Legal
Privacy Policy
Information on the processing of personal data pursuant to Art. 13 GDPR.
1. Controller
Andreas ThomsenEisenbahnstraße 24
79341 Kenzingen
Germany
Email: info@thom-med.de
2. General notes
This is a static website that sets no cookies and uses no tracking or web analytics. When you visit this website, only technically necessary data (server logs) is processed by the hosting provider.
3. Hosting
This website is hosted by Vercel Inc., 440 N Barranca Avenue #4133, Covina, CA 91723, USA. When accessing the website, server log data is collected automatically, including IP address, date and time of access, page accessed, data transferred, and browser used. This data is required for the secure operation of the website.
As Vercel is a US-based provider, personal data may be transferred to the United States. Vercel is certified under the EU-US Data Privacy Framework (EU Commission adequacy decision of 10 July 2023). Standard contractual clauses pursuant to Art. 46(2)(c) GDPR additionally apply as a supplementary safeguard.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in the secure operation of the website).
4. Contact form
The contact form on this website is processed via Web3Forms (web3forms.com). Data entered (name, institution, email address, message) is transmitted to Web3Forms servers and forwarded as an email notification to Thom-Med.
Web3Forms is operated by ELP DEV (India) and uses Cloudflare infrastructure, so a transfer of personal data to third countries (USA / India) may occur. Standard contractual clauses pursuant to Art. 46(2)(c) GDPR apply as a supplementary safeguard.
Web3Forms stores submitted form data only for the purpose of delivering the email notification and deletes it thereafter. No form data is permanently stored on Web3Forms servers.
Purpose: processing sample requests and technical enquiries.
Legal basis: Art. 6(1)(b) GDPR (initiation of a contractual relationship) or Art. 6(1)(f) GDPR (legitimate interest in communicating with prospective customers).
5. Cookies and tracking
This website sets no cookies. No analytics, marketing, or tracking tools are used. There is no website tracking via Google Analytics, Facebook Pixel, or comparable services.
6. Self-hosted fonts
This website uses exclusively locally hosted fonts (Inter Variable and Roboto). No fonts are loaded from Google Fonts or other external services. When loading the page, no data is transmitted to external font services.
7. Your rights
You have the following rights regarding your personal data:
- Right of access (Art. 15 GDPR)
- Right to rectification (Art. 16 GDPR)
- Right to erasure (Art. 17 GDPR)
- Right to restriction of processing (Art. 18 GDPR)
- Right to data portability (Art. 20 GDPR)
- Right to object to processing (Art. 21 GDPR)
To exercise your rights, please contact: info@thom-med.de
8. Right to lodge a complaint
You have the right to lodge a complaint with a data protection supervisory authority regarding the processing of your personal data by us. The competent authority for Baden-Württemberg, Germany is:
Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-WürttembergLautenschlagerstraße 20
70173 Stuttgart
Germany
www.baden-wuerttemberg.datenschutz.de
9. Currency of this policy
This privacy policy is currently valid and dated 2026. Changes to our website or changes in legal requirements may make it necessary to update this privacy policy.