1. Controller
encurio GmbH
Heinrich-Lübke-Str. 74, 51375 Leverkusen, Deutschland
Phone: +49 221 999 878 80
Email: info@encurio.com
2. Data protection contact
info@encurio.com
3. Hosting and server logs
The website is delivered from a Plesk hosting environment operated for encurio. Technical hosting provider: InterNetX GmbH. Technical data such as IP address, time, requested resource, referrer, browser identifier, and status code may be processed in server logs. Processing supports secure and stable delivery as well as error and abuse detection.
The legal basis is Art. 6(1)(f) GDPR. Log data remains in the live system for no more than 30 days and is then archived with restricted access. Archived data is permanently deleted after 12 months unless longer retention is necessary to investigate a specific security incident.
4. Contact
When you contact us, we process the information provided to handle the request. Depending on the matter, the legal basis is Art. 6(1)(b) or (f) GDPR. Data is deleted once the request has been completed unless legal obligations require retention.
5. Local storage and consent
The website stores the consent decision under “modernate-consent-v3” and the language selection under “modernate-language” locally in the browser. The consent decision expires after 12 months and is then requested again. The language selection remains stored until you change it or clear your browser data. Storage is necessary so that your expressly selected settings can be respected on subsequent visits.
The legal basis for storage and access is Section 25(2)(2) TDDDG. To the extent that personal data is processed, this is based on Article 6(1)(f) GDPR; our legitimate interest is to provide the selected settings in a privacy-friendly and user-friendly manner. No analytics, advertising, or marketing service is currently integrated.
6. External content and fonts
Fonts, brand assets, and the product video preview image are served locally. Google Fonts and comparable font CDNs are not contacted. Tracking pixels and social plugins are not integrated.
The embedded product video is blocked initially. A connection to YouTube is established only when you enable external media in the consent dialog or actively load the video for that page visit. The provider for users in the European Economic Area is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; its parent company is Google LLC in the United States. YouTube may then receive information including your IP address, browser and device details, and information about the page view, and may use cookies or comparable technologies. If you are signed in to Google, data may be associated with your account. The video uses YouTube’s privacy-enhanced embedding mode.
The legal bases are your consent under Section 25(1) TDDDG and Article 6(1)(a) GDPR. Data may be transferred to the United States. Google provides information about its participation in the EU-US Data Privacy Framework and its supplementary use of standard contractual clauses. You can withdraw a stored preference at any time through Cookie settings with effect for the future; this does not affect the lawfulness of processing carried out before withdrawal. Google Privacy Policy · How Google uses data from embedded services · Data transfer frameworks
7. Appointment booking through Microsoft
For appointment booking, we link to Microsoft Bookings. The provider in the European Economic Area is Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. Merely loading this website does not establish a connection to Microsoft. Only after actively opening the link do you leave our website. Microsoft may then process technical data such as your IP address and browser information. If you book an appointment, the contact and appointment details you enter are also processed to schedule and conduct the appointment.
The legal basis for processing booking data is Article 6(1)(b) GDPR where the appointment concerns pre-contractual steps, and otherwise Article 6(1)(f) GDPR. Our legitimate interest is efficient appointment scheduling. Microsoft may also process data outside the European Economic Area; details on responsibilities, recipients, retention, and transfer mechanisms are available in Microsoft’s privacy statement. Microsoft Privacy Statement
8. Your rights
Within the limits of applicable law, you have rights including access, rectification, erasure, restriction, portability, and objection. You may withdraw consent at any time with effect for the future; this does not affect the lawfulness of processing carried out before withdrawal. You may also lodge a complaint with a data protection authority. The supervisory authority responsible for our registered office is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia, Kavalleriestrasse 2–4, 40213 Düsseldorf, Germany. Lodge a complaint with the LDI NRW
9. Version and changes
Version: August 2026. This notice will be updated if additional services, forms, or analytics tools are introduced.