversions). We use Google’s Consent Mode, which passes your choice in the cookie banner to Google.
14.5 For Google Analytics and Google Ads: Google may transfer data to Google LLC in the USA; Google LLC is certified under the EU-U.S. Data Privacy Framework. Privacy information: policies.google.com/privacy. You can manage personalised advertising from Google at myadcenter.google.com.
14.6 Meta pixel: we use the Meta pixel by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland (“Meta”), to measure the success of our ads on Facebook and Instagram and to show you relevant ads there (remarketing, audiences). Meta sets the cookie _fbp for this and receives information about your visit and your purchases, where applicable also encrypted contact data for matching with your Meta account. We are jointly responsible with Meta for collecting and transmitting this data to Meta (Art. 26 GDPR); the agreement is available at facebook.com/legal/controller_addendum. Meta alone is responsible for further processing. Meta may transfer data to Meta Platforms, Inc. in the USA; Meta Platforms, Inc. is certified under the EU-U.S. Data Privacy Framework. Privacy information: facebook.com/privacy/policy.
14.7 Pinterest tag: we use the Pinterest tag by Pinterest Europe Limited, Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland (“Pinterest”), to measure the success of our ads on Pinterest and to show you relevant ads there. Pinterest sets cookies for this (for example _pin_unauth) and receives information about your visit and your purchases, where applicable also encrypted contact data (enhanced match). Pinterest may transfer data to Pinterest, Inc. in the USA; Pinterest, Inc. is certified under the EU-U.S. Data Privacy Framework. Privacy information: policy.pinterest.com/privacy-policy.
14.8 Klaviyo onsite tracking: Klaviyo (provider see 12.3) uses the cookie __kla_id to record which pages and products you view and what you add to your cart. If you are known as a newsletter subscriber, Klaviyo links this information to your profile so that we can send you relevant emails. Klaviyo also provides the sign-up forms on the website.
14.9 Solute (billiger.de): if you reach us via an offer on the price comparison site billiger.de, we use the conversion tracking of solute GmbH, Zeppelinstraße 15, 76185 Karlsruhe, Germany (“Solute”). We store a click identifier from the link (soluteclid) and the time in your browser’s local storage for 30 days. If you make a purchase within this period, we transmit order value, order number and the landing URL to Solute so that Solute can invoice the referral. Privacy information: solute.de/eng/privacy.

15) Surveys
15.1 For short surveys on the website (for example when leaving the page) we use the service Decify Surveys. Participation is voluntary. We process your answers and technical data (IP address, device, page viewed) to improve our offering. The legal basis is your consent (Section 25(1) TDDDG, Art. 6(1)(a) GDPR). Privacy information: decify.co/privacy-policy.

16) Social networks and embedded content
16.1 Our website links to our profiles on Instagram, Pinterest, TikTok and Threads. These are simple links; no data is transmitted to these networks when you visit our website. Only when you click a link do the privacy terms of the respective network apply.
16.2 In some journal articles we embed videos from YouTube (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) and posts from Instagram (Meta) and X (Twitter International Unlimited Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland). This content only loads once you have given consent in the cookie banner or clicked the respective placeholder. Only then is data such as your IP address transmitted to the provider, and the provider may set cookies. The legal basis is your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG); you can withdraw it at any time with effect for the future, for example via “Cookie Settings” in the footer.

17) Transfers to third countries
17.1 Some of the service providers named process data outside the EU and the EEA or transfer it there, in particular to the USA. We only transfer data to third countries if the requirements of Art. 44 et seq. GDPR are met.
17.2 Canada and the United Kingdom are covered by an adequacy decision of the European Commission (Art. 45 GDPR). For the USA, an adequacy decision applies to companies certified under the EU-U.S. Data Privacy Framework; you can check whether a company is certified at dataprivacyframework.gov/list. With recipients without such a basis, we have agreed the European Commission’s standard contractual clauses (Art. 46(2)(c) GDPR).
17.3 Despite these safeguards, there may be a risk in third countries that authorities access the data and that your rights are harder to enforce.

18) Storage period
18.1 We store personal data only for as long as necessary for the respective purpose or as required by statutory retention periods.
18.2 We store contract and order data until warranty and limitation periods have expired. Thereafter we keep data where commercial and tax law requires it (Section 257 German Commercial Code, HGB; Section 147 German Fiscal Code, AO): books and annual financial statements for ten years, accounting records such as invoices for eight years, commercial and business letters received and sent for six years, in each case from the end of the calendar year. During this time the data is restricted from other uses.
18.3 We store data processed on the basis of consent until you withdraw consent or the purpose no longer applies. We delete data from customer enquiries once the enquiry has been fully dealt with and no retention obligation applies.
18.4 You can view the storage period of individual cookies in your browser settings.

19) Your rights
19.1 Under the GDPR you have the following rights, provided the statutory requirements are met:
– access to the data stored about you (Art. 15 GDPR);
– rectification of inaccurate data (Art. 16 GDPR);
– erasure (Art. 17 GDPR);
– restriction of processing (Art. 18 GDPR);
– data portability (Art. 20 GDPR);
– objection to processing (Art. 21 GDPR, see section 20);
– withdrawal of consent with effect for the future (Art. 7(3) GDPR); this does not affect the lawfulness of processing carried out before withdrawal.
19.2 To exercise your rights, write to service@industrialkonzept.com or to the address in section 1.

20) Right to object
20.1 Where we process your data on the basis of Art. 6(1)(f) GDPR (legitimate interest), you have the right to object to this processing at any time on grounds relating to your particular situation. We will then no longer process your data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.
20.2 Where we process your data for direct marketing, you have the right to object to this processing at any time; this also applies to related profiling. After your objection we will no longer process your data for direct marketing.
20.3 You can object informally, most easily by email to service@industrialkonzept.com or via the unsubscribe link in our emails.

21) Right to lodge a complaint with a supervisory authority
21.1 You have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), in particular in the Member State of your habitual residence, place of work or place of the alleged infringement. The authority responsible for us is the Bavarian State Office for Data Protection Supervision (Bayerisches Landesamt für Datenschutzaufsicht), Promenade 18, 91522 Ansbach, Germany, lda.bayern.de.

22) Version and changes
22.1 Version of this privacy policy: October 2026.
22.2 We update this privacy policy when our data processing or the legal situation changes. The version published on this page applies.