Privacy policy

This English version is a translation provided for convenience. The German version shall prevail.

This privacy policy explains how personal data is processed in connection with the use of this website.

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

WertFels GmbH

Schellingstr. 109a

80798 Munich, Germany

Represented by the managing directors: Parsa Jandaghi, Mariana Telianidi, Dr. Wojtek Stricker

Phone: +49 89 244102321

Email: info@wertfels.com

2. Your rights as a data subject

With regard to your personal data, you generally have the following rights towards us:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object to processing (Art. 21 GDPR)

You also have the right to lodge a complaint with a data protection supervisory authority about our processing of your personal data.

3. General information collected when you visit our website

When you access our website, the browser on your device automatically sends information to our website’s server, where it is temporarily stored in a server log file. The following data is collected without any action on your part and stored until it is deleted automatically:

• IP address of the requesting device
• Date and time of access
• Name and URL of the file accessed
• The website from which access is made (referrer URL)
• The browser used and, where applicable, the operating system of your device

The legal basis for this processing is Art. 6(1)(1)(f) GDPR. Our legitimate interest follows from the purposes listed above (ensuring a smooth connection, convenient use, system security and stability, administrative purposes). The data is deleted after 14 days at the latest unless security-related reasons require longer storage.

4. Hosting

Our website is hosted by Mittwald CM Service GmbH & Co. KG. The servers are located in data centers in Germany. We have concluded a data processing agreement with the hosting provider pursuant to Art. 28 GDPR.

5. Cookies

Our website only uses technically necessary cookies that are required to operate the website. The legal basis is Section 25(2) TDDDG (German Telecommunications Digital Services Data Protection Act) and Art. 6(1)(f) GDPR. We do not use analytics or marketing cookies that would require prior consent.

6. Contacting us

If you contact us via the contact form or by email, we store the data you provide (e.g. name, email address, phone number, message text) to process your inquiry. The legal basis is Art. 6(1)(b) GDPR if the inquiry serves to prepare a contract, otherwise Art. 6(1)(f) GDPR based on our legitimate interest in answering inquiries. The data is deleted as soon as it is no longer needed for the purpose for which it was collected.

7. Protecting our forms against automated access

To protect our forms against misuse by automated access, we use Cloudflare Turnstile, a service of Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. Turnstile checks whether an entry comes from a person or from an automated program. In doing so, your IP address and technical information about your browser and device are transmitted to Cloudflare and evaluated there. According to the provider, Turnstile does not set cookies to recognize users and does not use the data for advertising purposes.

The legal basis is our legitimate interest in protecting our website against automated attacks and spam under Art. 6(1)(f) GDPR.

Data is transferred to the United States in the process. Cloudflare, Inc. is certified under the EU-US Data Privacy Framework. In addition, standard contractual clauses under Art. 46 GDPR are in place. Further information from the provider is available at https://www.cloudflare.com/turnstile-privacy-policy/.

8. Website statistics

We do not use any analytics or statistics services on this website. In particular, Google Analytics and Google Tag Manager are not used. There is no profiling and no cross-site tracking. For the processing of server log files generated when pages are accessed, please refer to section 3 of this policy.

9. Embedded fonts

The fonts used on this website are served locally from our own server. There is no connection to servers of Google or other font providers, and no data is transferred to third parties for this purpose.

10. SSL/TLS encryption

For security reasons, this website uses SSL or TLS encryption. You can recognize an encrypted connection by the browser’s address bar changing from “http://” to “https://”.

11. Changes to this privacy policy

We reserve the right to amend this privacy policy so that it always meets current legal requirements or to reflect changes to our services.

Version as of September 21, 2026