Data protection policy

Status: April 2026

1. General Information

The protection of your personal data is of particular importance to us. This privacy policy informs you, in accordance with Articles 12 et seq. GDPR, about the nature, scope, purpose, legal bases and duration of the processing of personal data on our website as well as your rights.

2. Controller

CAITRON GmbH
Gewerbepark Edelweiss No. 4
88138 Weißensberg
Germany
Phone: +49 (0) 8039-9009000
Email: administration@caitron.de

A data protection officer has not been appointed as there is no legal obligation to do so. Please address any data protection enquiries to the contact details above.

3. Definitions

Terms such as 'personal data', 'processing' and 'controller' are used in accordance with the definitions set out in Article 4 GDPR.

4. Rights of Data Subjects

You have the right to access (Article 15 GDPR), rectification (Article 16 GDPR), erasure (Article 17 GDPR), restriction of processing (Article 18 GDPR), data portability (Article 20 GDPR), objection (Article 21 GDPR), withdrawal of consent (Article 7(3) GDPR), and to lodge a complaint with a supervisory authority (Article 77 GDPR).

5. Data Security

We implement appropriate technical and organisational measures in accordance with Article 32 GDPR to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.

6. Hosting and Server Log Files

When visiting our website, the following data is automatically processed in server log files: IP address, date and time of access, browser type and version, operating system, referrer URL and accessed pages. Processing is carried out for the purpose of ensuring technical operation, system security and stability. Legal basis is Article 6(1)(f) GDPR. Data is stored for a maximum of seven (7) days unless longer storage is required for security reasons.

7. Cookies and Consent Management

Our website uses cookies and similar technologies. Technically necessary cookies are set on the basis of Section 25(2) TTDSG. Cookies for analytics and marketing purposes are used only with your explicit consent pursuant to Article 6(1)(a) GDPR and Section 25(1) TTDSG. You may revoke or adjust your consent at any time via our cookie consent tool.

8. Contact Requests

If you contact us by email or contact form, the data provided by you will be processed to handle your request. Legal basis is Article 6(1)(b) GDPR. Data will be deleted after final processing of your request unless statutory retention obligations apply.

9. Job Applications

Personal data of applicants is processed for the purpose of carrying out the application procedure in accordance with Section 26 BDSG. In the event of rejection, data will be deleted after no later than six (6) months unless you have given your consent to longer storage.

10. Google Analytics

This website uses Google Analytics, a web analytics service provided by Google Ireland Limited. Google Analytics is only used with your consent pursuant to Article 6(1)(a) GDPR. IP anonymisation is activated. Data may be transferred to the United States on the basis of EU Standard Contractual Clauses. Despite safeguards, residual risks cannot be completely ruled out.

11. Google Ads Conversion Tracking

We use Google Ads Conversion Tracking to measure the effectiveness of advertising campaigns. Cookies are set only with your consent pursuant to Article 6(1)(a) GDPR.

12. Third Country Transfers

Where services from providers based in third countries (e.g. the USA) are used, personal data may be transferred outside the EU/EEA. Such transfers are carried out on the basis of Article 46 GDPR (EU Standard Contractual Clauses). Nevertheless, it cannot be ruled out that authorities in third countries may access the data.

13. Processors

We use service providers as processors within the meaning of Article 28 GDPR (e.g. hosting providers or IT service providers). Appropriate data processing agreements have been concluded.

14. Storage Period

Personal data will be deleted as soon as the purpose of processing no longer applies and no statutory retention obligations prevent deletion.

15. Updates to this Privacy Policy

This privacy policy will be updated if legal, technical or organisational changes make this necessary. The version published on the website shall apply.