Privacy Policy
Privacy Policy
Krayer Systemtechnik, LLC
As of August 2026
1. Data Controller
The data controller within the meaning of the General Data Protection Regulation (GDPR) and other national data protection laws is:
Krayer Systemtechnik, LLC
Eugen-Hahn-Straße 41, 73565 Spraitbach, Germany
Phone: +49 7176 99 888 0
Email: office@krayer.de
Represented by the management: Werner Krayer, Benedikt Krayer
2. Data Protection Officer
You can contact our Data Protection Officer at:
Anna O. Orlowa
Kolpingstr. 9
73732 Esslingen
Phone: +49 (0) 711 504 46 603
Fax: +49 (0) 711 504 55 844
Email: kontakt@rexus-recht.de
3. Your Rights as a Data Subject
You have the following rights with respect to your personal data at any time:
- Information about the data we have stored about you and how it is processed (Art. 15 GDPR),
- Rectification of inaccurate personal data (Art. 16 of the GDPR),
- Deletion of your data stored by us (Art. 17 of the GDPR),
- Restriction of data processing to the extent that we are not yet permitted to delete your data due to legal obligations (Art. 18 GDPR),
- Objection to the processing of your data by us (Art. 21 GDPR),
- Data portability, provided that you have consented to the processing of your data or have entered into a contract with us (Art. 20 of the GDPR).
If you have given us your consent, you may revoke it at any time with future effect. The lawfulness of the processing carried out up until the time of revocation remains unaffected.
Right to Object (Art. 21 of the GDPR)
If we process your personal data on the basis of legitimate interests (Art. 6(1)(f) GDPR), you have the right to object to this processing at any time for reasons arising from your particular situation. If your data is processed for the purpose of direct marketing, you have the right to object at any time without providing a reason; we will then no longer process the data for marketing purposes.
Right to File a Complaint with the Regulatory Authority
You may file a complaint with a supervisory authority at any time. The supervisory authority with jurisdiction over us is the State Commissioner for Data Protection and Freedom of Information in Baden-Württemberg (LfDI BW). You can find a list of all supervisory authorities at: https://www.bfdi.bund.de/DE/Service/Anschriften/anschriften_node.html.
4. Legal Basis for Processing
To the extent that we obtain your consent for processing activities, the legal basis is Article 6(1)(a) of the GDPR. For processing carried out to fulfill a contract or to take steps prior to entering into a contract, the legal basis is Article 6(1)(b) of the GDPR. We base processing carried out to comply with a legal obligation on Article 6(1)(c) of the GDPR. If processing is necessary to pursue a legitimate interest and your interests do not override those interests, Article 6(1)(f) of the GDPR serves as the legal basis.
The storage of information on your device, as well as access to information already stored (e.g., cookies), takes place—unless technically necessary—exclusively on the basis of your consent pursuant to Section 25(1) of the TDDDG in conjunction with Article 6(1)(a) of the GDPR.
5. Recipients and Data Processors
We do not disclose your personal data to third parties for purposes other than those specified in this statement. We will only disclose your data if you have given your consent, if it is necessary to fulfill a contract, if there is a legal obligation to do so, or if there is an overriding legitimate interest.
To provide our services, we engage carefully selected service providers who act on our behalf as data processors in accordance with Article 28 of the GDPR, in particular:
- Hosting Provider / Data Center: Raidboxes GmbH, Hafenstraße 32, 48153 Münster. For more information, please see the provider’s privacy policy: https://raidboxes.io/legal/privacy/
- Providers of the analytics, marketing, and communication services mentioned in this statement (see below).
6. Data Transfers to Third Countries (particularly the U.S.)
Some of the services we use may transfer personal data to countries outside the EU/EEA—in particular, to the United States. Such transfers will only take place if an adequate level of data protection is ensured. The basis for this is:
- for U. S. providers certified under the EU-U.S. Data Privacy Framework (DPF), the EU Commission’s Adequacy Decision of July 10, 2023 (Art. 45 GDPR);
- otherwise, the Standard Contractual Clauses (SCC) of the European Commission (Art. 46(2)(c) of the GDPR), together with supplementary safeguards, if applicable;
- alternatively, your explicit consent pursuant to Article 49(1)(a) of the GDPR.
Please note that third countries cannot guarantee a level of data protection comparable to that of the EU, and that access by government authorities cannot be completely ruled out. You can obtain a copy of the appropriate safeguards using the contact information provided in Section 1.
7. Collection of General Information When Visiting the Website (Server Log Files)
Every time you access our website, our system or our hosting provider automatically collects data and information (server log files). This includes, in particular:
- Browser type and browser version,
- operating system used,
- Referrer URL,
- Date and time of access,
- the IP address of the device accessing the site, as well as the Internet service provider.
Since the IP address is personal data, this constitutes the processing of personal data. This processing is technically necessary to deliver the website and to ensure its stability and security. The legal basis is Article 6(1)(f) of the GDPR; our legitimate interest lies in the aforementioned purposes. The log files are deleted or anonymized after [enter retention period, e.g., 7 days], unless, in exceptional cases, they are needed for a longer period to investigate a security incident.
8. Cookies and Consent Management
Our website uses cookies and similar technologies. Cookies are small text files that are stored on your device. We distinguish between technically necessary cookies and non-essential cookies (e.g., for analytics and marketing).
Technically necessary cookies are set without consent pursuant to § 25(2) of the TDDDG or Art. 6(1)(f) of the GDPR.
All non-essential cookies and services (in particular the analytics, marketing, and map/font services listed below) are not set or loaded until after you have expressly consented via our consent management tool (Section 25(1) TDDDG in conjunction with Article 6(1)(a) GDPR). Your consent is voluntary and may be revoked at any time with future effect. You can adjust your settings at any time via the “Cookie Settings”link in the footer.
We use etracker’s Consent Manager to manage your consents (see Section 15).
9. SSL/TLS Encryption
To protect the security of your data during transmission, we use state-of-the-art encryption methods (TLS) via HTTPS.
10. Contacting Us (Contact Form and Email)
If you contact us via the contact form or by email, we will process your information (e.g., email address, name, your message) to handle your inquiry. A valid email address is required; additional information is optional. The legal basis for contract-related inquiries is Article 6(1)(b) of the GDPR; for all other inquiries, it is our legitimate interest in responding to your inquiry pursuant to Article 6(1)(f) of the GDPR.
Your data will be deleted as soon as your request has been fully processed and there are no legal retention requirements that prevent this. For inquiries of a contractual or business nature, we retain the data in accordance with the time limits set forth in commercial and tax law (typically 6 or 10 years).
11. Downloads and Email Updates (white papers, white-labeling checklist, etc.)
On our website, we offer downloads (e.g., UL white papers, white-labeling checklists, webinar materials). To receive them, please provide your name and email address. After submitting the form, you’ll receive a confirmation email in which you must confirm your registration (double opt-in). Only then will we send you the download link.
As part of this process, you will also receive—where applicable—regular information related to UL (informational or promotional emails). The legal basis for sending these emails is your consent pursuant to Article 6(1)(a) of the GDPR in conjunction with Section 7(2) of the UWG. For documentation purposes, we record your registration and confirmation. You may revoke your consent at any time by clicking the unsubscribe link in each email or by sending us a message.
We use Brevo for shipping.
Newsletter Distribution via Brevo
We use the Brevo service to send out our newsletter. The provider is Sendinblue GmbH, Köpenicker Straße 126, 10179 Berlin, Germany.
When you subscribe to our newsletter, the personal data you provide will be processed by Brevo’s systems for the purpose of sending the newsletter and stored on servers operated by Sendinblue GmbH in Germany.
Analysis of Newsletter Distribution
Brevo provides features that allow us to analyze the usage of our newsletters statistically. This includes, for example, information on whether an email was opened or which links within it were clicked.
In addition, we can track whether predefined actions were carried out after a user clicked on a newsletter, such as placing an order or another desired interaction (conversion tracking).
Brevo also allows us to divide newsletter recipients into target groups based on specific characteristics. For example, we can segment them by age, gender, or place of residence, provided that this information is available. This enables us to tailor our newsletters more effectively.
If you do not wish to have your usage behavior analyzed statistically, you can unsubscribe from the newsletter at any time by clicking the unsubscribe link included in every email.
For more information about Brevo’s features, visit:
https://www.brevo.com/de/newsletter-software/
Legal Basis
Your personal data is processed on the basis of your consent in accordance with Article 6(1)(a) of the GDPR. You may revoke your consent at any time with future effect. Any processing that took place prior to the revocation remains unaffected by this.
Retention period
Your personal data stored in connection with the newsletter will be processed until you unsubscribe from the newsletter. After you unsubscribe, your data will be deleted from the active newsletter distribution list, provided that no statutory retention requirements or other legal reasons prevent such deletion.
To ensure that no further newsletters are sent to the same email address after you unsubscribe, your email address may be added to a so-called blacklist. This information is stored solely for this purpose and is not linked to any other personal data.
Processing is based on our legitimate interest pursuant to Article 6(1)(f) of the GDPR to comply with legal requirements for sending newsletters and to prevent unsolicited mailings. You may object to this storage provided that your legitimate interests outweigh our legitimate interest.
More Information
For more information about Brevo’s processing of personal data, please visit:
Order Processing
A data processing agreement (DPA) has been entered into with Brevo in accordance with Article 28 of the GDPR. This agreement obligates the service provider to process personal data exclusively in accordance with our instructions and to comply with all data protection requirements of the GDPR.
12. Job Applications (Careers)
When you apply for a position with us, we process your applicant data to conduct the application process. The legal basis for this is Section 26(1) of the German Federal Data Protection Act (BDSG) in conjunction with Article 88 of the General Data Protection Regulation (GDPR) and Article 6(1)(b) of the GDPR. Once the process is complete, we will delete applicant data no later than [typically 6 months], unless you have consented to longer-term storage (e.g., in a talent pool) or you are hired.
13. Web Analytics and Marketing Using Google Services
The provider of the following Google services is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (parent company: Google LLC, USA). Google LLC is certified under the EU-U.S. Data Privacy Framework. The following services are loaded only with your consent (Section 25(1) TDDDG in conjunction with Article 6(1)(a) GDPR); any associated data transfer to the U.S. is carried out on the grounds specified in Section 6.
Google Analytics
We use Google Analytics to analyze and statistically evaluate website usage. This involves the use of cookies and the processing of usage data (including truncated IP addresses) to generate reports on website activity. IP anonymization is enabled. The legal basis for this is your consent. You can withdraw your consent at any time via the cookie settings.
Google Ads / Conversion Tracking
We use Google Ads with conversion tracking to measure the success of our ads. If you visit our website via a Google ad, a cookie is set that typically expires after 30 days and is not used for personal identification. The legal basis for this is your consent.
Google Maps
We use Google Maps to display maps. When the map loads, data (including your IP address) may be transmitted to Google. Google Maps is loaded only after you give your consent; alternatively, you can access the location using the address provided. The legal basis for this is your consent.
Fonts (Google Fonts – Local Integration)
We use Google Fonts to ensure consistent font display. These fonts are hosted locally on our server; when you visit our website, no connection is established with Google’s servers, and no data is transmitted to Google.
14. Embedded YouTube Videos
Videos from YouTube (Google Ireland Limited) are embedded on our website. We use a two-click solution: Videos are not loaded, and a connection to YouTube/Google is not established, until you actively enable the video by clicking on it. Only then can data (including your IP address) be transferred to Google in the United States. The legal basis for this is your consent (Art. 6(1)(a) GDPR). For more information: https://policies.google.com/privacy.
15. Web Analytics with etracker
We use services provided by etracker GmbH, Hamburg, Germany (https://www.etracker.com) to analyze usage data, as well as the etracker Consent Manager module for consent management and the etracker Tag Manager for integrating additional tools.
Even if you opt out of statistical cookies, anonymous or pseudonymous usage data will still be collected in accordance with the GDPR and the TDDDG; this processing is based on Article 6(1)(f) of the GDPR (legitimate interest in optimizing and managing our online offering in compliance with the law). Other technologies are used only with your consent (Article 6(1)(a) of the GDPR). The data is processed exclusively in Germany. You may object at any time.
For more information: https://www.etracker.com/datenschutz/.
16. Mouseflow
We use Mouseflow, a web analytics tool provided by Mouseflow ApS, Copenhagen, Denmark, to analyze random samples of individual visits (with pseudonymized IP addresses) by recording mouse movements and clicks in order to improve the website. This is done exclusively on the basis of your consent pursuant to Art. 6(1)(a) of the GDPR. You can withdraw your consent at any time via the cookie consent tool. You can also opt out at https://www.mouseflow.de/opt-out/. Privacy policy: https://mouseflow.com/privacy/.
17. Leadinfo
We use the lead generation service provided by Leadinfo B.V., Rotterdam, Netherlands. Leadinfo uses IP addresses to identify visits to our website by businesses and displays publicly available business information (e.g., company name and address) to us. Leadinfo uses first-party cookies to analyze user behavior. This is done based on your consent (Art. 6(1)(a) GDPR); alternatively, we process this data based on our legitimate interest in B2B outreach (Art. 6(1)(f) GDPR). You may object to this processing at any time; you can opt out at https://www.leadinfo.com/en/opt-out/. For more information, visit https://www.leadinfo.com.
18. Social Media Presence
We maintain online presences on social networks to communicate with users active on those platforms and to provide information about us. When you access these networks, the terms of use and privacy policies of the respective operators apply. User data is regularly processed there for market research and advertising purposes; and user profiles may be created based on usage behavior. The legal basis for our social media presence is our legitimate interest in information and communication (Art. 6(1)(f) GDPR); where consent is requested, Art. 6(1)(a) GDPR applies.
Data processing outside the EU (including in the U.S.) is possible; this is based on the safeguards described in Section 6 (Data Privacy Framework or Standard Contractual Clauses). The most effective way to exercise your rights as a data subject is to contact the respective provider directly, as only that provider has access to the data.
We are active on the following platforms:
- Facebook / Instagram – Meta Platforms Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland. For Facebook Pages, there is joint liability under Article 26 of the GDPR (Page Insights); the relevant agreement is available at https://www.facebook.com/legal/terms/information_about_page_insights_data.
- LinkedIn – LinkedIn Ireland Unlimited Company, Dublin, Ireland.
- YouTube – Google Ireland Limited, Dublin, Ireland.
- XING – New Work SE, Hamburg, Germany.
- TikTok – TikTok Technology Limited, Dublin, Ireland.
19. Changes to This Privacy Policy
We reserve the right to amend this Privacy Policy to ensure that it always complies with current legal requirements or to reflect changes to our services. The most recent version will apply to your next visit.
Date of this version: August 2026
