Privacy Policy
Last updated: 30 September 2026
1. Controller
The controller responsible for the processing of personal data on this website is:
LaserEcoClean GmbH & Co. KG
Lyoner Straße 15
60528 Frankfurt am Main
Germany
Email: e.hagel@laserecoclean.de
This Privacy Policy applies to the website https://laserecoclean.com/ and explains how we process personal data in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation, GDPR) and applicable German data-protection and digital-services privacy law.
2. Personal data we process
Depending on how you use the website, we may process the following categories of personal data:
- contact and identification data that you provide to us, such as your name, company, email address and telephone number;
- the content of enquiries, requests for quotations and other communications;
- account and contact data required to provide access to the LaserEcoClean Customer Portal or other customer services;
- technical data generated when you access the website, such as IP address, date and time of access, requested page, browser, operating system, referrer and server-log information;
- analytics data, but only where the relevant analytics technology has been activated on the basis of your prior consent.
3. Purposes and legal bases
3.1 Website operation, security and server logs
Technical data may be processed to deliver the website, maintain its security, prevent misuse, diagnose technical problems and protect our systems. The legal basis is Article 6(1)(f) GDPR. Our legitimate interests are the secure and reliable operation of the website and the protection of our IT systems. Access to or storage of information on your terminal equipment is carried out without consent only where this is strictly necessary within the meaning of Section 25(2) TDDDG.
3.2 Enquiries, contact forms, email and telephone
If you contact us, we process the information you provide in order to answer your enquiry, prepare a quotation, discuss a project or take steps requested by you before entering into a contract. The legal basis is Article 6(1)(b) GDPR where the communication relates to a contract or pre-contractual measures, and Article 6(1)(f) GDPR for other business communications. Our legitimate interest is to respond to enquiries and maintain business relationships.
Submitting a business enquiry does not constitute consent to unrelated marketing. Where consent is required for an optional purpose, it is requested separately.
3.3 Customer Portal and customer services
Where we provide access to the LaserEcoClean Customer Portal or other customer-specific services, we process the data necessary to create and administer the relevant account, authenticate users, provide the requested service and communicate with authorised customer contacts. The legal basis is Article 6(1)(b) GDPR and, where necessary for account and system security, Article 6(1)(f) GDPR.
3.4 Analytics
If Google Analytics or another non-essential analytics service is enabled on this website, it is activated only after you have given prior consent. The legal basis for processing personal data is Article 6(1)(a) GDPR. The storage of or access to information on your device is based on your consent under Section 25(1) TDDDG. You may withdraw your consent at any time with effect for the future through the cookie settings. Further information is provided in our Cookie Notice.
3.5 Legal obligations
We may process personal data where this is necessary to comply with legal obligations, including commercial, tax, accounting and regulatory requirements. The legal basis is Article 6(1)(c) GDPR.
4. Cookies and similar technologies
We distinguish between technologies that are strictly necessary to provide the website and optional technologies, such as analytics. Optional technologies are not activated before consent. Details on purposes, providers, storage periods and how to change your choices are set out in our Cookie Notice.
5. Recipients and processors
Personal data may be disclosed to service providers that process data on our behalf, such as hosting, email, IT-support, security and cloud-service providers. Where required, such providers are engaged under data-processing agreements in accordance with Article 28 GDPR. Data may also be disclosed to professional advisers, public authorities or courts where this is required by law or necessary for the establishment, exercise or defence of legal claims.
We do not sell personal data.
6. Transfers outside the EEA
Where a service provider processes personal data outside the European Economic Area (EEA), we use a transfer mechanism permitted by Chapter V GDPR. Depending on the recipient and country, this may include an adequacy decision under Article 45 GDPR or the European Commission’s Standard Contractual Clauses under Article 46 GDPR, together with supplementary safeguards where required. Information about the applicable safeguard can be requested from us.
7. Retention
We retain personal data only for as long as necessary for the purpose for which it was collected. Enquiries that do not lead to a business relationship are deleted when they are no longer required for follow-up, unless a longer period is necessary for the establishment, exercise or defence of legal claims. Contractual and business records are retained for the periods required by applicable commercial and tax law. Technical logs are retained only for the period necessary for security, troubleshooting and abuse prevention and are then deleted or anonymised unless further retention is required for a specific security incident or by law.
8. Your rights
Subject to the conditions of the GDPR, you have the right to:
- request access to your personal data (Article 15 GDPR);
- request rectification of inaccurate data (Article 16 GDPR);
- request erasure of your data (Article 17 GDPR);
- request restriction of processing (Article 18 GDPR);
- receive data in a portable format where Article 20 GDPR applies;
- object to processing based on Article 6(1)(e) or (f) GDPR, including profiling based on those provisions (Article 21 GDPR);
- withdraw consent at any time where processing is based on consent (Article 7(3) GDPR). Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
To exercise your rights, contact us at e.hagel@laserecoclean.de. We may need to verify your identity before responding to a request.
9. Right to object
If we process your personal data on the basis of legitimate interests under Article 6(1)(f) GDPR, you have the right to object at any time on grounds relating to your particular situation. If personal data is processed for direct marketing, you have the right to object at any time without giving reasons.
10. Complaint to a supervisory authority
You have the right to lodge a complaint with a data-protection supervisory authority. The supervisory authority responsible for private-sector organisations established in Hesse is:
Der Hessische Beauftragte für Datenschutz und Informationsfreiheit (HBDI)
Wilhelmstraße 7
65185 Wiesbaden
Germany
Email: poststelle@datenschutz.hessen.de
Website: https://datenschutz.hessen.de/
11. Automated decision-making
We do not use solely automated decision-making, including profiling, that produces legal effects concerning you or similarly significantly affects you within the meaning of Article 22 GDPR.
12. Changes to this Privacy Policy
We may update this Privacy Policy when our services, technologies or legal requirements change. The current version is published on this page.