Privacy Policy

1. Controller

The controller within the meaning of the GDPR is:

Harhues & Teufert GmbH
Managing director: Anita Harhues
Am Lindenkamp 41
42549 Velbert, Germany
Email: info@harhues-teufert.de
Phone: +49 2051 3115-0

2. Hosting

This website is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. When you visit the website, Vercel records technically necessary connection data (including IP address, browser type, operating system, referrer URL, time of access) in server log files.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in a secure and stable operation of the website). The data are not combined with other data sources and are deleted automatically after a short time.

Further information is available in the Vercel privacy policy.

3. Vercel Web Analytics

This website uses Vercel Web Analytics (Vercel Inc., USA) to record reach and page views in aggregated form. The service does not set cookies and does not store persistent identifiers on your device. Visitors are distinguished only on a daily basis via a hash derived from the request; the hash is discarded after 24 hours. There is no cross-site tracking.

Recorded data include timestamp, URL visited (without sensitive query parameters), referrer, coarse location (country/region/city), device type and browser and operating system information. The evaluation is used solely to improve and stabilise this website.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in measuring reach and optimising the website). Cookie consent is not required for this service because no cookies are set and no information is stored permanently on your device.

Transfer to the USA: the recipient is Vercel Inc. The transfer is based on standard contractual clauses under Art. 46(2)(c) GDPR or the existing data processing agreement with Vercel (including hosting). Further information: Vercel Web Analytics – Privacy and Vercel’s privacy policy.

You may object to the processing under Art. 21 GDPR (contact details in section 1). Because the data are aggregated and collected without a persistent device identifier, personal attribution is generally not possible.

4. Contact by email, telephone or form

If you contact us by email, telephone or the contact form, your details (name, email address, telephone number if provided, and message content) are stored to process the enquiry and any follow-up questions. We do not disclose these data to third parties without your consent.

Legal basis: Art. 6(1)(b) GDPR (steps prior to entering a contract) or Art. 6(1)(f) GDPR (legitimate interest in handling enquiries). For the contact form we also obtain your consent under Art. 6(1)(a) GDPR.

5. Cookies

This website sets analytics cookies only after your explicit consent (Google Analytics 4). Vercel Web Analytics (section 3) does not use cookies.

If you accept cookies, Google Analytics 4 sets the following cookies in your browser:

• _ga – distinguishes users; lifetime 2 years
• _ga_BM9S68CZVR – stores the session state; lifetime 2 years

You may withdraw your consent at any time with effect for the future. The opt-out stops Google Analytics, deletes the known analytics cookies for this domain and reloads the page. The cookie banner then appears again. The overview and withdrawal control are in the following section.

6. Google Analytics 4

This website uses Google Analytics 4 (GA4), a web analytics service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”), if you have given your consent.

GA4 uses cookies to collect information about your use of this website. The information generated (including pages visited, time spent, browser type) is transmitted to a Google server and stored there. Google uses this information to evaluate your use of the website, compile reports on website activity and provide other services relating to website and internet use.

IP anonymisation: GA4 anonymises IP addresses by default before they are forwarded to Google servers.

Transfer to the USA: Google LLC in the USA is a recipient of the data collected. The transfer is based on standard contractual clauses under Art. 46(2)(c) GDPR. Google LLC is certified under the Data Privacy Framework (DPF).

Legal basis: Art. 6(1)(a) GDPR (consent). Consent is voluntary and may be withdrawn at any time without detriment with effect for the future, as described in section 5.

Storage period: stored data are deleted as soon as they are no longer required for the purpose. Retention follows the Google Analytics settings (14 months by default).

Further information on Google’s privacy practices: policies.google.com/privacy. You can also permanently prevent collection by Google Analytics by installing the Google browser add-on.

7. Handling of personal data

We collect, use and disclose your personal data only where permitted by law or where you consent. Personal data means any information that identifies you – for example your name, email address and telephone number.

Please note that data transmission on the internet can involve security gaps. Complete protection against access by third parties is not feasible.

8. Your rights

You have the following rights vis-à-vis us:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object (Art. 21 GDPR)
• Right to withdraw consent at any time without giving reasons (Art. 7(3) GDPR) – see section 5

To exercise your rights, please contact: info@harhues-teufert.de

You also have the right to lodge a complaint with a supervisory authority. The competent authority for North Rhine-Westphalia is the State Commissioner for Data Protection and Freedom of Information NRW, www.ldi.nrw.de.

9. Status

This privacy policy is currently valid as of September 2026. Changes to this website or to legal or official requirements may make an update necessary. The current version is always available on this page.