Privacy Policy | SCU Group Europe

1. Controller

Ladeengel – Oliver Kalz e.K.
Owner: Oliver Kalz

Wanninchener Str. 8
15926 Luckau, OT Görlsdorf
Germany

Phone: 03544 / 55 58 51

2. Overview of Data Processing

The following overview summarises the types of data processed and the purposes of their processing, and refers to the data subjects concerned:

Master data – name, company, address
Contact data – email address, phone number
Content data – message content from contact forms
Usage data – pages visited, access times, referrer URLs
Meta/communication data – IP addresses, device information, browser type

3. Relevant Legal Bases

Below you will find an overview of the legal bases of the GDPR on which we process personal data:

Consent (Art. 6(1)(a) GDPR) – The data subject has given consent to the processing of their personal data for one or more specific purposes.
Contractual performance and pre-contractual enquiries (Art. 6(1)(b) GDPR) – Processing is necessary for the performance of a contract to which the data subject is party, or for the implementation of pre-contractual measures.
Legitimate interests (Art. 6(1)(f) GDPR) – Processing is necessary for the purposes of the legitimate interests pursued by the controller or a third party, unless such interests are overridden by the interests or fundamental rights and freedoms of the data subject.

4. Security Measures

We take appropriate technical and organisational measures in accordance with the legal requirements, taking into account the state of the art, the costs of implementation, and the nature, scope, circumstances and purposes of the processing, as well as the varying likelihood and severity of the risk to the rights and freedoms of natural persons, in order to ensure a level of protection appropriate to the risk.

These measures include, in particular, safeguarding the confidentiality, integrity and availability of data by controlling physical and electronic access to the data, as well as access, input, disclosure, availability assurance and separation of data. Furthermore, we have established procedures to ensure the exercise of data subject rights, the deletion of data and responses to data threats.

5. SSL/TLS Encryption

For security reasons, this website uses SSL/TLS encryption (HTTPS). You can recognise an encrypted connection by the browser address bar changing from "http://" to "https://" and by the lock icon in the browser bar. When SSL/TLS encryption is activated, the data you transmit to us cannot be read by third parties.

6. Transfer of Personal Data to Third Countries

In the course of our data processing, data is transferred to third countries (i.e. countries outside the EU/EEA). This occurs in connection with hosting by Netlify, Inc. (USA), the processing of contact form data, and – once activated – the use of Google services (Google Ads, YouTube).

The transfer is based on the EU Standard Contractual Clauses (SCC) pursuant to Art. 46(2)(c) GDPR or on the basis of an adequacy decision pursuant to Art. 45 GDPR (EU-U.S. Data Privacy Framework). Details can be found at: https://www.netlify.com/gdpr-ccpa/

7. Hosting

This website is hosted by Netlify, Inc. (44 Montgomery Street, Suite 300, San Francisco, CA 94104, USA).

When you visit our website, the following data is automatically stored in server log files:

IP address of the requesting device
Date and time of access
Name and URL of the requested file
Browser and operating system used
Referrer URL (previously visited page)

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in the technical provision and security of the website). Server log files are automatically deleted after 30 days.

8. Cookies

This website uses no cookies. Neither first-party nor third-party cookies are set. A cookie banner is therefore not required.

Should we use cookies in the future (e.g. in connection with advertising measures or the activation of Google Ads Conversion Tracking), we will update this privacy policy accordingly and implement a cookie consent banner.

9. Contact Form and Business Communication

When you contact us via the contact form, by email or by telephone, your details (name, email address, company, phone number, message) are stored for the purpose of processing your enquiry.

Form data is processed via Netlify Forms and forwarded to us by email. Netlify stores data encrypted on servers in the USA (secured by EU Standard Contractual Clauses).

Legal basis: Art. 6(1)(b) GDPR (performance of pre-contractual measures at the request of the data subject). For existing customers: Art. 6(1)(f) GDPR (legitimate interest in responding to enquiries).

Form data is deleted after the enquiry has been completed or after 12 months at the latest, unless statutory retention obligations (e.g. commercial or tax law retention obligations of up to 10 years) require otherwise.

10. Web Analytics

We intend to use Plausible Analytics for web analytics. Until activation, no analytics data is collected. Plausible is a privacy-friendly analytics tool that:

Uses no cookies
Does not collect personal data
Is fully GDPR-compliant
Processes data exclusively on servers within the EU

No individual user profiles are created. Data is stored in aggregated and anonymised form. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in the anonymised analysis of website usage to improve our offering).

11. Google Ads and Conversion Tracking

We intend to use Google Ads by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) to promote our website through advertisements in Google search results and on third-party websites. Until activation, no data is transmitted to Google.

Once Google Ads is activated, a so-called conversion cookie is placed on your device when you reach our website via a Google advertisement. This cookie expires after 30 days and is not used for personal identification. It merely allows us to recognise whether certain sub-pages (e.g. the contact page) have been visited.

The information collected by the cookie is used to generate conversion statistics. We learn the total number of users who clicked on one of our ads and were redirected to a page tagged with a conversion tracking tag. However, we do not receive any information that would allow us to personally identify users.

You can permanently disable cookies for ad preferences by downloading and installing the browser plug-in available at: https://www.google.com/settings/ads/onweb/

Legal basis: Art. 6(1)(a) GDPR (consent via cookie consent banner). Further information on data protection at Google: https://policies.google.com/privacy

12. YouTube

We intend to embed videos from YouTube (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) on our website. Until activation, no data is transmitted to YouTube.

Once activated, videos will be embedded using the enhanced privacy mode. According to YouTube, this means that no information about visitors is stored unless they play the video. When a video is played, the following data is transmitted to YouTube:

IP address of the requesting device
Page visited on our website
Date and time of the request
Browser and device information

If you are logged into your YouTube/Google account, YouTube may associate the data with your profile. You can prevent this by logging out of your Google account before visiting our website.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in the appealing presentation of our products). Further information: https://policies.google.com/privacy

13. Fonts

This website uses the fonts "Inter" and "Space Grotesk" for a consistent appearance. The fonts are hosted locally on our server – no connection to external servers (e.g. Google) takes place. Your IP address is not transmitted to third parties.

14. Deletion of Data

The data processed by us is deleted in accordance with the statutory provisions as soon as the consents permitted for processing are revoked or other permissions cease to apply (e.g. if the purpose of processing this data has ceased to exist or it is not required for the purpose).

If the data is not deleted because it is required for other and legally permissible purposes, its processing is restricted to these purposes. That is, the data is blocked and not processed for other purposes. This applies, for example, to data that must be retained for commercial or tax law reasons, or whose storage is necessary for the assertion, exercise or defence of legal claims.

The criterion for the duration of the storage of personal data is the respective statutory retention period. After expiry of the period, the corresponding data is routinely deleted, provided it is no longer required for the fulfilment of a contract or the initiation of a contract.

15. Your Rights as a Data Subject

As a data subject, you are entitled to various rights under the GDPR, arising in particular from Art. 15 to 21 GDPR:

Right to object (Art. 21 GDPR) – You have the right to object, on grounds relating to your particular situation, at any time to the processing of personal data concerning you which is based on Art. 6(1)(e) or (f) GDPR. Where your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing.
Right to withdraw consent (Art. 7(3) GDPR) – You have the right to withdraw any consent given at any time. The withdrawal does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal.
Right of access (Art. 15 GDPR) – You have the right to obtain confirmation as to whether personal data is being processed, and to access such data and further information and a copy of the data.
Right to rectification (Art. 16 GDPR) – You have the right to request the completion of data concerning you or the correction of inaccurate data.
Right to erasure (Art. 17 GDPR) – You have the right to request that data concerning you be deleted without undue delay, provided no statutory retention obligations apply.
Right to restriction of processing (Art. 18 GDPR) – You have the right to request the restriction of the processing of your data.
Right to data portability (Art. 20 GDPR) – You have the right to receive the data concerning you that you have provided to us in a structured, commonly used and machine-readable format, or to request the transmission to another controller.

To exercise your rights, please contact: Sales@scu-group-europe.eu

16. Right to Lodge a Complaint with a Supervisory Authority

If you believe that the processing of your personal data violates the GDPR, you have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). You may in particular contact the supervisory authority of your habitual residence, your place of work, or the place of the alleged infringement.

Competent supervisory authority for Brandenburg:
Die Landesbeauftragte für den Datenschutz und für das Recht auf Akteneinsicht Brandenburg
Stahnsdorfer Damm 77
14532 Kleinmachnow
www.lda.brandenburg.de

17. Automated Decision-Making

As a responsible company, we do not use automated decision-making or profiling within the meaning of Art. 22 GDPR.

18. Necessity of Providing Personal Data

The provision of personal data is partly required by law (e.g. tax regulations) or may also arise from contractual provisions. In order to conclude a contract, it may be necessary for a data subject to provide us with personal data that must subsequently be processed by us.

The data subject is, for example, obliged to provide us with personal data when our company enters into a contract with them. Failure to provide the personal data would mean that the contract could not be concluded with the data subject.

19. Definitions

In this privacy policy, we use the following terms within the meaning of the GDPR:

Personal data – any information relating to an identified or identifiable natural person (data subject).
Processing – any operation or set of operations performed on personal data, whether or not by automated means (e.g. collection, recording, organisation, storage, adaptation, alteration, retrieval, consultation, use, disclosure, dissemination, alignment, combination, restriction, erasure, destruction).
Controller – the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data.
Processor – a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller (e.g. Netlify as hosting provider).

Last updated: March 2026