Privacy Policy

1. Controller

Orbitalum Tools GmbH
Josef-Schuettler-Str. 17
78224 Singen
Germany
Website: www.orbitalum.com
E-mail: tools@orbitalum.com

2. Data Protection Officer

You can contact our Data Protection Officer at:

Orbitalum Tools GmbH
Data Protection Officer
Josef-Schuettler-Str. 17
78224 Singen
Germany
E-mail: datenschutz@orbitalum.com

3. Definitions

The terms used in this Privacy Policy are to be understood within the meaning of the General Data Protection Regulation (GDPR). Personal data means any information relating to an identified or identifiable natural person. Processing means any operation performed in connection with personal data, such as collection, storage, use, disclosure or deletion.

4. Technical Provision of the Website and Server Log Files

You can generally visit our website without actively providing any personal information. However, when you access our website, the web server used automatically processes technical access data. This may include, in particular, IP address, date and time of access, URL accessed, referrer URL, amount of data transferred, HTTP status code, browser and operating system information, as well as technical protocol data.

The processing is necessary in order to deliver the website, ensure the stability and security of the systems, detect errors and prevent misuse or attacks on our website. For security reasons, server log files are generally stored only for as long as is necessary for the purposes mentioned; the current standard storage period is up to 7 days, unless longer storage is required to investigate security incidents.

Our website is operated using WordPress and is technically provided via a server environment with PHP, nginx and Plesk. The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure, stable and efficient provision of our online offering.

5. Cookies and Comparable Technologies

Our website uses cookies and comparable technologies. Some cookies are technically necessary in order to provide the website and its basic functions. Other technologies are used only where consent has been given.

Technically necessary cookies may be used, in particular, to store your language setting, to provide the consent banner, to document your consent decision and to secure forms. In particular, a WPML language cookie (wp-wpml_current_language) is used on the website to store the current language. After a consent decision has been made, Cookiebot also sets a cookie to store and document your selection.

The legal basis for technically necessary cookies is Art. 6(1)(f) GDPR and Section 25(2) TDDDG. Our legitimate interest lies in the functional and user-friendly provision of the website. Where cookies or comparable technologies are not technically necessary, they are used only on the basis of your consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) TDDDG.

You can withdraw or change any consent you have given at any time via the cookie settings on the website. You can also delete or block cookies using your browser settings. If technically necessary cookies are completely blocked, individual functions of the website may be restricted.

6. Consent Management with Cookiebot CMP

We use Cookiebot CMP to obtain, manage and document consent for the use of cookies and comparable technologies. The provider is Usercentrics A/S, Havnegade 39, 1058 Copenhagen, Denmark.

When you access our website, a connection is established to servers of Cookiebot or Usercentrics. In this context, in particular, IP address, browser and device information, URL accessed, date and time of access, consent ID, consent status, selected cookie categories and technical protocol data may be processed. The processing serves to display the consent banner, store your selection and provide evidence of consents given or rejected.

The legal basis is Art. 6(1)(c) GDPR, insofar as the processing is carried out to fulfil statutory documentation obligations, and Art. 6(1)(f) GDPR for the secure and legally compliant operation of consent management. Further information can be found at https://www.cookiebot.com/us/privacy-policy/.

7. Contact Form and Contacting Us

If you contact us via the contact form, by e-mail, telephone or by other means, we process the data you provide to us. Depending on the method of contact, this includes in particular your name, company, e-mail address, telephone number, message, content of the enquiry, as well as technical metadata relating to the communication or form submission.

The processing is carried out to handle your enquiry, to communicate with you and, where applicable, to carry out pre-contractual or contractual measures. The legal basis is Art. 6(1)(b) GDPR, insofar as your enquiry is related to a contract or pre-contractual measures. Otherwise, the legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the efficient handling of incoming enquiries and communication with prospects, customers and business partners.

8. Google Tag Manager, Google Analytics and Google Consent Mode

We use Google Tag Manager to centrally manage website tags and to deploy them depending on your cookie or consent selection. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Tag Manager is used for the technical management of integrated services and, when the Tag Manager script is loaded, may transmit technical connection data such as IP address, browser and device information, URL accessed, date and time of access, as well as referrer information to Google.

We use Google Analytics 4 via Google Tag Manager. Google Analytics helps us statistically evaluate the use of our website and improve our online offering. In this context, in particular, page views, interactions, technical device and browser information, approximate location information, referrer URL, times of use and pseudonymous identifiers may be processed. The Google Analytics measurement ID used on this website is G-RZ4WPPK3C5; the Google Tag Manager container is GTM-5GGCHSW.

Google Analytics and comparable analytics or marketing functions are controlled via our consent management system. Without your consent, analytics and marketing storage in Google Consent Mode are denied by default. In this case, technically reduced, cookieless signals may nevertheless be transmitted to Google, for example to communicate the consent status and for basic measurement without access to analytics or marketing cookies. Insofar as Google Analytics is used with cookies or comparable technologies, this is done only on the basis of your consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) TDDDG. You can withdraw your consent at any time via the cookie settings.

Google may also transfer personal data to Google LLC in the USA. Where data is transferred to third countries, this is done on the basis of appropriate safeguards pursuant to Art. 44 et seq. GDPR, in particular the EU-U.S. Data Privacy Framework, where applicable, or the EU Standard Contractual Clauses. Further information can be found at https://policies.google.com/privacy, https://support.google.com/analytics/answer/6004245 and https://support.google.com/tagmanager/answer/9323295.

9. Protection of the Contact Form with Cloudflare Turnstile

To protect our forms against spam, misuse and automated access, we use Cloudflare Turnstile. The provider is Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA.

Turnstile uses technical signals to check whether a request is likely to originate from a human or from automated systems. In this context, in particular, IP address, user agent, browser and device characteristics, TLS/connection information, the page accessed, sitekey assignment, technical interaction data and other security features may be processed. The check runs in the background or via an embedded Turnstile element in the form.

The legal basis for the use of Turnstile is Art. 6(1)(f) GDPR. Our legitimate interest lies in protecting the website, the forms and our IT systems against misuse, spam and automated attacks. Where data is transferred to the USA, this is done on the basis of appropriate safeguards pursuant to Art. 44 et seq. GDPR, in particular the EU-U.S. Data Privacy Framework, where applicable, or the EU Standard Contractual Clauses. Further information can be found at https://www.cloudflare.com/en-au/turnstile-privacy-policy/.

10. Google Maps on the Contact Page

On our contact page, we embed maps from Google Maps in order to display locations and directions. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. When the contact page is accessed, a connection to Google servers may be established. In this context, in particular, IP address, browser and device information, date and time of access, referrer URL, location and map section data, as well as interaction data may be processed. Google may also transfer data to servers of Google LLC in the USA.

The legal basis for displaying the maps is Art. 6(1)(f) GDPR, insofar as the maps are necessary for the user-friendly display of our locations. Where Google Maps is not technically necessary or sets further cookies or tracking technologies, the processing is carried out only on the basis of your consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) TDDDG.

Note on the current technical implementation: Google Maps is currently loaded on the contact page as soon as the page is accessed. From a data protection law perspective, prior blocking and activation only after consent would be preferable. Information from Google can be found at https://policies.google.com/privacy and https://cloud.google.com/maps-platform/terms.

11. Download Area, Search and Filter Functions

Our website provides download, search and filter functions, for example in the download area, for FAQ content, how-to videos or product-related content. When these functions are used, technical usage data, search terms, filter selections, requested files, times of use and technical access data may be processed.

The processing is carried out to provide the requested content and functions, to improve user navigation and to stabilise the offering. The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the user-friendly and functional provision of our online offering.

12. Promotional Communication

We may use data from existing customers for direct advertising for our own similar goods or services, provided that the statutory requirements are met. In addition, we use personal data for promotional purposes only where consent has been given.

You may object to the processing of your data for direct advertising purposes at any time. You may send your objection in particular to datenschutz@orbitalum.com. The legal basis is Art. 6(1)(f) GDPR in conjunction with Section 7(3) UWG for advertising to existing customers, and Art. 6(1)(a) GDPR insofar as consent is obtained.

13. YouTube Videos, Social Media Links and External Platforms

YouTube videos may be embedded on our website. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The videos are loaded only if you have consented to the corresponding cookies or embedded media via our cookie banner. Only after your consent has been given can a connection to servers of YouTube or Google be established.

When YouTube videos are loaded and played, in particular, IP address, browser and device information, page accessed, referrer URL, date and time of access, video and interaction data, as well as cookies or comparable identifiers may be processed. Google may also link this data to your Google account if you are logged in there, and may transfer data to Google LLC in the USA.

The legal basis for embedding and loading YouTube videos is your consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) TDDDG. You can withdraw your consent at any time via the cookie settings.

Our website also contains links to external platforms and profiles, in particular LinkedIn and YouTube. In the case of mere links, data is generally transmitted to these platforms only when you click on the corresponding link and access the external platform.

The respective provider is responsible for the processing of personal data on the external platforms. The privacy information of the respective providers applies:

• LinkedIn: https://www.linkedin.com/legal/privacy-policy
• YouTube/Google: https://policies.google.com/privacy

Information on the confidential ITW Helpline can be found at https://secure.ethicspoint.com/domain/media/de/gui/29350/index.html. When accessing this external offering, the privacy information of the respective operator applies.

14. Recipients of Personal Data

Within our company, only those departments that require access to personal data in order to fulfil the stated purposes receive such access. In addition, we may transfer personal data to service providers and processors, in particular to hosting, IT, maintenance, support, communication, consent management, security and web service providers.

Data is disclosed to third parties only if this is permitted by law, if you have given your consent, if the disclosure is necessary for the performance of a contract, if we are legally obliged to do so, or if we have a legitimate interest in the disclosure and your interests or fundamental rights do not override this interest.

15. Data Transfers to Third Countries

When using individual services, personal data may be transferred to countries outside the European Union or the European Economic Area, in particular to the USA. This applies in particular to services provided by international providers such as Cloudflare or Google.

Where no adequacy decision exists for the respective third country, we ensure that appropriate safeguards pursuant to Art. 44 et seq. GDPR are in place, for example by concluding EU Standard Contractual Clauses, implementing supplementary protective measures or ensuring certification of the respective provider under the EU-U.S. Data Privacy Framework, where applicable.

16. Storage Period

We store personal data only for as long as is necessary for the respective processing purposes or as long as statutory retention obligations exist. Thereafter, the data is deleted or anonymised. Server log files are regularly deleted after a short period, unless longer storage is required to investigate security incidents. Communication and contract data are generally stored for the duration of the business relationship and beyond that within the scope of statutory limitation and retention periods.

17. Automated Decision-Making

No solely automated decision-making within the meaning of Art. 22 GDPR takes place via our website.

18. Rights of Data Subjects

Within the scope of the statutory requirements, you have the following rights:

• Right of access to the data processed about you (Art. 15 GDPR),
• Right to rectification of inaccurate data (Art. 16 GDPR),
• Right to erasure (Art. 17 GDPR),
• Right to restriction of processing (Art. 18 GDPR),
• Right to data portability (Art. 20 GDPR),
• Right to object to processing based on Art. 6(1)(e) or (f) GDPR (Art. 21 GDPR),
• Right to withdraw consent given with effect for the future (Art. 7(3) GDPR),
• Right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR).

To exercise your rights, you can contact datenschutz@orbitalum.com.

19. Right to Object

If we process personal data on the basis of Art. 6(1)(f) GDPR, you have the right, on grounds relating to your particular situation, to object at any time to such processing. Where personal data is processed for direct advertising purposes, you have the right at any time to object to the processing for this purpose. In the event of an objection to direct advertising, we will no longer process your personal data for these purposes.

20. Withdrawal of Consent

Some processing operations are possible only with your consent. You may withdraw any consent you have given at any time with effect for the future. A simple notification to us is sufficient for this purpose, for example by e-mail to tools@orbitalum.com or datenschutz@orbitalum.com. The lawfulness of processing carried out until the withdrawal remains unaffected by the withdrawal.

21. Current Status and Technologies Used

This Privacy Policy reflects the live status as of 23 June 2026. Our website currently uses, in particular, WordPress, WPML, Contact Form 7, Cookiebot CMP, Google Tag Manager, Google Analytics 4 with Google Consent Mode, Cloudflare Turnstile, Google Maps on the contact page, embedded YouTube videos after consent, as well as links to LinkedIn and YouTube. We amend this Privacy Policy if the technologies used, the legal requirements or our processing operations change.

Last updated: 23 June 2026