Maschinenteil24 – Gerhard Hölle e.K.
Maybachstraße 5
72348 Rosenfeld
Germany
Last updated: July 2026
1. Data Controller
The controller responsible for the processing of personal data under the General Data Protection Regulation (GDPR) is:
Maschinenteil24 – Gerhard Hölle e.K.
Maybachstraße 5
72348 Rosenfeld
Germany
Phone: +49 7428 79931-0
Email: info@mt24.com
A data protection officer has not been appointed, as there is currently no legal obligation to do so.
2. General Information
Protecting your personal data is important to us. We process personal data solely in accordance with applicable data protection laws, in particular the General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG), and the German Telecommunications-Digital-Services-Data-Protection Act (TDDDG).
Personal data is any information relating to an identified or identifiable natural person.
Processing generally takes place only to the extent this is
- necessary to provide our website,
- necessary to handle inquiries,
- necessary to process orders,
- necessary to fulfill contracts,
- necessary to comply with legal obligations, or
- based on your consent
required.
Our online offering is aimed primarily at commercial customers. Insofar as personal data of contact persons of our business customers is processed, this takes place exclusively within the context of the business relationship.
3. Hosting and Provision of the Website
Our website is hosted by weber.cloud.
When you access our website, technically necessary information is automatically processed. This includes in particular
- IP address
- date and time of access
- browser type and version
- operating system used
- pages accessed
- referrer URL
- access status
- amount of data transferred
This data is necessary to provide the website securely and reliably, to detect errors, and to defend against attacks on our systems.
The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure and trouble-free operation of our website.
This data is stored only as long as necessary for the stated purposes or as required by law.
4. SSL/TLS Encryption
Our website uses SSL/TLS encryption.
This ensures that all data transmitted between your browser and our website is encrypted and protected against unauthorized access by third parties.
You can recognize an encrypted connection by the "https://" in your browser's address bar as well as the lock icon.
5. Contact
If you contact us via our contact form, email, or telephone, we process the data you provide exclusively to handle your inquiry.
This includes in particular
- name
- company
- email address
- phone number
- content of your message
Processing takes place
- to carry out pre-contractual measures or to fulfill a contract pursuant to Art. 6(1)(b) GDPR, or
- based on our legitimate interest in efficient communication pursuant to Art. 6(1)(f) GDPR.
Your data will be deleted once your inquiry has been fully processed and no statutory retention obligations remain.
6. Customer Accounts and Orders
To process orders, we process only the personal data necessary for contract fulfillment.
This includes in particular
- name
- company
- billing address
- shipping address
- email address
- phone number
- order data
- payment information
- shipping information
If you create a customer account, we additionally store your login credentials and order history in order to facilitate future orders.
Processing takes place on the basis of Art. 6(1)(b) GDPR.
Where statutory retention obligations apply, storage additionally takes place on the basis of Art. 6(1)(c) GDPR.
7. Payment and Shipping Processing
To process your order, we share the necessary personal data only with those service providers required for contract fulfillment.
PayPal
If you select PayPal as your payment method, payment processing is carried out by:
PayPal (Europe) S.à r.l. et Cie, S.C.A.
22–24 Boulevard Royal
L-2449 Luxembourg
Only the data necessary for payment processing is transmitted.
Further information can be found in PayPal's privacy policy.
UPS
Our products are shipped primarily via UPS.
The following data is transmitted for this purpose in particular:
- name
- shipping address
- email address (if required)
- phone number (if required)
This data is transmitted exclusively to carry out delivery pursuant to Art. 6(1)(b) GDPR.
8. Cookies and Consent Management
Our website uses cookies and similar technologies. Some of these technologies are technically necessary for our website to function properly. Others are used for statistical analysis or to optimize our online offering.
Technically necessary cookies are used on the basis of Section 25(2) TDDDG as well as Art. 6(1)(f) GDPR.
Analytics and marketing services are activated only after you have given your prior consent. The legal basis for this is Section 25(1) TDDDG in conjunction with Art. 6(1)(a) GDPR.
We use an in-house consent management system to manage your consent choices. You may change or withdraw your consent at any time. Withdrawal takes effect only for the future.
9. Analytics and Marketing Services
To improve our online offering and measure the success of our marketing efforts, we use various services from Google as well as Hotjar.
These services are activated only after you have given prior consent via our consent management system.
Google Tag Manager
To manage and integrate various website services, we use Google Tag Manager, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Google Tag Manager itself does not generally process personal data for analytics or advertising purposes. It serves solely to technically manage other services.
Google Analytics 4
We use Google Analytics 4 for the statistical analysis of our online offering.
This provides us with anonymized or pseudonymized information about how our website is used, for example:
- pages accessed
- time spent on the site
- click behavior
- devices used
- browser information
- approximate location information
This data helps us continuously improve our offering.
Google Ads
We use Google Ads, including conversion tracking, to measure the success of our advertising campaigns.
This allows us to determine whether visitors arrived at our website via a Google ad and performed certain actions, such as placing an order or submitting a contact inquiry.
Google Fonts
We use Google Fonts to ensure a consistent display of typefaces.
Where technically possible, the fonts are hosted locally. Should a connection to Google's servers be necessary, this takes place strictly within the bounds of applicable legal requirements.
Hotjar
We use Hotjar, a web analytics service provided by Hotjar Ltd., Malta.
Hotjar helps us better understand how our website is used and make it more user-friendly.
In particular, the following may be
- mouse movements,
- clicks,
- scrolling behavior,
- screen sizes,
- devices used
- and technical browser information
evaluated on a pseudonymized basis.
Hotjar is used solely to improve our online offering and is activated only with your prior consent.
Data Transfers to Third Countries
When using the services described above, it cannot be ruled out that personal data may be transferred to companies outside the European Union, in particular in the United States.
Should such a transfer occur, it takes place exclusively on the basis of the statutory requirements set out in Art. 44 et seq. GDPR.
Further information on the processing of your data can be found in the respective providers' privacy notices.
10. Retention Period
We generally store personal data only as long as necessary for the respective purposes or as required by statutory retention obligations.
Business and tax-relevant documents are retained in accordance with statutory requirements.
We delete data from contact inquiries once processing has been completed and no legal or contractual grounds prevent deletion.
Customer data is stored for the duration of the business relationship as well as in accordance with statutory retention obligations.
11. Your Rights
Under applicable data protection law, you have in particular the following rights:
- Access to the personal data we process about you (Art. 15 GDPR)
- Rectification of inaccurate or incomplete data (Art. 16 GDPR)
- Erasure of your personal data (Art. 17 GDPR), unless statutory retention obligations apply
- Restriction of processing (Art. 18 GDPR)
- Data portability (Art. 20 GDPR)
- Objection to processing of personal data based on legitimate interests (Art. 21 GDPR)
- Withdrawal of consent given with effect for the future (Art. 7(3) GDPR)
To exercise your rights, an informal message to the contact details listed under Section 1 is sufficient.
Right to Object
Where we process personal data on the basis of legitimate interests pursuant to Art. 6(1)(f) GDPR, you have the right to object at any time to such processing for reasons arising from your particular situation.
If personal data is processed for direct marketing purposes, you may object to such processing at any time without giving reasons.
Right to Lodge a Complaint
You also have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data violates the General Data Protection Regulation.
The supervisory authority responsible for our company is in particular:
The State Commissioner for Data Protection and Freedom of Information Baden-Württemberg
Lautenschlagerstraße 20
70173 Stuttgart
Germany
Current information can be found at:
https://www.baden-wuerttemberg.datenschutz.de
12. Data Security
We take appropriate technical and organizational measures to protect your personal data against loss, manipulation, unauthorized access, or other unlawful processing.
Our security measures are regularly reviewed and updated in line with the state of the art.
These measures include in particular:
- SSL/TLS encryption
- access restrictions on personal data
- regular data backups
- technical and organizational safeguards against unauthorized access
13. Changes to This Privacy Policy
We reserve the right to amend this privacy policy where necessary due to technical developments, changes in the law, or the introduction of new services.
The version published on our website shall apply.
Last updated: July 2026
