Privacy Policy
Last updated: July 2026
This privacy policy explains how we process personal data when you visit our website, contact us or place an order in our online shop.
1. Controller
Ingenieurbüro Grafe
Ralf Grafe
Hammersteinstraße 3
47807 Krefeld
Germany
Telephone: +49 172 2941773
Email: [email protected]
2. Data Protection Officer
The Data Protection Officer is:
Ralf Grafe
Ingenieurbüro Grafe
Hammersteinstraße 3
47807 Krefeld
Germany
Email: [email protected]
3. Hosting and server log data
This website is hosted by IONOS SE, Elgendorfer Straße 57, 56410 Montabaur, Germany. IONOS processes personal data on our behalf where this is necessary to provide and operate the website securely.
When the website is accessed, server log files may contain information such as the IP address of the accessing device, date and time of access, requested pages or files, data volume transferred, access status, browser, operating system and referrer URL.
This processing is necessary for technical delivery, stability, security, fault analysis and the prevention of misuse. The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is the secure and reliable operation of this website.
Log data is deleted when it is no longer required for these purposes, unless longer storage is necessary to investigate a security incident or to comply with legal obligations.
4. Technically necessary cookies and similar storage technologies
Our website uses only technically necessary cookies and comparable storage technologies where these are required to operate the website and online shop. These include functions for the shopping basket, session, checkout, login and language selection.
WooCommerce may use the following technically necessary cookies in particular:
woocommerce_cart_hashandwoocommerce_items_in_cartto recognise changes to the shopping basket,wp_woocommerce_session_*to assign a shop session and the associated shopping basket,- other session or login cookies where the relevant function is used.
These storage operations are necessary to provide the shop functions expressly requested by you. The legal basis for access to your device is section 25(2)(2) TDDDG. Where personal data is processed, the legal basis is Article 6(1)(b) GDPR for pre-contractual measures or contract performance, or Article 6(1)(f) GDPR based on our legitimate interest in operating a functional online shop.
We do not use analytics, marketing or tracking cookies.
5. Contact and contact form
If you contact us by email, telephone or through the contact form, we process the information you provide. This may include your name, email address, telephone number, subject and the content of your message.
We process this information to respond to your enquiry and deal with any follow-up questions. For enquiries relating to a contract, the legal basis is Article 6(1)(b) GDPR. For other enquiries, the legal basis is Article 6(1)(f) GDPR. Our legitimate interest is responding to communications addressed to us.
We delete the data once the enquiry has been fully dealt with and there are no statutory retention obligations or other legitimate reasons for continued storage.
6. Customer account
If you create a customer account, we process the master data, contact details, address details and order data you enter in order to provide the account and make future orders easier. The legal basis is Article 6(1)(b) GDPR.
You may request deletion of your customer account. Data relating to completed orders remains stored where statutory retention obligations apply.
7. Orders and contract processing
When you place an order, we process in particular your name, billing and delivery address, email address, telephone number where provided, ordered products, prices, payment information and order, invoice and shipping data.
We process this data to carry out pre-contractual measures, process your order, deliver the goods, issue invoices and deal with warranty or cancellation matters. The legal basis is Article 6(1)(b) GDPR. Where processing is necessary to comply with commercial or tax obligations, the legal basis is Article 6(1)(c) GDPR.
The information required to enter into a contract must be provided. Without it, we cannot process the order.
8. Payment processing with PayPal
If you select PayPal as your payment method, we transfer the order and payment data required for processing to PayPal (Europe) S.à r.l. et Cie, S.C.A., Luxembourg.
PayPal processes this data under its own responsibility and may use it for payment processing, identity checks, fraud prevention and risk assessment. The legal basis for our transfer is Article 6(1)(b) GDPR.
Further information is available in PayPal’s Privacy Statement.
9. Shipping with DHL
To deliver your order, we transfer the recipient, address and shipment data required for shipping to DHL. Depending on the shipping contract, processing is carried out by DHL Paket GmbH or Deutsche Post AG, Charles-de-Gaulle-Straße 20, 53113 Bonn, Germany.
The legal basis is Article 6(1)(b) GDPR. An email address or telephone number is transferred only where this is necessary for delivery or where you request or consent to an additional delivery notification.
10. Recipients and processors
Personal data is disclosed only to recipients who require it for the purposes described above. These include IONOS as hosting and IT service provider, PayPal as payment service provider, DHL or Deutsche Post as shipping provider and, where necessary, tax advisers, accounting service providers, public authorities or courts.
Processors acting on our behalf are contractually bound in accordance with Article 28 GDPR.
11. Storage period
We store personal data only for as long as it is required for the relevant purpose. Contract, order, invoice and payment data is retained in accordance with commercial and tax-law retention obligations. After the relevant periods expire, the data is deleted unless it remains necessary for contract processing, the establishment or defence of legal claims, or another legal basis applies.
12. Data security
This website uses an encrypted HTTPS connection. We take appropriate technical and organisational measures to protect personal data against loss, alteration and unauthorised access. However, absolute security cannot be guaranteed for data transmitted over the internet.
13. Your rights
Subject to the applicable legal requirements, you have the right to access, rectification, erasure, restriction of processing, data portability and objection to processing based on Article 6(1)(f) GDPR. You may withdraw consent at any time with effect for the future.
To exercise your rights, please contact [email protected].
14. Right to lodge a complaint
You have the right to lodge a complaint with a data protection supervisory authority. The authority generally responsible for our business is:
State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia
Kavalleriestraße 2–4
40213 Düsseldorf
Germany
Telephone: +49 211 38424-0
Email: [email protected]
15. Changes to this privacy policy
We update this privacy policy when the website, the services used or the legal requirements change. The version published on this page applies.