Privacy Policy
This is a courtesy translation. The German version is legally binding.
Privacy Policy
Privacy policy pursuant to Art. 13, 14 GDPR and § 25 TTDSG
We, die Trendsetzerei GmbH, take the protection of your personal data very seriously and strictly observe the rules of the applicable data protection laws, in particular the General Data Protection Regulation (GDPR) and the TTDSG (German Telecommunications Digital Services Data Protection Act).
This statement informs you, pursuant to Art. 13 and 14 GDPR as well as § 25 TTDSG, about how your data is processed and about your rights as a data subject.
Personal data is only collected, processed and passed on where this is permitted by law or where you have given your consent.
Last updated: July 2026
Data Controller
The controller within the meaning of the GDPR responsible for the processing of personal data on this website is:
die Trendsetzerei GmbH
Marc Zimmermann (Managing Director)
Carl-Legien-Str. 15 · 63073 Offenbach am Main · Germany
Phone: +49 69 201 65 001
For data protection enquiries, please contact the address above using the subject line “Data protection”.
What is personal data?
Personal data means “individual details about the personal or factual circumstances of an identified or identifiable natural person” – for example your name, address, email, telephone number or IP address.
Your data is only collected, processed and passed on where this is permitted by law or where you have given your consent.
Nature and Scope of Data Processing
1. Automatically collected data (server log files)
Purpose: Provision and security of the website
Legal basis: Art. 6 (1) lit. f GDPR (legitimate interests)
Data collected:
- IP address (anonymised)
- Browser type and version
- Operating system
- Referrer URL
- Date and time of access
- Pages visited
Retention period: 7 days, then automatic deletion
2. Contact form
Purpose: Processing of your enquiry
Legal basis: Art. 6 (1) lit. a GDPR (consent)
Data collected: surname, first name, email address, message content, further voluntary details
Retention period: Until your enquiry has been fully processed, max. 3 years
3. Hosting
Purpose: Provision of the website infrastructure
Legal basis: Art. 6 (1) lit. f GDPR (legitimate interests)
Hosting provider: MOBYLON® – Agentur für digitale Kommunikation
Data collected: IP address, access data, technical information, log files
Retention period: In accordance with statutory requirements
Contact
The data you enter in the contact form (name, email) is sent to us for the purpose of processing your enquiry and is stored for as long as necessary; it is then deleted. Fields marked as optional help us to understand your enquiry in more detail.
You may withdraw any consent at any time with effect for the future – to do so, please contact:
Google Analytics
With your consent, we use Google Analytics, a web analytics service provided by Google Ireland Limited. Google Analytics uses cookies to analyse how the website is used. The information generated is typically transferred to Google servers in the USA.
IP addresses: Google Analytics 4 does not store IP addresses. They are used solely to determine an approximate location and are discarded afterwards. Data originating in the European Economic Area is collected via servers located in the EU.
Data processing
Legal basis: Art. 6 (1) lit. a GDPR
Recipient: Google Ireland Limited
Third country: USA. Google LLC is certified under the EU-US Data Privacy Framework (adequacy decision of the European Commission of 10 July 2023). The EU standard contractual clauses apply in addition.
Retention period: 14 months
Opt-out
- Withdraw your consent via the cookie banner
- Install the browser add-on
- Adjust your browser settings
Spam Protection
To prevent our forms from being misused by automated programs to send advertising, we use spam protection. It runs entirely on our own server: no data is transmitted to third parties and no cookies are set. You will not notice it and you do not have to do anything.
In doing so, we check whether an enquiry comes from a human being and assess the message text for characteristics typical of unsolicited bulk messages.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest: protecting our forms against misuse)
Data processed: the details you enter in the form, together with your IP address and the time of the request, that is, information which arises with every visit to our website in any case. No analysis of your behaviour takes place and no recognition identifier is stored.
Third country: no transfer. The spam protection runs exclusively on the server hosting this website.
Your Rights as a Data Subject
You have the following rights regarding your personal data:
Right of access (Art. 15)
Right to information about how your data is processed
Right to rectification (Art. 16)
Right to have inaccurate data corrected
Right to erasure (Art. 17)
Right to erasure (“right to be forgotten”)
Right to restriction (Art. 18)
Right to restriction of processing
Data portability (Art. 20)
Right to receive your data in a structured format
Right to object (Art. 21)
Right to object to the processing of your data
Withdrawal of consent
Right to lodge a complaint (Art. 77 GDPR)
You have the right to lodge a complaint with a data protection supervisory authority.
Competent authority:
Der Hessische Beauftragte für Datenschutz und Informationsfreiheit (Hessian Commissioner for Data Protection and Freedom of Information)
Gustav-Stresemann-Ring 1 · 65189 Wiesbaden
poststelle@datenschutz.hessen.de
Data Security
We use technical and organisational measures to protect your data against manipulation, loss, destruction and unauthorised access.
Technical measures
- SSL/TLS encryption
- Secure server infrastructure
- Regular security updates
- Firewalls and intrusion detection
Organisational measures
- Access controls
- Staff training
- Data processing agreements
- Data protection impact assessments
Embedding of Third-Party Services
We embed third-party content and services on our website. This requires the providers to be able to perceive users’ IP addresses, as without them they could not send the content to the browser.
Google Maps
Our website uses the Google Maps API to display geographical information.
Provider: Google Ireland Limited
Legal basis: Art. 6 (1) lit. f GDPR (legitimate interests)
Google Fonts
To display fonts correctly, we use Google web fonts (Google Ireland Limited). When you access a page, your browser loads the required fonts into its cache.
Legal basis: Art. 6 (1) lit. f GDPR
YouTube / Vimeo videos
We embed videos from the platforms YouTube and Vimeo. When a video is played, data (including your IP address) may be transferred to the respective servers.
YouTube: Google Ireland Limited – Privacy policy
Vimeo: 555 West 18th Street, New York, NY 10011 – Privacy policy
Commissioned Processing and Disclosure
If, in the course of our processing, we transfer data to other persons and companies (processors or third parties), this only takes place on the basis of a legal permission, with your consent, due to a legal obligation or on the basis of legitimate interests.
If third parties are commissioned to process data, this is done on the basis of Art. 28 GDPR. Data transfers to third countries (outside the EU/EEA) only take place on the basis of suitable guarantees pursuant to Art. 44 et seq. GDPR.
Changes to this Privacy Policy
We reserve the right to amend this statement as necessary in order to adapt it to changes in the legal situation or to changes to our services. We recommend reading it regularly to stay informed about how the information collected is protected.
Online Dispute Resolution
The European Commission provides a platform for online dispute resolution (ODR): https://ec.europa.eu/consumers/odr/
We are neither willing nor obliged to participate in dispute resolution proceedings before a consumer arbitration board.