Legal
Privacy policy
How we handle personal data, on what legal basis and for how long.
The German version is the legally binding one.
01Controller
The controller for data processing on this website is WEBSTROM UG (haftungsbeschränkt), Enderstr. 94, 01227 Dresden, Germany, phone +49 1529 2606090, email kontakt@webstrom.info.
02Hosting and server log files
This website runs on Firebase Hosting, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. When you open a page, your browser transmits technically necessary data which the host stores in log files: the page requested, date and time, data volume, referrer, browser type and IP address.
The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is the secure and trouble-free operation of the website. Transfer to a third country, the USA, is possible. A data processing agreement under Art. 28 GDPR is in place with the host.
03Requests made through this website
The request flow at webstrom.info/kontakt keeps your entries in your browser only, for as long as you are filling it in. When you send it, your own email application opens with the finished message. No data reaches our server before you send that message yourself.
The quote quiz at webstrom.info/angebot works differently: when you submit it, it sends your answers and contact details (name, email address, phone number and, if you provide them, company, postcode, preferred way of contact and message) over an encrypted connection to our client portal. There we create a request from it and notify our team; the email notification contains no contact details. The portal runs on Firebase App Hosting and Cloud Firestore by Google Ireland Limited, with whom a data processing agreement under Art. 28 GDPR is in place. To prevent abuse, we store your IP address only as an irreversible hash. The legal basis is Art. 6(1)(b) GDPR (pre-contractual steps at your request) and your consent under Art. 6(1)(a) GDPR, which you can withdraw at any time with effect for the future.
When you contact us by email or phone, we process your details in order to handle the request and any follow-up questions. The legal basis is Art. 6(1)(b) GDPR where the request concerns a contract, otherwise Art. 6(1)(f) GDPR and your consent under Art. 6(1)(a) GDPR.
We delete requests one month after they have been dealt with.
04Energy brokerage
Energy brokerage runs through a commissioned energy consultant who carries out the associated data processing on their own responsibility. For that processing, in particular passing data to energy suppliers and grid operators, the consultant is the independent controller within the meaning of the GDPR.
We only pass on your details to the extent that you have instructed us to. The legal basis is Art. 6(1)(b) GDPR.
05Cookies, fonts and external services
This website only sets analytics cookies with your consent, see section 06. It sets no marketing cookies. Without consent, your browser only stores your choice of light or dark, sound on or off and your decision in the cookie notice. Those values never leave your device.
The fonts used are hosted on our own server. No connection to Google Fonts or any other provider is made.
References to other websites are plain links. Only when you click one do you leave this website, and the privacy policy of that provider then applies.
06Web analytics with Google Analytics
This website uses Google Analytics 4, a web analytics service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics is only loaded if you agree in the cookie notice. Without consent, no connection to Google Analytics is made.
Once you consent, Google Analytics sets cookies (_ga and _ga_B3NH5K8E0W, lifetime up to two years) and records how the website is used: pages viewed, time on page, where the visit came from, device type, browser and approximate region. Google Analytics 4 does not store IP addresses. Advertising features and personalised ads are switched off. We use the reports to improve the content and usability of the website.
The legal basis is your consent under § 25(1) TDDDG and Art. 6(1)(a) GDPR. Transfer to the USA is possible; Google is certified under the EU-US Data Privacy Framework. A data processing agreement under Art. 28 GDPR is in place with Google. Event data in Google Analytics is deleted after 14 months.
You can withdraw your consent at any time via the “Cookie settings” link at the bottom of every page. Measurement then stops immediately and the analytics cookies are deleted.
07Your rights
You have the right to information (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection to processing based on legitimate interests (Art. 21 GDPR).
You can withdraw consent at any time with effect for the future. The lawfulness of processing carried out up to that point remains unaffected.
You have the right to lodge a complaint with a supervisory authority. The authority responsible for us is the Saxon Commissioner for Data Protection and Transparency, Devrientstraße 5, 01067 Dresden, Germany, phone +49 351 493-5401, email saechsdsb@slt.sachsen.de.
Last updated in September 2026.
