Privacy Policy

1. Preamble

Below we provide you with details regarding data protection when you visit our website.

As a general rule, it is possible to use our website without providing any personal data.

Where personal data is collected whilst visiting our website, we process it exclusively in accordance with the General Data Protection Regulation (GDPR), the Federal Data Protection Act (BDSG) and the Telecommunications and Digital Services Data Protection Act (TDDDG).

The processing of personal data takes place exclusively in accordance with this privacy policy.p

This privacy policy applies to the use of the website at the addresses https://btd-ndt.tech. For linked content from other providers, the privacy policy published on the linked website applies.

Please note that security vulnerabilities may arise during data transmission via the internet, which cannot be prevented by the technical design of this website. It is not possible to ensure complete protection of personal data when using the inter h.

2. Definitions

This privacy policy is based on the terminology used by the European legislators and regulators when enacting the General Data Protection Regulation (GDPR). Our privacy policy is intended to be easy to read and understand for the general public as well as for our customers and business partners. To ensure this, we would like to explain the terms used in advance.

In this privacy policy, we use the following terms, amongst others:

Personal data

Personal data is any information relating to an identified or identifiable natural person (hereinafter referred to as the “data subject”). A natural person is regarded as identifiable if they can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

Data subject

A data subject is any identified or identifiable natural person whose personal data is processed by the controller.

Processing

Processing means any operation or set of operations which is carried out on personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, distribution or any other form of making available, the matching or linking, the restriction, erasure or destruction.

Restriction of processing

Restriction of processing means the marking of stored personal data with the aim of restricting its future processing.

Profiling

Profiling means any form of automated processing of personal data consisting of the use of such personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects concerning that natural person’s work performance, economic situation, health, personal preferences, interests, reliability, behaviour, location or movements.

Pseudonymisation

Pseudonymisation is the processing of personal data in such a way that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that this additional information is kept separately and is subject to technical and organisational measures to ensure that the personal data is not attributed to an identified or identifiable natural person.

Data controller

The controller is the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data. Where the purposes and means of such processing are determined by Union law or the law of the Member States, the controller or the specific criteria for its designation may be provided for by Union law or the law of the Member States.

Data processor

A data processor is a natural or legal person, public authority, agency or other body which processes personal data on behalf of the data controller.

Recipient

A recipient is a natural or legal person, public authority, agency or other body to whom personal data are disclosed, irrespective of whether they are a third party or not. However, public authorities which may receive personal data in the course of a specific investigation mandate under Union law or the law of the Member States shall not be regarded as recipients.

Third party

A third party is a natural or legal person, public authority, agency or other body other than the data subject, the controller, the processor and the persons authorised to process the personal data under the direct responsibility of the controller or the processor.

Consent

Consent means any freely given, specific, informed and unambiguous indication of the data subject’s wishes, by a statement or by a clear affirmative action, by which the data subject signifies agreement to the processing of personal data relating to them.

3. Data controller, Article 13(1)(a) of the GDPR

The entity responsible for the processing of personal data in connection with the use of this website is:

Dipl.-Kfm. Sascha Rosenbaum

BTD GmbH
Material Science Campus
Gutensweger Straße 11
39126 Magdeburg
Germany
Phone: +49 202 7192 0
Email: info@karldeutsch.de

4. Data Protection Officer

Our appointed Data Protection Officer is:

Mr Olaf Tenti, Dipl.-Inform.
GDI Gesellschaft für Datenschutz und Informationssicherheit mbH
Alter Schloßweg 30
58119 Hagen
Germany
Phone: +49 (0)2331/356832-0
Email: datenschutz@gdi-mbh.eu
Website: www.gdi-mbh.eu

5. Hosting

Our website is hosted on servers provided by

ALL-INKL.COM – Neue Medien Münnich
Hauptstraße 68
02742 Friedersdorf
Germany.

For further details, please refer to All-Inkl’s privacy policy: https://all-inkl.com/datenschutzinformationen/.

We have entered into a data processing agreement with ALL-INKL.COM.

The temporary storage of the IP address by the hosting provider is necessary to enable the website to be delivered to the user’s computer. For this purpose, your IP address must be stored for the duration of the session.

This data is not combined with other data sources.

The legal basis for data collection is Article 6(1)(f) of the GDPR. Our legitimate interest in collecting this data arises from the purposes stated.

The data will be deleted by the hosting provider as soon as it is no longer required to fulfil the purpose for which it was collected. In the case of data collected for the purpose of providing the website, this is the case once the relevant session has ended.

The collection of data for the purpose of providing the website is strictly necessary for the operation of the website. Consequently, you do not have the option to object.

6. Cookies

We use so-called cookies on our website. These are small text files that are stored on your device and through which certain information may be transmitted to us or, where applicable, to third parties. Cookies serve to technically enable the use of our website, to make it more user-friendly and to optimise content and advertisements.

We use only first-party cookies, which are set and processed directly by our website.

Depending on their storage duration, we distinguish between session cookies, which are stored only for the duration of your visit and are automatically deleted when you close your browser, and persistent cookies, which remain stored on your device beyond the current session until they expire automatically or are deleted by you, and which enable us to recognise your device on your next visit.

From a functional perspective, different categories of cookies are used:

Technically necessary cookies are required to provide the basic functions of our website and to deliver a service you have expressly requested (e.g. page navigation, the login area, the shopping basket function or the storage of cookie settings). Without these cookies, the website cannot operate properly.

In addition – provided you have given your consent – we use functional cookies that enable extended features and personalisation (e.g. saving language settings).

We also use analytics and statistics cookies – solely on the basis of your consent – which enable us to analyse usage patterns on our website and continuously improve our offering.

The processing of personal data in connection with technically necessary cookies is carried out on the basis of Article 6(1)(f) of the GDPR in conjunction with Section 25(2)(2) of the TTDSG, as we have a legitimate interest in the technically fault-free and secure provision of our website and these cookies are strictly necessary for the service you have expressly requested.

Where cookies are not technically necessary, their use is based solely on your consent in accordance with Article 6(1)(a) of the GDPR in conjunction with Section 25(1) of the TTDSG.
You may withdraw this consent to the use of cookies at any time with future effect on our website.

You can also manage cookies used for online advertising and tracking purposes via the preference management tools provided as part of self-regulatory programmes. These include, in particular, the platforms , https://www.aboutads.info/choices/, (USA) and , https://www.youronlinechoices.com/de/praferenzmanagement/, (EU).

Through these pages, you can object to the processing of your data for advertising purposes by many participating providers of usage-based online advertising. Please note that such an opt-out usually applies only to the device or browser in use at the time and must be repeated after cookies have been deleted.

You can also configure your browser so that you are notified when cookies are set and only allow cookies on a case-by-case basis. For example, you can choose to accept or reject third-party cookies separately, block cookies in specific cases or generally, and enable the automatic deletion of cookies when you close your browser.

You can use your browser to delete stored cookies at any time and also to disable cookies altogether. Please note that if you disable cookies completely, the functionality of this website may be restricted and certain services may not be available as intended.

Cookies are stored on your device until you delete them or their respective storage period has expired.

Session cookies are automatically deleted when you close your browser.

Persistent cookies remain on your device for a specified period, but generally no longer than maximum 6 months, unless otherwise stated.

Expired cookies are automatically removed by your browser and are no longer transmitted to our servers. To protect your privacy, we recommend that you regularly check the cookies stored on your device, as well as your browsing history, and delete them where necessary.

6.1. Local Storage/Session Storage cookies

We also use what is known as local storage and session storage technology (also referred to as “local data”, “local storage” and “session storage”), which means we utilise your browser’s storage capacity.

With local storage, data is stored locally in your browser’s cache; this data remains there even after you close the browser window or exit the programme and can be read if you do not actively clear the cache.

Local Storage enables your preferences when using our websites to be stored on your computer and used by you.

The function of session storage is essentially the same as that of local storage as described above, except that the relevant data is automatically removed from your browser’s cache immediately after you close the browser (“session”).

Third parties cannot access the data stored in local storage or session storage. It is not passed on to third parties, nor is it used for advertising purposes. In particular, this technology is used to present our content to you in an appealing graphical format (e.g. pop-up windows, etc.) and to personalise our offering and the navigation on our pages for you.

The data is not combined with any other data (e.g. information from tracking tools, which is also stored separately in local storage).

Certain information and input data are also stored in local storage for transmission to and analysis by tracking tools. This data is used solely to analyse and evaluate visitors’ browsing behaviour. The data stored in local storage is not used for advertising purposes.

Insofar as the use of this technology is necessary for the operation of the website, processing is carried out on the basis of our legitimate interest in being able to provide you with an attractive, fully functional service, pursuant to Article 6(1), sentence 1, point (f) of the GDPR; otherwise, it is carried out on the basis of your consent pursuant to Article 6(1), sentence 1, point (a) of the GDPR .

7. SSL – or TLS encryption

For security reasons and to protect the transmission of confidential content, such as orders or enquiries that you send to us as the website operator, this site uses SSL or TLS encryption. You can recognise an encrypted connection by the fact that the address bar of your browser changes from “https://” to “https://” and by the padlock symbol in your browser bar.
When SSL or TLS encryption is enabled, the data you send to us cannot be read by third parties (end-to-end encryption). These protocols authenticate the communication partner and ensure the integrity of the data being transmitted.

8. Contact options

On our website, you can contact us by email or via the contact form.

In this context, the details you provide via the form or in your email, including the contact details you supply, will be stored and processed by us for the purpose of handling your enquiry and in the event of any follow-up questions. These details (e.g. name, company, address, telephone number, email address) will not be passed on to third parties without your consent.

The data will not be combined with any other data collected on this website.

The data may be stored as part of our Customer Relationship Management (CRM) system, provided you are already a customer of our company.

The contact form is sent using TLS encryption. This encryption is designed to prevent unauthorised access to your personal data by third parties.

The processing of this data is based on Article 6(1), sentence 1, point (b) of the GDPR, provided that your enquiry relates to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective handling of enquiries addressed to us (Article 6(1), sentence 1, point (f) of the GDPR).

The data you have provided will remain with us until you request its deletion, object to its processing, or the purpose for storing the data no longer applies (e.g. once your enquiry has been dealt with). Mandatory legal provisions – in particular retention periods – remain unaffected.

9. Your rights and exercising your rights

You are entitled to the rights listed below. You may exercise these rights by contacting us. To do so, please use the contact details provided above or contact us by email at: info@karldeutsch.de.

Disclosure:

Under Article 15 of the GDPR, you have the right to request information about your personal data processed by us. In particular, you may request information regarding the purposes of processing, the categories of personal data, the categories of recipients to whom your data has been or will be disclosed, the intended storage period, the existence of a right to rectification, erasure, restriction of processing or the right to object, the existence of a right to lodge a complaint, the origin of your data where it was not collected by us, and the existence of automated decision-making, including profiling, and, where applicable, meaningful information regarding its details.

Rectification:

In accordance with Article 16 of the GDPR, you have the right to request, without undue delay, the rectification of inaccurate personal data or the completion of your personal data stored by us.

Erasure:

In accordance with Article 17 of the GDPR, you have the right to request the erasure of your personal data stored by us, unless processing is necessary for the exercise of the right to freedom of expression and information, to comply with a legal obligation, for reasons of public interest, or for the establishment, exercise or defence of legal claims.

Restriction of processing:

Under Article 18 of the GDPR, you have the right to request the restriction of the processing of your personal data where you contest the accuracy of the data, the processing is unlawful but you oppose its erasure, and we no longer require the data but you need it to assert, exercise or defend legal claims, or you have objected to the processing in accordance with Article 21 of the GDPR.

Data portability:

Under Article 20 of the GDPR, you have the right to receive the personal data you have provided to us in a structured, commonly used and machine-readable format, or to request that it be transferred to another controller.

Withdrawal of your consent:

In accordance with Article 7(3) of the GDPR, you have the right to withdraw your consent at any time. As a result, we may no longer continue to process data on the basis of that consent in future. Withdrawal of consent does not affect the lawfulness of processing carried out on the basis of consent prior to its withdrawal.
Please send your withdrawal to the contact details provided above or by email to: info@karldeutsch.de

Right to object:

You have the right, on grounds relating to your particular situation, to object at any time to the processing of personal data concerning you carried out on the basis of Article 6(1), sentence 1, points (e) or (f) of the GDPR; this also applies to profiling based on these provisions.

The controller shall no longer process your personal data unless it can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to establish, exercise or defend legal claims.

Where personal data relating to you is processed for the purposes of direct marketing, you have the right to object at any time to the processing of your personal data for the purposes of such marketing; this also applies to profiling insofar as it is related to such direct marketing.

If you object to processing for the purposes of direct marketing, the personal data concerning you will no longer be processed for those purposes.
In connection with the use of information society services – notwithstanding Directive 2002/58/EC – you have the option of exercising your right to object by means of automated procedures using technical specifications.

Automated decision-making in individual cases, including profiling

You have the right not to be subject to a decision based solely on automated processing – including profiling – which produces legal effects concerning you or similarly significantly affects you. This does not apply if the decision is necessary for the conclusion or performance of a contract between you and the controller, is authorised by Union or Member State law to which the controller is subject and that law provides for appropriate measures to safeguard your rights and freedoms and your legitimate interests, or is based on your explicit consent.

However, such decisions must not be based on special categories of personal data as referred to in Article 9(1) of the GDPR, unless Article 9(2)(a) or (g) of the GDPR applies and appropriate measures have been taken to safeguard your rights and freedoms as well as your legitimate interests.

Lodging a complaint with a supervisory authority:

Under Article 77 of the GDPR, you have the right to lodge a complaint with a supervisory authority. As a general rule, you may contact the supervisory authority for your usual place of residence, your place of work or the location of our registered office.

10. Links to third-party websites

Our website contains links to third-party websites. These websites have their own privacy policies.

We have no influence over the content of these linked websites.

We are not responsible for these websites. However, we have selected them carefully.

If you click on such a link, you will leave our domain and open the external website in your browser. In doing so, data – usually at least your IP address – will be transmitted to the server of the linked website.

If we become aware of any unlawful content, e.g. through notification by a third party, we will remove the link immediately.

11. Status of the privacy policy

The constant development of the internet means that we need to update our privacy policy from time to time. We reserve the right to make such changes at any time.

Status: 6 August 2026