Preamble
We take the protection of your personal data seriously. Below we explain what data we process in connection with our online offering, for what purposes, and what rights you have.
Version: 16 April 2026
Controller
IFRA Kältetechnik GmbH
WASAG Str. 4
92318 Neumarkt i.d.OPf.
Germany
Phone: +49 (0) 9181 520 90 66
E-mail: office@ifra-kaelte.de
Privacy contact
E-mail: office@ifra-kaelte.de
Overview of processing
This section summarizes typical data categories and purposes related to our online services.
- Data types: contact data (e-mail, phone), content data (form inputs), usage and meta data (IP address, access times, logfiles), location data (maps), applicant data (if you apply).
- Purposes: providing the website, communication and handling requests, pre-contractual steps/contract performance, IT security, analytics/optimization (if enabled), embedded third-party services (e.g. maps).
Legal bases
We process personal data only where a legal basis applies, in particular:
- Consent (Art. 6(1)(a) GDPR), e.g. for certain cookies or embedded services.
- Contract/pre-contractual steps (Art. 6(1)(b) GDPR), e.g. for quote or appointment requests.
- Legal obligation (Art. 6(1)(c) GDPR), e.g. statutory retention.
- Legitimate interests (Art. 6(1)(f) GDPR), e.g. IT security and abuse prevention.
Security measures
We apply technical and organizational measures to ensure an appropriate level of security, including access controls and measures to protect confidentiality, integrity and availability.
Where possible, IP addresses are truncated (IP masking). Data transmission is protected via TLS/SSL (https).
Data transfers
We may share data with service providers (e.g. hosting or e-mail/SMTP) where necessary to operate the website and handle your request. Where required, we conclude data processing agreements (Art. 28 GDPR).
International data transfers
If data is transferred to third countries (outside the EU/EEA), this is done in accordance with legal requirements, for example based on adequacy decisions (Art. 45 GDPR) or appropriate safeguards such as standard contractual clauses (Art. 46 GDPR).
Retention and deletion
We delete personal data once it is no longer required for the purpose, unless statutory retention obligations apply. Where further retention is necessary (e.g. legal defense), processing is restricted accordingly.
Your rights
As a data subject, you have the following rights in particular:
- Access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17).
- Restriction (Art. 18) and data portability (Art. 20).
- Objection (Art. 21), especially against direct marketing.
- Withdrawal of consent with future effect.
- Complaint to a supervisory authority (Art. 77 GDPR), e.g. the competent authority in your place of residence or in Bavaria (Germany).
Provision & logfiles
Hosting and DNS are currently provided via checkdomain.de; e-mail communication is handled via Microsoft 365. We also process server logfiles (truncated IP address, timestamp, request URL, referrer, user agent, status code) for security and stability. Legal basis: legitimate interests (Art. 6(1)(f) GDPR).
Contact and request management
When you contact us (e.g. via form, e-mail, phone or social media), we process the data you provide to respond and, where applicable, to take pre-contractual steps.
Contact via API or form endpoints: For quote or appointment requests we typically process details such as company, contact data, requested service and project details. Technical meta data (e.g. IP address, browser identifier) may be stored for security purposes. Data is made available internally for processing and forwarded to office@ifra-kaelte.de. Legal bases: Art. 6(1)(b) GDPR and Art. 6(1)(f) GDPR. Data is deleted once the request is completed unless statutory retention obligations apply (typically 6 or 10 years for record-keeping relevant business transactions).
HVAC configurator and pricing inquiry
On our HVAC pages, you can use a configurator for technical pre-selection and submit a pricing inquiry based on that setup.
- Data processed: configuration data you enter (e.g. room labels, room sizes, system type, selected units).
- URL parameters/sharing: technical configuration parameters are stored in the URL to restore and share your setup. Please do not enter personal data in free-text fields.
- Purpose and legal bases: operating the configurator and handling your pricing inquiry (Art. 6(1)(b) GDPR), plus operation/security and abuse prevention (Art. 6(1)(f) GDPR).
- Transmission path: depending on technical setup, inquiry data is sent to an API endpoint or prepared as an email via your local mail client (mailto). In both cases, involved mail/hosting service providers may process data.
- Retention: URL-based configuration data remains visible in browser history until changed/removed; server-side inquiry data is deleted once processing is completed unless statutory retention obligations apply (typically 6 or 10 years for record-keeping relevant business transactions).
Cookies & consent
Use of technically necessary cookies and, where applicable, consent-based cookies/technologies (e.g. reach measurement, embedded services). Consents can be withdrawn at any time with future effect. Note: we store your theme preference (light/dark) in the browser (local storage) to remember your selection.
Analytics / tracking
We do not use Google Analytics at the moment. If we introduce Google Analytics (with IP anonymization) later, the provider is Google Ireland Limited and the legal basis is your consent (Art. 6(1)(a) GDPR). Opt-out/consent withdrawal is possible at any time. Opt-out plugin: https://tools.google.com/dlpage/gaoptout. Disable ad personalization: https://myadcenter.google.com/personalizationoff. Further details are available in Google's privacy policy.
Embedded services
- Fonts: We serve fonts locally where possible (no request to Google Fonts on page load).
- Google Maps (maps/locations): The map is loaded only after your active choice (e.g. clicking “Load map”); this may transfer data to Google.
- reCAPTCHA: Not used at the moment. If introduced later, the legal basis depends on the specific setup (legitimate interest or consent).
- YouTube videos: We embed selected videos. They are loaded only after your active choice (two-click solution). We use the privacy-enhanced youtube-nocookie.com domain. When you play a video, data (e.g. IP address) may be transferred to Google. Legal basis: consent (Art. 6(1)(a) GDPR).
- Local videos: We host our own video files locally; no transfer to third parties takes place.
Changes and updates
We update this privacy notice when necessary to reflect changes in our processing. Please review regularly; if cooperation is required (e.g. renewed consent), we will inform you separately.
Social media
This notice also covers our social media profiles: Instagram, Facebook, LinkedIn. When accessing them, the platforms' terms apply; usage and profile data may be processed.