SOMMER Group
English / International

Data protection declaration

1. General Information

The protection of your personal data is of particular importance to us. We process your data exclusively in accordance with the applicable statutory provisions, in particular the General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG), and the Telecommunications Digital Services Data Protection Act (TDDDG).

2. Controller

SOMMER Antriebs- und Funktechnik GmbH
Hans-Böckler-Straße 27
73230 Kirchheim unter Teck
Email: info@sommer.eu

3. Data Protection Officer

Email: datenschutz@sommer.eu

By post:
SOMMER Antriebs- und Funktechnik GmbH
Attn: Data Protection Officer
Hans-Böckler-Straße 27
73230 Kirchheim unter Teck

4. Server Log Files

When you access our website, the following data is automatically collected:

  • IP address (truncated)
  • Date and time
  • Requested files
  • HTTP status code
  • Referrer URL
  • Browser and operating system

Legal basis: Art. 6 (1) (f) GDPR
Storage period: maximum of 14 days

5. Contacting Us

If you contact us (e.g. by email, telephone, contact form or chat), we process your data to handle your inquiry and for any follow-up questions.

Legal bases:

  • Art. 6 (1) (b) GDPR
  • Art. 6 (1) (f) GDPR

Storage period: after the request has been fully processed and once any applicable statutory retention obligations have expired.

6. Cookies and Consent Management

Our website uses cookies and similar technologies.

  • Strictly necessary cookies
  • Analytics cookies
  • Marketing cookies

The storage of information in your end device is carried out on the basis of Section 25 TDDDG. Non-essential cookies are only set with your consent (Art. 6 (1) (a) GDPR).

Details of all cookies used (name, purpose, provider and storage duration) can be viewed and managed at any time in our consent tool.

Consent tool:
CookieFirst (Digital Data Solutions B.V., Netherlands)

  • Truncated IP address
  • Browser and device data
  • Time of consent

Legal basis: Art. 6 (1) (c) GDPR in conjunction with Section 25 TDDDG
Storage period: up to 12 months

7. Hosting

Our website is hosted by SpaceNet AG, Munich, Germany.

All data required for the operation of the website is processed as part of the hosting services.

Legal basis: Art. 6 (1) (f) GDPR
A data processing agreement (DPA) has been concluded.

8. Recipients and Third-Country Transfers

Recipients of personal data include in particular:

  • Hosting provider (SpaceNet AG)
  • Consent management provider (CookieFirst)
  • Analytics and marketing services (Google Analytics, Google Ads)
  • Communication services (Superchat, WhatsApp)

Transfers to third countries (e.g. the United States) only take place in compliance with applicable legal requirements (e.g. standard contractual clauses or the EU–US Data Privacy Framework).

Note: Data transfers to the United States may involve risks of access by public authorities without adequate legal remedies.

9. Webchat and WhatsApp (Superchat)

We use the communication service Superchat (SuperX GmbH, Berlin).

  • Name
  • Phone number
  • Content of messages
  • Metadata

Legal bases:

  • Art. 6 (1) (b) GDPR
  • Art. 6 (1) (a) GDPR

When using WhatsApp, additional data processing is carried out by WhatsApp Ireland Limited (Meta Platforms). Personal data may be transferred to third countries, in particular the United States.

The use of WhatsApp is voluntary. Alternatively, you may contact us via email or telephone.

10. Google Analytics

We use Google Analytics (Google Ireland Limited) to analyse the use of our website.

  • IP anonymisation is enabled
  • Data may be transferred to the United States
  • Google is certified under the EU–US Data Privacy Framework

Legal basis: Art. 6 (1) (a) GDPR
Storage period: 14 months

11. Google Ads

We use Google Ads and conversion tracking.

Legal basis: Art. 6 (1) (a) GDPR

12. Google Tag Manager

The Google Tag Manager itself does not process personal data but facilitates the integration of services that may process personal data.

13. YouTube

We embed YouTube videos using the enhanced privacy mode.

When videos are played, data may be transmitted to Google.

Legal basis: consent

14. Friendly Captcha

  • IP address (truncated)
  • Browser data
  • Task values

Legal basis: Art. 6 (1) (f) GDPR
Purpose: protection against spam and misuse

15. Encryption

This website uses SSL/TLS encryption.

16. Storage Period

Personal data is deleted as soon as the purpose of processing no longer applies and no statutory retention obligations exist.

17. Applicant Data

Processing is based on Art. 88 GDPR in conjunction with Section 26 BDSG.
Storage period: maximum of 6 months.

18. Obligation to Provide Data

The provision of personal data is partly required. Without this data, processing of your request may not be possible.

19. Your Rights

  • Right of access
  • Right to rectification
  • Right to erasure
  • Right to restriction of processing
  • Right to data portability
  • Right to object

20. Right to Lodge a Complaint

State Commissioner for Data Protection Baden-Württemberg
Königstraße 10a
70173 Stuttgart
https://www.baden-wuerttemberg.datenschutz.de/

21. Withdrawal of Consent

You may withdraw your consent at any time with effect for the future.

22. Automated Decision-Making

No automated decision-making takes place.

23. Last updated

Last updated: June 2026