Privacy Policy
Status: English translation · German law applies where stated below · Version: August 2026
1. Controller
The controller responsible for processing personal data on this website is:
ElbeCore – Thomas Hänel
Birkenstraße 46
01328 Dresden
Germany
Email: info@elbecore.de
2. General information on data processing
The protection of your personal data is important to us.
We process personal data only where this is necessary to provide our website, handle enquiries, communicate with prospective customers and customers, or comply with legal obligations.
Personal data means any information relating to an identified or identifiable natural person.
Unless another legal basis is specified below, processing is carried out in particular on the basis of Article 6(1)(f) of the General Data Protection Regulation (GDPR). Our legitimate interest is, in particular, the secure and proper operation of our website and the handling of business enquiries.
3. Access to our website
When you access our website, the web server processes information that is technically necessary.
This may include, in particular:
- IP address
- Date and time of access
- Pages and files accessed
- Amount of data transferred
- Browser type and browser version
- Operating system used
- Referrer URL
- Information about whether the request was successful or resulted in an error
This data is processed to make the website technically available, ensure its security and stability, and detect and prevent misuse.
Our website is hosted by STRATO GmbH. Where STRATO processes personal data on our behalf, this is based on a data processing agreement pursuant to Article 28 GDPR.
The legal basis for processing technically necessary access data is Article 6(1)(f) GDPR.
4. Hosting
Our website is hosted by STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany.
STRATO provides the technical infrastructure, storage space and other services required to operate the website. As part of the hosting service, STRATO may process personal data generated when you visit our website or use our contact options.
Where STRATO acts as a processor, processing is based on a data processing agreement pursuant to Article 28 GDPR.
We use Microsoft 365 / Exchange Online for business email communications. In this context, email addresses, message contents, communication metadata and, where applicable, attachments may be processed. Where Microsoft processes personal data on our behalf, this is governed by the applicable contractual data protection and data processing terms provided by Microsoft.
The location of storage and processing depends on the subscribed service, the tenant location and the relevant configuration settings. Where personal data is transferred to countries outside the European Economic Area in connection with the use of the service, this takes place only subject to the requirements of Articles 44 et seq. GDPR and on the basis of a lawful transfer mechanism.
5. Contact by email
If you contact us by email, we process the personal data you provide to the extent necessary to handle your enquiry.
This may include, in particular:
- Name
- Company
- Email address
- Telephone number, if provided
- Content of your message
- Other information you provide voluntarily
The data is processed to handle your enquiry and for further business communication.
The legal basis is Article 6(1)(b) GDPR where your enquiry is aimed at entering into or performing a contract. In other cases, processing is based on Article 6(1)(f) GDPR.
6. Enquiry form
Our website allows you to send an enquiry to ElbeCore using an electronic enquiry form.
The following information may be transmitted in particular:
- Company
- Contact person
- Email address
- Quantity
- Requested delivery date
- Message
- Technical requirements
- Technical documents and files
The information is processed to handle your enquiry, prepare a quotation and, where applicable, prepare and perform a subsequent business transaction.
The information submitted through the form is technically transmitted to anfrage@elbecore.de.
The legal basis is Article 6(1)(b) GDPR where the enquiry relates to the preparation or performance of a contract. Otherwise, processing is based on Article 6(1)(f) GDPR.
Providing the information is voluntary. However, without the required information, we may be unable to process your enquiry or may only be able to process it incompletely.
7. Technical documents and file uploads
Technical documents, such as drawings, PDF files or other documents required for a quotation enquiry, may be submitted through the enquiry form.
In addition to technical information, these documents may contain personal or confidential information.
Please submit only documents that you are legally entitled to transmit and that are necessary to process your enquiry.
The submitted documents are used for the technical review and processing of the enquiry and are transmitted together with the enquiry to anfrage@elbecore.de.
Documents are not routinely passed on to external manufacturing or business partners. They are shared only where this is necessary for the specific enquiry or subsequent execution of an order and only to the extent required.
8. Confidential information
ElbeCore treats technical and business information submitted through the enquiry form confidentially.
Please note, however, that despite technical safeguards, the transmission of information over the internet can never be completely free of security risks.
For particularly sensitive documents, we recommend using only suitable transmission channels expressly designated by us for this purpose.
9. Recipients of personal data
Personal data is shared only where necessary for one of the following purposes:
- Handling your enquiry
- Preparing a quotation
- Technical review of an enquiry
- Preparing or performing an order
- Complying with legal obligations
- Safeguarding legitimate interests
Potential recipients may include, in particular:
- ElbeCore
- Hosting and IT service providers
- Microsoft as provider of Microsoft 365 / Exchange Online
- Technical service providers
- Selected manufacturing or business partners, where applicable
Technical documents and personal data are not disclosed to third parties without a legitimate reason.
10. Storage period
We store personal data only for as long as necessary for the relevant purpose.
Enquiry data is deleted once the purpose of processing no longer applies and there are no statutory retention obligations or other legitimate reasons for continued storage.
If a business relationship is established as a result of an enquiry, the relevant data may be stored for longer due to statutory commercial and tax retention obligations.
11. Cookies and similar technologies
The website currently reviewed does not include analytics, marketing or tracking services such as Google Analytics, Meta Pixel, Hotjar or Microsoft Clarity.
Where the website uses technically necessary cookies or comparable technologies, these are used solely for the technical operation of the website.
Access to information stored on your device for technically necessary purposes is subject to the requirements of Section 25(2) of the German Telecommunications-Digital Services Data Protection Act (TDDDG). Consent is generally required for access that is not technically necessary.
If analytics, marketing, map, video, newsletter or other external services are integrated in the future, this Privacy Policy will be updated accordingly and consent will be obtained where required.
12. SSL/TLS encryption
Our website uses an encrypted HTTPS connection insofar as this is provided by the SSL/TLS certificate used for the domain.
This protects the transmission of data between your browser and our web server against unauthorised reading by third parties.
13. Your rights
Subject to the statutory requirements, you have in particular the following rights:
- Access: You may request information about whether personal data concerning you is being processed and which data this concerns.
- Rectification: You may request the correction of inaccurate or completion of incomplete personal data.
- Erasure: You may request the erasure of your personal data where the statutory requirements are met.
- Restriction: You may request restriction of processing of your personal data in certain circumstances provided by law.
- Data portability: Subject to the statutory requirements, you may receive personal data you have provided to us in a structured, commonly used and machine-readable format.
- Objection: You may object, on grounds relating to your particular situation, to processing based on Article 6(1)(e) or (f) GDPR.
- Withdrawal of consent: Where processing is based on your consent, you may withdraw that consent at any time with effect for the future.
To exercise your rights, it is sufficient to contact us at info@elbecore.de.
14. Right to lodge a complaint with a supervisory authority
You have the right to lodge a complaint with a data protection supervisory authority regarding the processing of your personal data.
15. No automated decision-making
No automated decision-making, including profiling within the meaning of Article 22 GDPR, currently takes place through this website.
16. Links to external websites
Our website may contain links to external websites. The respective operators are solely responsible for the content and data processing on external websites. When you visit an external website, the privacy provisions of the respective provider apply.
17. Changes to this Privacy Policy
We reserve the right to amend this Privacy Policy if the technical design of our website, the services we use or legal requirements change.
The current version published on this website shall apply.
Translation note: This is an English translation of the German ElbeCore Privacy Policy. References to German law and the statutory provisions cited in the German version have been retained. The German-language version is authoritative. In the event of any discrepancy or ambiguity, the German-language version shall prevail.