Privacy Notice

Privacy Policy

UMFOTEC GmbH processes your personal data in accordance with applicable data protection laws, in particular the General Data Protection Regulation (“GDPR”), as described in this Privacy Policy.

1) Controller

Controller for the website ( is:


Speckweg 2

37154 Northeim


Phone: +49 (0)5551 9868-0


(hereinafter “UMFOTEC”, or “we”).


2)  Data Protection Officer of UMFOTEC

You can reach our data protection officer at Dr. Hufenbach & Partner GmbH & Co. KG, Düstere-Eichen-Weg 50, 37073 Göttingen;

Phone: +49 551-383310; E-mail:

3) Processing operations:

3.1) Processing for prior to entering into or for the performance of a contract between you and UMFOTEC

In the context of contractual relationships and pre-contractual measures, we process your personal data as follows.

3.1.1) Categories of personal data

Relevant personal data that we process are:

- Master data (name, address and other contact details)

- Communication data (e.g. telephone number, e-mail address)

- Contract master data (contractual relationship, product or contract interest)

- Contractual billing and payment data

- Information provided by third parties, e.g. credit agencies, or from public directories

3.1.2) Purposes and legal basis of the processing

We process your personal data mentioned under 3.1.1) for processing an inquiry or performance of a contract (provision of deliveries and services).

The processing of your personal data is therefore based on Art. 6(1)(b) of the GDPR (performance of a contract or prior to entering into a contract).

3.1.3) Sources

We only process personal data that we receive directly from you or from another person (e.g. a colleague) in the course of your inquiry or a contractual relationship. In case of processing personal data from a third source, we will name the source accordingly in individual cases.

In addition, where this is necessary, we will process personal data that we receive lawfully from other third parties (e.g. from courts, authorities, offices, or insurance companies).

3.1.4) Recipients of personal data

We transfer your personal data to contractual partners within the scope of our contractual relationship towards you as well as to service providers we use as processors in connection with the provision of our own services to you. Generally, we do not intend to transfer personal data to a third country, but we may do so in individual cases in order to perform our contract (Art. 49 para. 1 lit. b GDPR).

3.1.5) Retention periods

The data will be stored at least for the duration of the relevant business relationship (e.g. to answer your inquiry / for the duration of the contractual relationship). In most cases we are bound by statutory retention periods (such as six years with regard to commercial letters according to Sec. 257(1)(2) of the German Commercial Code (Handelsgesetzbuch), Sec. 147(3)(1)(4a) para. 3 p.1 no. 4a of the German Fiscal Code (Abgabenordnung)). After an applicable maximum storage period has expired, your personal data will be deleted unless there is another important reason for further storage.

3.2) Processing of personal data when visiting our website

3.2.1) Categories of personal data

When you visit our website, personal data is collected which your browser transmits to our servers (server log files). These are the following personal data:

- IP address,

- date and time of the request,

- host name of the accessing computer,

- Referrer URL,

- browser type and version,

- your operating system.

Information about cookies and cookie-settings can be found [here].

3.2.2) Purposes and legal basis of the processing

This personal data is collected so that we can display the website to you, to ensure its stability and security and to make the website more user-friendly and effective.

This processing is based on Art. 6(1)(f) of the GDPR (legitimate interest – ensuring the stability and security of our website).

3.2.3) Retention periods

We regularly delete personal data regarding the use of our website after 30 days (eventually other periods may apply for cookies, see above).

3.3) Contact form

You can contact us through our website, e.g. by using our contact form. Both customers and non-customers can contact us and may refer to already existing contractual relationships, as well as to our products and manufacturing processes in general or otherwise. In this context, we collect the personal data requested for the purposes as described above under point 3.1).

4) Rights of data subjects

You have the right request access to personal data concerning you that we process and the right to rectification, erasure of personal data and restriction of such processing. You also have the right to object to processing as well as the right to data portability.

Where you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing, which override your interests, rights and freedoms, or when we process that personal data for the establishment, exercise or defence of legal claims. Where you object to the processing of your personal data for direct marketing purposes, we may no longer process your personal data for these purposes without restriction.

The objection is to be made in writing or by e-mail to our address or e-mail address mentioned above.

4.1) Withdrawal of consent

Where you have given us your consent to process personal data for specific purposes, the lawfulness of this processing is based on your consent. You have the right to withdraw your granted consent at any time. However, the withdrawal of consent will not affect the lawfulness of processing based on consent before its withdrawal.

4.2) Right of complaint

You have the right to lodge a complaint with a supervisory authority. Our competent supervisory authority is the “Landesbeauftragter für den Datenschutz Niedersachsen” in Prinzenstraße 5, 30159 Hannover, telephone: +49 511 120-4500. Alternatively, you can also contact your competent supervisory authority at your place of residence or workplace.

4.3) Reasons for the collection and provision of data

Within the scope of our business relationship, you only need to provide us with the personal data that is necessary for the performance of this legal transaction. When the necessary personal data is not made available, a business relationship with us is not possible or only possible to a limited extent. The same applies to the processing of your inquiries and communication via our contact form.

4.4) Miscellaneous

We do not apply automated decision-making. Likewise, we do not process your personal data in order to assess and evaluate certain personal aspects (profiling).

Date: July 2020