mueller-luftfeder-logo-weiss
  • Deutsch
    • Get in touch

    Privacy Policy

    Privacy Policy

    This website is deliberately kept lean: no tracking and no embedded third-party analytics or advertising services. Below you can find out what data is nevertheless collected and what happens to it.

    Data Controller

    The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

    Müller Luftfeder GmbH
    Stockholmer Str. 10
    48455 Bad Bentheim
    Germany

    Represented by Managing Director Gerd Schütte
    Telephone: +49 5924 7878-20
    Email: info@mueller-luftfeder.de

    1. Hosting

    This website is hosted by an external service provider. The personal data collected when the website is accessed is stored on that provider's servers. The provider is:

    ALL-INKL.COM – Neue Medien Münnich
    Proprietor: René Münnich
    Hauptstraße 68, 02742 Friedersdorf, Germany

    The servers are located in Germany. This is carried out on the basis of Article 6(1)(f) GDPR. We have a legitimate interest in the secure and reliable provision of our website. We have entered into a data processing agreement with the provider pursuant to Article 28 GDPR.

    2. Server Log Files

    When you access this website, the hosting provider automatically collects information transmitted by your browser. This includes:

    • browser type and version
    • operating system used
    • referrer URL (the previously visited page)
    • host name of the accessing device
    • time of the server request
    • IP address

    This data is not combined with data from other sources. The legal basis for processing is Article 6(1)(f) GDPR: we have a legitimate interest in the technically error-free presentation and security of our website. The log files are deleted after seven days at the latest, unless they are needed to investigate a specific security incident.

    3. Security Firewall (Wordfence)

    To protect this website against unauthorised access, attacks and malware, we use the security plugin Wordfence. It includes a firewall and a malware scanner and processes, among other things, IP addresses and information about access attempts in order to detect and block suspicious activity.

    Provider: Defiant Inc., 800 5th Ave., Suite 4100, Seattle, WA 98104, USA

    The "Participate in the Real-Time Wordfence Security Network" feature is disabled on our site. As a result, no visitor data is transmitted to Defiant Inc.'s servers in the USA. The processing of IP addresses for the purpose of threat detection takes place exclusively on our own server at ALL-INKL (see Section 1) and remains there.

    Wordfence sets its own cookie only for users logged into the administration area of our website, not for ordinary website visitors.

    The legal basis is our legitimate interest in the security and functionality of our website and in protection against attacks (Article 6(1)(f) GDPR).

    Further information can be found in Wordfence's privacy policy: wordfence.com/privacy-policy.

    4. Website Maintenance and Monitoring (WP Umbrella)

    For the technical monitoring, maintenance and backup of this website, we use the service WP Umbrella. This allows us to check the website's availability (uptime) and performance, manage updates to WordPress, plugins and themes, and create automatic backups.

    Provider: Liven Studio, 22 B Rue de la République, 69140 Rillieux-la-Pape, France

    This primarily involves the processing of technical and administrative data (e.g. system status, update and backup information, and admin login credentials). No targeted processing of personal visitor data takes place. WP Umbrella's servers and databases are located within the European Union, meaning no transfer to a third country is involved.

    The legal basis is our legitimate interest in the secure, functional and up-to-date operation of our website (Article 6(1)(f) GDPR). We have entered into a data processing agreement with the provider pursuant to Article 28 GDPR.

    Further information can be found in WP Umbrella's privacy policy: wp-umbrella.com/de/privacy-policy.

    5. Cookies

    This website uses a single, functionally necessary cookie for language switching (see Section 6). No web analytics and no tracking take place. No analytics services, advertising networks, social media plug-ins or chat widgets are embedded.

    As this is a purely functional cookie with no marketing or tracking purpose, no separate consent is required under Section 25(2) of the German Telecommunications-Telemedia Data Protection Act (TTDSG); a cookie consent banner is therefore not displayed. You may delete this cookie at any time via your browser settings; the website will continue to function, though it may display the default language again on your next visit.

    6. Language Switching (Polylang)

    To display this website in multiple languages, we use the plugin Polylang. When you switch languages or visit the site, Polylang sets a functional cookie that stores your language preference so that the language you last selected is displayed automatically on your next visit.

    Provider: WP SYNTEX, 28, rue Jean Sébastien Bach, 38090 Villefontaine, France

    Cookie name: pll_language

    Purpose: storing the selected language

    Storage period: up to 1 year

    The stored data is not shared with third parties. The legal basis is our legitimate interest in presenting our content in a user-friendly, multilingual manner (Article 6(1)(f) GDPR).

    Further information can be found in Polylang's privacy policy: polylang.pro/privacy-policy.

    7. Fonts

    The fonts used are stored locally on our server and loaded from there. There is no connection to Google's servers or those of any other provider. Your IP address is not transmitted to any third party in this respect.

    8. Contact by Email or Telephone

    If you contact us by email or telephone, your details will be stored by us in order to process your enquiry and in case of any follow-up questions.

    The legal basis is Article 6(1)(b) GDPR, provided your enquiry relates to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, processing is based on our legitimate interest in the effective handling of enquiries (Article 6(1)(f) GDPR).

    9. Contact Form

    Using the form on our contact page, you can send us an enquiry. The data entered there — subject, company, name, email address, telephone number where provided, country, quantity, vehicle details and your message — is processed on our server and delivered to our mailbox by email. No storage in a database takes place.

    Submitting the form requires your express consent (Article 6(1)(a) GDPR). Processing is additionally based on Article 6(1)(b) GDPR, as your enquiry is typically directed towards the initiation of a contractual relationship. You may withdraw your consent at any time, informally — an email to us is sufficient. The lawfulness of processing carried out prior to your withdrawal remains unaffected.

    To protect against automated spam submissions, the form contains an additional field that is invisible to you. If this field is filled in, we discard the message. No personal data is evaluated and no external services are involved in this process.

    The data remains with us until you ask us to delete it, withdraw your consent, or the purpose of storage no longer applies. Mandatory statutory retention periods — in particular under commercial and tax law — remain unaffected.

    10. Invoicing and Workshop Software

    For order processing as well as the preparation of quotations and invoices, we use workshop management software provided by an external provider. Should your enquiry result in a business transaction, the data required for this — essentially company name, contact person, address and contact details as well as details of the vehicle and the order — is transferred to that provider.

    Provider: Werbas KSR GmbH
    Address: Max-Eyth-Str. 42, 71088 Holzgerlingen, Germany
    Place of processing: Germany

    The legal basis is Article 6(1)(b) GDPR (performance of a contract) as well as Article 6(1)(c) GDPR, insofar as we are legally obliged to retain the data. We have entered into a data processing agreement with the provider pursuant to Article 28 GDPR.

    11. Office and Email Software (Microsoft)

    For internal office communication as well as for email, word processing and spreadsheet purposes, we use software from Microsoft (Word, Excel, Outlook). If this is used as a Microsoft 365 subscription, personal data from your correspondence with us (e.g. emails, attachments) may also be processed on servers operated by Microsoft Corporation or Microsoft Ireland Operations Limited; this may involve a transfer of data to the USA.

    The legal basis is our legitimate interest in a functioning and efficient office organisation (Article 6(1)(f) GDPR). For transfers to the USA, Microsoft states that it relies on the EU-US Data Privacy Framework and/or the European Commission's Standard Contractual Clauses as appropriate safeguards under Article 46 GDPR.

    Further information can be found in Microsoft's privacy statement: privacy.microsoft.com.

    12. Recipients of Data

    Your data is only disclosed to third parties where this is necessary to fulfil our contractual or statutory obligations. Recipients may include:

    • our hosting and email provider (see Section 1)
    • the provider of our maintenance solution, WP Umbrella/Liven Studio (see Section 4)
    • the provider of our language switching function, Polylang/WP SYNTEX (see Section 6)
    • the provider of our workshop software (see Section 10)
    • Microsoft, where Microsoft 365 is used (see Section 11)
    • our tax adviser and tax authorities, as required by statutory obligations
    • in the case of technical assessments, the relevant testing organisation involved, where necessary for your enquiry

    No sale or disclosure of data for advertising purposes takes place.

    13. Storage Period

    Unless a more specific period is stated elsewhere in this policy, your personal data remains with us until the purpose of processing no longer applies. If you assert a legitimate request for erasure or withdraw your consent, the data will be deleted, provided no legally permissible grounds for retention exist. Statutory retention periods under commercial and tax law are generally six and ten years respectively; the data is deleted once these periods have expired.

    14. Your Rights

    Under the GDPR, you have the following rights:

    • Access to the data stored about you (Article 15 GDPR)
    • Rectification of inaccurate data (Article 16 GDPR)
    • Erasure (Article 17 GDPR)
    • Restriction of processing (Article 18 GDPR)
    • Data portability (Article 20 GDPR)
    • Withdrawal of consent given, with effect for the future (Article 7(3) GDPR)

    For any of these matters, an informal message to info@mueller-luftfeder.de is sufficient.

    15. Right to Object under Article 21 GDPR

    Where data processing is based on Article 6(1)(e) or (f) GDPR, you have the right, at any time and for reasons arising from your particular situation, to object to such processing.

    If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

    Where your data is processed for direct marketing purposes, you have the right to object at any time, without giving reasons. Your data will then no longer be used for that purpose.

    16. Right to Lodge a Complaint with the Supervisory Authority

    You have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for our registered office is:

    Der Landesbeauftragte für den Datenschutz Niedersachsen
    (Data Protection Officer for the State of Lower Saxony)
    Prinzenstraße 5, 30159 Hannover, Germany
    Telephone: +49 511 120-4500
    www.lfd.niedersachsen.de

    17. Encryption

    For security reasons, this website uses SSL or TLS encryption. You can recognise an encrypted connection by the fact that the browser's address bar begins with https://. When encryption is active, data transmitted to us cannot be read by third parties.

    18. No Obligation to Provide Data

    Providing your data via the contact form is neither legally nor contractually required. However, without the details marked as mandatory fields, we are unable to process your enquiry. You may always reach us by telephone as well.

    19. Amendments to this Privacy Policy

    We will amend this privacy policy as and when the legal situation or the data processing carried out on our website changes. The version available at the time of your visit shall apply.

    Last updated: July 2026