Privacy notice

This is a courtesy translation. The German version is legally binding.

Last updated: July 2026

1. Data protection at a glance

The following notes provide a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to identify you personally. Detailed information can be found in this privacy notice.

2. Controller

The controller for data processing on this website is:

Schmidt Acoustics & Trading GmbH
Auf dem Triesch 23
66646 Marpingen
Phone: 0163 7152035
Email: [email protected]

The controller is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data.

3. Legal bases for processing

We only process personal data on the basis of a legal permission. The legal bases are in particular Art. 6 (1) (a) GDPR (consent), Art. 6 (1) (b) GDPR (contract or pre-contractual measures), Art. 6 (1) (c) GDPR (legal obligation) and Art. 6 (1) (f) GDPR (legitimate interest). For storing or accessing information on your device (e.g. cookies), § 25 TDDDG additionally applies.

4. Hosting

This website is hosted by an external service provider (host). The personal data collected on this website is stored on the host's servers. This may include IP addresses, contact requests, meta and communication data, website access and other data generated via a website. Hosting is carried out for the purpose of fulfilling the contract with our potential and existing customers (Art. 6 (1) (b) GDPR) and in the interest of a secure, fast and efficient provision of our online offer (Art. 6 (1) (f) GDPR). A data processing agreement (DPA) pursuant to Art. 28 GDPR has been concluded with the host.

5. Server log files

The provider of the pages automatically collects and stores information in server log files that your browser automatically transmits to us: browser type and version, operating system used, referrer URL, host name of the accessing computer, time of the server request and the IP address. This data is not merged with other data sources. It is collected on the basis of Art. 6 (1) (f) GDPR for the technically error-free and secure operation of the website.

6. Cookies & consent

Our website uses cookies. Cookies are small text files and do no harm to your device. Technically necessary cookies required to operate the site and to store your consent decision are set on the basis of Art. 6 (1) (f) GDPR. All other cookies (in particular for analysis) are only set with your express consent under Art. 6 (1) (a) GDPR and § 25 (1) TDDDG. You can revoke your consent at any time via the “Cookie settings” link in the footer. Details can be found in our cookie policy.

7. Google Analytics 4

This website uses – only after your consent – the web analytics service Google Analytics 4 (measurement ID: G-Z2SSML870M). The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics allows us to analyse visitor behaviour and improve our offer. Pseudonymous usage profiles are created and cookies are used.

IP anonymisation is enabled by default in Google Analytics 4; your IP address is shortened before storage. Use is based on your consent (Art. 6 (1) (a) GDPR and § 25 (1) TDDDG). We also use Google Consent Mode v2: without your consent, no analytics cookies are set; Google receives at most anonymous, modelled signals.

A data transfer to the USA cannot be ruled out. Google is certified under the EU-US Data Privacy Framework; in addition, EU standard contractual clauses exist. Your consent is voluntary and can be revoked at any time with effect for the future – via the cookie settings in the footer. More information on Google Analytics: https://policies.google.com/privacy.

8. Contacting us

If you contact us by email or via our contact form, your details will be stored for the purpose of processing the enquiry and in case of follow-up questions. When you use the contact form, the data you enter is transmitted to our server (at our host, see the Hosting section) and forwarded from there to us by email. If server-side transmission is not possible, your email program opens instead with the details you entered (mailto procedure). Processing is based on Art. 6 (1) (b) GDPR (pre-contractual measures) or Art. 6 (1) (f) GDPR (handling of enquiries). We additionally store your enquiry in a database on our server in order to process it, keep track of the history and evaluate enquiries internally. The data is deleted as soon as it is no longer required for these purposes and no statutory retention periods apply. We do not pass on this data to third parties without your consent.

9. AI chat assistant (Nova)

Our website offers a chat assistant (“Nova”) that answers questions about our services. When you send a message in the chat, your message text and the preceding chat history are transmitted to our server and from there to our processor Cloudflare, Inc. (101 Townsend Street, San Francisco, CA 94107, USA), which operates the AI model (Workers AI) that generates the answer. Processing is based on Art. 6 (1) (f) GDPR (our legitimate interest in answering enquiries efficiently) and, where you initiate an appointment request via the chat, Art. 6 (1) (b) GDPR (pre-contractual measures). Please do not enter any sensitive data (e.g. health data, passwords, payment details) in the chat. Your IP address is processed briefly for abuse prevention (rate limiting). A data transfer to the USA cannot be ruled out; Cloudflare provides EU standard contractual clauses. For quality assurance and anonymous statistics we store the questions asked in the chat (the question text only, without your IP address); please therefore do not enter any personal data in the chat. The chat content is not used to permanently train the model. Nova is an AI assistant and can make mistakes. More information: cloudflare.com/privacypolicy.

10. Appointment booking (Calendly)

To schedule an initial consultation, we offer online appointment booking on our contact page via the service Calendly (Calendly LLC, 271 17th St NW, Atlanta, GA 30363, USA). For privacy reasons the calendar is only loaded once you actively click "Load calendar" - before that, no content is fetched from Calendly and no data is transferred to Calendly. After the click, the data required to book an appointment (e.g. name, email address, preferred time) is transmitted to and processed by Calendly. The legal basis is Art. 6 (1) (b) GDPR (pre-contractual measures) and Art. 6 (1) (f) GDPR (our legitimate interest in easy scheduling). A data transfer to the USA may occur; Calendly provides EU standard contractual clauses for this. More information can be found in Calendly's privacy policy (calendly.com/privacy).

11. Reach measurement (anonymous statistics)

To determine page views we run a simple, anonymous count: when a page is opened, only the requested path together with the date is counted server-side. No cookies are set and no IP addresses or other personal data are stored; conclusions about individual people are not possible. The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in data-minimising reach measurement). This anonymous count is independent of the cookie-based analysis with Google Analytics and takes place regardless of your cookie consent.

12. Your rights

You have the right at any time to free information about your stored personal data, its origin and recipients and the purpose of processing (Art. 15 GDPR), as well as a right to rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21). You can revoke any consent given at any time with effect for the future. For this and further questions on data protection, you can contact us at any time.

13. Right to lodge a complaint with a supervisory authority

In the event of breaches of the GDPR, you have the right to lodge a complaint with a supervisory authority. The competent authority is the Independent Data Protection Centre of Saarland (Unabhängiges Datenschutzzentrum Saarland), Fritz-Dobisch-Straße 12, 66111 Saarbrücken (datenschutz.saarland.de).

14. SSL/TLS encryption

For security reasons and to protect the transmission of confidential content, this site uses SSL/TLS encryption. You can recognise an encrypted connection by the fact that the browser's address line changes from “http://“ to “https://“.