Skip to content

Privacy policy

The authoritative version of our privacy policy is the German Datenschutzerklärung. The following English overview is for convenience only; in case of doubt, the German version prevails.

Controller: AWS-Technik GmbH, Erkrather Str. 401, 40231 Düsseldorf, Germany. Represented by Dipl.-Ing. Wolfgang Buschmeier and M.Sc. Marius Buschmeier. E-mail: info@aws-technik.de.

What we process and why

  • Hosting & server log files (Cloudflare) — IP address and technical access data to deliver and secure the website; legal basis Art. 6(1)(f) GDPR.
  • Spam protection (Cloudflare Turnstile) — where enabled, technical form-security data; Art. 6(1)(f) GDPR, § 25(2)(2) TDDDG.
  • Business relationships — we also process contact and contract data of customers, prospects, suppliers and their contact persons (including credit checks and existing-customer communication); see the German policy for details, including your right to object to direct marketing (Art. 21(2) GDPR).
  • Contact & inquiry forms / data sheet — the data you enter is transmitted via our processor Loops to our team to handle your inquiry and prepare an offer; Art. 6(1)(b) and (f) GDPR. These two forms are not stored in a database on the website.
  • Design configurators (gas/gas plate and shell-and-tube heat exchangers) — your contact details, the process data you enter and the resulting selection are stored in a database at our host Cloudflare, so that we can review the selection and send you a technical data sheet. Every inquiry is checked automatically for plausibility before we process it (including an MX lookup for the e-mail domain); the decision on your inquiry is always made by a person. The data sheet link is valid for seven days and stops working as soon as we delete your inquiry. We erase stored inquiries after six months (declined), three years (no business relationship) or on expiry of the statutory retention periods of six to ten years. Art. 6(1)(b) and (f) GDPR.
  • Analytics (PostHog) — only after your explicit consent via our consent banner (EU instance, no autocapture, no session recording); Art. 6(1)(a) GDPR, § 25(1) TDDDG. You can withdraw consent at any time.
  • Fonts are self-hosted — no connection to Google.

Third-country transfers

Cloudflare, Loops and PostHog are US companies. Transfers to the USA are based, depending on the provider, on the EU-US Data Privacy Framework (Art. 45 GDPR) and/or the EU Standard Contractual Clauses (Art. 46 GDPR). A residual risk of access by US authorities remains.

Your rights

You have the right to access, rectification, erasure, restriction, data portability, withdrawal of consent (Art. 7(3)), and objection (Art. 21 GDPR). You may also lodge a complaint with the competent supervisory authority: Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW), Kavalleriestraße 2–4, 40213 Düsseldorf, poststelle@ldi.nrw.de.

There is no solely automated decision-making within the meaning of Art. 22 GDPR.

Status: 21 August 2026 — for full details please refer to the German privacy policy.