Privacy policy

Datenschutzerklärung · as of October 2026

1. Controller

The controller responsible for data processing on this website within the meaning of the EU General Data Protection Regulation (GDPR) is:

Refraxys GmbH
Hilde-Ephraim-Straße 3, 14193 Berlin, Germany
Represented by Dr.-Ing. Ole Brettschneider, Managing Director
Phone: +49 30 32703753 · Mobile: +49 175 4727007 · Email: info@refraxys.com

We are not required to appoint a data protection officer.

2. Overview

This website is a simple information page. It does not use cookies, advertising tools, social media plugins or content loaded from third-party servers. Apart from the cookieless visitor statistics described in section 4, it does not use tracking tools. Fonts are served from the same server as this website. The contact card page refraxys.com/olebrettschneider can offer an optional form for your name, company and email address, and it can notify us by email when someone saves the contact. On larger screens the home page offers a contact form. Section 5 describes both forms and the notification.

3. Hosting and server log files

This website is hosted by Vercel Inc., 440 N Barranca Avenue #4133, Covina, CA 91723, USA. Vercel delivers the website through a worldwide server network, so data may also be processed on servers outside the EU, in particular in the USA. When you visit the website, the server automatically records technical information that your browser transmits: IP address, date and time of access, page requested, amount of data transferred, referrer URL, browser type and operating system.

This data is required to deliver the website and to ensure its security and stability. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in the secure and error-free operation of the website. Request logs are available to us for no longer than one day; Vercel may retain log data for longer where this is necessary for security purposes, in accordance with its privacy policy. Vercel processes the data as a processor on the basis of a data processing agreement (Art. 28 GDPR). Vercel Inc. is certified under the EU-U.S. Data Privacy Framework, on the basis of which the European Commission has issued an adequacy decision (Art. 45 GDPR).

4. Visitor statistics (Vercel Web Analytics)

To see how many people visit this website, which pages they read and which website referred them, we use Vercel Web Analytics, a service of Vercel Inc. (address in section 3). The script for it is loaded from our own domain.

Vercel Web Analytics does not use cookies. Instead, Vercel recognises a visitor by a hash created from the incoming request. The hash is valid for one day and then reset, so visitors cannot be followed across days or across websites. The page views recorded are not tied to any individual or IP address.

With each page view, Vercel records the following data: time, address of the page, referring website, filtered query parameters, approximate location (country, region, city), operating system and version, browser and version, device type and the version of the script. We only see this data as aggregated statistics.

The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in knowing which content of our website is used, so that we can improve it. Vercel processes the data as our processor on the basis of its data processing agreement (Art. 28 GDPR). For processing in the USA, the information in section 3 applies.

5. Contact by email, phone or form

If you contact us by email or phone, we process the data you provide (e.g. name, company, contact details and the content of your enquiry) in order to handle your enquiry and any follow-up questions.

Where the contact card page refraxys.com/olebrettschneider offers the optional form after “Save contact”, you can send us your name, company and email address; the page sends them as an email to our mailbox through the email delivery service Resend (Plus Five Five, Inc., USA), and we handle them like an enquiry by email. The page can also notify us by email when someone taps “Save contact”; that email contains the time and the device type and browser read from the browser’s user agent, without IP address or location.

If you send us a request through the contact form on the home page, we process the details you enter: your request type, metal and quantity if given, name, company, email address, phone number if given and your message, together with the page and language you sent the form from. Request type, name, email address and message are required; all other fields are optional. To keep out automated spam, the form contains a hidden field and sends the time the page was loaded; neither is stored. The form sends your request as an email to our mailbox through Resend (Plus Five Five, Inc., 2261 Market Street #5039, San Francisco, CA 94114, USA), our processor under Art. 28 GDPR on the basis of its data processing agreement. Resend processes the email in the USA and keeps it, including its content, together with the delivery logs for 30 days. Plus Five Five, Inc. is certified under the EU-U.S. Data Privacy Framework, on the basis of which the European Commission has issued an adequacy decision (Art. 45 GDPR); in addition, the data processing agreement includes the EU standard contractual clauses. In our mailbox we handle the request like an enquiry by email.

The legal basis is Art. 6(1)(b) GDPR where your enquiry relates to a contract or pre-contractual measures, and otherwise Art. 6(1)(f) GDPR, based on our legitimate interest in responding to enquiries. We delete the data once it is no longer needed for this purpose, unless statutory retention obligations (in particular under commercial and tax law) require longer storage.

Our email service is provided by Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland (Microsoft 365), acting as our processor under Art. 28 GDPR. Data may also be processed by Microsoft Corporation in the USA. Microsoft Corporation is certified under the EU-U.S. Data Privacy Framework, on the basis of which the European Commission has issued an adequacy decision (Art. 45 GDPR).

6. Your rights

Under the GDPR you have the following rights regarding your personal data:

To exercise these rights, simply contact us using the details above.

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is: Berliner Beauftragte für Datenschutz und Informationsfreiheit, Alt-Moabit 59–61, 10555 Berlin, Germany.

7. Security

This website uses TLS encryption (recognisable by “https://” in the address bar) to protect data transmitted between your browser and our server.

8. Changes

We may update this privacy policy when our website or the legal requirements change. The current version is always available on this page.