Privacy Policy

1. Controller

Orbitalum Tools GmbH
Josef-Schuettler-Str. 17
78224 Singen
Germany
Web: www.orbitalum.com
Email: tools@orbitalum.com

2. Data Protection Officer

You can reach our Data Protection Officer at:

Orbitalum Tools GmbH
Data Protection Officer
Josef-Schuettler-Str. 17
78224 Singen
Germany
Email: datenschutz@orbitalum.com

3. Definitions

The terms used in this privacy policy are to be understood within the meaning of the General Data Protection Regulation (GDPR). Personal data is any information relating to an identified or identifiable natural person. Processing is any operation in connection with personal data, such as collection, storage, use, disclosure or deletion.

4. Technical provision of the website and server log files

In principle, you can visit our website without actively providing any personal information. However, when you access our website, the web server used automatically processes technical access data. This may include, in particular, IP address, date and time of access, URL accessed, referrer URL, amount of data transferred, HTTP status code, browser and operating system information, and technical log data.

Processing is necessary to deliver the website, ensure the stability and security of the systems, detect errors, and prevent misuse or attacks on our website. For security reasons, server log files are generally stored only for as long as required for the purposes stated; the current standard retention period is up to 7 days, unless longer storage is required to investigate security incidents.

Our website is operated with WordPress and is technically provided via a server environment with PHP, nginx and Plesk. The legal basis is Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in the secure, stable and efficient provision of our online offering.

5. Cookies and similar technologies

Our website uses cookies and similar technologies. Some cookies are technically necessary so that the website and its basic functions can be provided. Other technologies are used only if consent has been given.

Technically necessary cookies may be used, in particular, to store your language setting, provide the consent banner, document your consent decision, and secure forms. In particular, a WPML language cookie (wp-wpml_current_language) is used on the website to store the current language. After a consent decision, Cookiebot also sets a cookie to store and document your selection.

The legal basis for technically necessary cookies is Art. 6 para. 1 lit. f GDPR and § 25 para. 2 TDDDG. Our legitimate interest lies in providing a functional and user-friendly website. Where cookies or similar technologies are not technically necessary, they are used only on the basis of your consent pursuant to Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG.

You can revoke or change any consent you have given at any time via the cookie settings on the website. You can also delete or block cookies via your browser settings. If you completely block technically necessary cookies, some functions of the website may be restricted.

You can reopen and change your cookie settings at any time: Change cookie settings

6. Consent management with Cookiebot CMP

We use Cookiebot CMP to obtain, manage and document consent for the use of cookies and similar technologies. The provider is Usercentrics A/S, Havnegade 39, 1058 Copenhagen, Denmark.

When you access our website, a connection is established to servers of Cookiebot or Usercentrics. In particular, IP address, browser and device information, URL accessed, date and time of access, consent ID, consent status, selected cookie categories and technical log data may be processed. Processing serves to display the consent banner, store your selection, and provide proof of granted or refused consent.

The legal basis is Art. 6 para. 1 lit. c GDPR insofar as processing is carried out to fulfil statutory documentation obligations, and Art. 6 para. 1 lit. f GDPR for the secure and legally compliant operation of consent management. Further information can be found at https://www.cookiebot.com/en/privacy-policy/.

7. Contact form and contacting us

If you contact us via the contact form, by email, telephone or otherwise, we process the data you provide. Depending on the method of contact, this includes in particular name, company, email address, telephone number, message, enquiry content, and technical metadata of the communication or form submission.

Processing is carried out to handle your enquiry, to communicate with you, and, if applicable, to carry out pre-contractual or contractual measures. The legal basis is Art. 6 para. 1 lit. b GDPR insofar as your enquiry is related to a contract or pre-contractual measures. Otherwise, the legal basis is Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in the efficient handling of incoming enquiries and communication with prospects, customers and business partners.

8. SuperOffice CRM and embedded forms

We use SuperOffice CRM to process and manage customer and prospect data. Forms from SuperOffice may be embedded on our website via an iframe for this purpose. The provider is SuperOffice AS, Wergelandsveien 27, 0167 Oslo, Norway; the German company is SuperOffice GmbH, Phoenixseestraße 17, 44263 Dortmund. When you access a page with such a form, a connection is established to SuperOffice servers. Technical connection data, in particular your IP address, browser and device information, the page accessed, and date and time of access, is processed.

If you submit an embedded form, the data you enter is transmitted to SuperOffice and processed there on our behalf. Which data is processed and for what purpose depends on the respective form.

When registering for our Saws Warranty, we process in particular company, name, email address, telephone number if applicable, and country, as well as information about the product and warranty case, in particular serial number, machine type and invoice date. Processing serves to register the Saws Warranty, review and handle warranty claims, communicate with you, and document the process. The legal basis is Art. 6 para. 1 lit. b GDPR insofar as processing is necessary for the performance of the Saws Warranty.

If we offer newsletter registration via SuperOffice, we process the contact data provided in the registration form, in particular your email address and, if applicable, your name, your company and the interests you selected. Processing serves to manage and document your registration and to send the newsletter you requested. The legal basis is your consent pursuant to Art. 6 para. 1 lit. a GDPR. Registration is confirmed via a double opt-in procedure. You can revoke your consent at any time with effect for the future via the unsubscribe link in the newsletter or by sending a message to datenschutz@orbitalum.com.

For the technical provision of the embedded SuperOffice forms, the legal basis is Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in a user-friendly and efficient provision and processing of the respective forms. Further information about SuperOffice can be found at https://www.superoffice.de/unternehmen/datenschutz/.

9. Google Tag Manager, Google Analytics and Google Consent Mode

We use Google Tag Manager to centrally manage website tags and deploy them depending on your cookie or consent selection. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Tag Manager is used for the technical management of embedded services and, when loading the Tag Manager script, may transmit technical connection data such as IP address, browser and device information, URL accessed, date and time of access, and referrer information to Google.

We use Google Analytics 4 via Google Tag Manager. Google Analytics helps us to statistically analyse the use of our website and improve our online offering. In particular, page views, interactions, technical device and browser information, approximate location information, referrer URL, times of use and pseudonymous identifiers may be processed. The Google Analytics measurement ID used on this website is G-RZ4WPPK3C5; the Google Tag Manager container is GTM-5GGCHSW.

Google Analytics and comparable analytics or marketing functions are controlled via our consent management. Without your consent, analytics and marketing storage in Google Consent Mode is denied by default. In this case, technically reduced, cookieless signals may still be transmitted to Google, for example to transmit the consent status and for basic measurement without access to analytics or marketing cookies. Where Google Analytics is used with cookies or similar technologies, this is done only on the basis of your consent pursuant to Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG. You can revoke your consent at any time via the cookie settings.

Google may also transfer personal data to Google LLC in the USA. Where data is transferred to third countries, this is done on the basis of appropriate safeguards pursuant to Art. 44 et seq. GDPR, in particular the EU-U.S. Data Privacy Framework, where applicable, or the EU Standard Contractual Clauses. Further information can be found at https://policies.google.com/privacy, https://support.google.com/analytics/answer/6004245 and https://support.google.com/tagmanager/answer/9323295.

10. Protecting the contact form with Cloudflare Turnstile

To protect our forms from spam, misuse and automated access, we use Cloudflare Turnstile. The provider is Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA.

Turnstile uses technical signals to check whether a request is likely to come from a human or from automated systems. In particular, IP address, user agent, browser and device properties, TLS/connection information, the page accessed, sitekey assignment, technical interaction data and other security features may be processed. The check runs in the background or via an embedded Turnstile element in the form.

The legal basis for the use of Turnstile is Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in protecting the website, the forms and our IT systems from misuse, spam and automated attacks. If consent is required for the use of Turnstile in individual cases, processing is carried out on the basis of your consent pursuant to Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG. Where data is transferred to the USA, this is done on the basis of appropriate safeguards pursuant to Art. 44 et seq. GDPR, in particular the EU-U.S. Data Privacy Framework, where applicable, or the EU Standard Contractual Clauses. Further information can be found at https://www.cloudflare.com/en-au/turnstile-privacy-policy/.

11. Google Maps on the contact page

On our contact page, we embed maps from Google Maps to display locations and directions. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. When you access the contact page, a connection to Google servers may be established. In particular, IP address, browser and device information, date and time of access, referrer URL, location and map section data, and interaction data may be processed. Google may also transfer data to servers of Google LLC in the USA.

Google Maps is loaded only after you have given your consent. Before your consent, no connection is made to Google servers. The legal basis for embedding and loading Google Maps is your consent pursuant to Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG. You can revoke your consent at any time via the cookie settings.

Information from Google can be found at https://policies.google.com/privacy and https://cloud.google.com/maps-platform/terms.

12. Download area, search and filter functions

Our website provides download, search and filter functions, for example in the download area, for FAQ content, how-to videos or product-related content. When using these functions, technical usage data, search terms, filter selections, requested files, times of use and technical access data may be processed.

Processing is carried out to provide the requested content and functions, improve user guidance and stabilise the offering. The legal basis is Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in the user-friendly and functional provision of our online offering.

13. Promotional communication

We may use data from existing customers for direct advertising of our own similar goods or services, provided the legal requirements are met. In addition, we use personal data for promotional purposes only if consent has been given.

You can object to the processing of your data for direct advertising purposes at any time. You can send your objection in particular to datenschutz@orbitalum.com. The legal basis is Art. 6 para. 1 lit. f GDPR in conjunction with § 7 para. 3 UWG for advertising to existing customers, and Art. 6 para. 1 lit. a GDPR insofar as consent is obtained.

14. YouTube videos, social media links and external platforms

YouTube videos may be embedded on our website. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The videos are loaded only if you have consented to the relevant cookies or embedded media via our cookie banner. Only after your consent can a connection to YouTube or Google servers be established.

When loading and playing YouTube videos, in particular IP address, browser and device information, the page accessed, referrer URL, date and time of access, video and interaction data, and cookie or comparable identifiers may be processed. Google may also link this data to your Google account if you are logged in there, and transfer data to Google LLC in the USA.

The legal basis for embedding and loading YouTube videos is your consent pursuant to Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG. You can revoke your consent at any time via the cookie settings.

Our website also contains links to external platforms and profiles, in particular LinkedIn and YouTube. For pure links, data is generally transferred to these platforms only when you click a corresponding link and access the external platform.

The respective provider is responsible for the processing of personal data on the external platforms. The privacy information of the respective providers applies:

• LinkedIn: https://www.linkedin.com/legal/privacy-policy
• YouTube/Google: https://policies.google.com/privacy

Information on the confidential ITW helpline can be found at https://secure.ethicspoint.com/domain/media/de/gui/29350/index.html. When accessing this external offering, the privacy information of the respective operator applies.

15. Recipients of personal data

Within our company, only those departments have access to personal data that need it to fulfil the purposes stated. In addition, we may transfer personal data to service providers and processors, in particular hosting, IT, maintenance, support, communication, consent management, security, CRM and web service providers.

Data is passed on to third parties only if this is permitted by law, you have consented, disclosure is necessary for contract performance, we are legally obliged to do so, or we have a legitimate interest in disclosure and your interests or fundamental rights do not prevail.

16. Data transfer to third countries

When using certain services, personal data may be transferred to countries outside the European Union or the European Economic Area, in particular to the USA. This applies in particular to services of international providers such as Cloudflare or Google.

If there is no adequacy decision for the respective third country, we ensure that appropriate safeguards pursuant to Art. 44 et seq. GDPR are in place, for example by concluding EU Standard Contractual Clauses, additional protective measures, or certification of the respective provider under the EU-U.S. Data Privacy Framework, where applicable.

17. Storage period

We store personal data only for as long as this is necessary for the respective processing purposes or statutory retention obligations exist. After that, the data is deleted or anonymised. Server log files are regularly deleted after a short period, unless longer storage is required to investigate security incidents. We generally store communication and contract data for the duration of the business relationship and beyond that within the scope of statutory limitation and retention periods.

18. Automated decision-making

There is no solely automated decision-making within the meaning of Art. 22 GDPR via our website.

19. Rights of data subjects

Within the scope of the legal requirements, you have the following rights:

• Right of access to the data processed about you (Art. 15 GDPR),
• Right to rectification of inaccurate data (Art. 16 GDPR),
• Right to erasure (Art. 17 GDPR),
• Right to restriction of processing (Art. 18 GDPR),
• Right to data portability (Art. 20 GDPR),
• Right to object to processing based on Art. 6 para. 1 lit. e or f GDPR (Art. 21 GDPR),
• Right to withdraw consent given with effect for the future (Art. 7 para. 3 GDPR),
• Right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR).

To exercise your rights, you can contact datenschutz@orbitalum.com.

20. Right to object

If we process personal data on the basis of Art. 6 para. 1 lit. f GDPR, you have the right to object to this processing at any time for reasons arising from your particular situation. If personal data is processed for direct advertising, you have the right to object to processing for this purpose at any time. In the event of an objection to direct advertising, we will no longer process your personal data for these purposes.

You can assert your data protection objection digitally by sending us an informal message to datenschutz@orbitalum.com. In addition, you can revoke or change cookie and tracking consents at any time via the cookie settings.

21. Withdrawal of consent

Some processing operations are possible only with your consent. You can revoke consent you have given at any time with effect for the future. To do so, an informal message to us is sufficient, for example by email to tools@orbitalum.com or datenschutz@orbitalum.com. The lawfulness of the processing carried out up to the revocation remains unaffected by the revocation.

22. Currency and technologies used

This privacy policy reflects the live status as of August 13, 2026. Our website currently uses, in particular, WordPress, WPML, Contact Form 7, Cookiebot CMP, SuperOffice CRM for embedded forms, Google Tag Manager, Google Analytics 4 with Google Consent Mode, Cloudflare Turnstile, Google Maps on the contact page, embedded YouTube videos after consent, and links to LinkedIn and YouTube. We will adapt this privacy policy if the technologies used, legal requirements or our processing operations change.

As of: August 13, 2026