Privacy Policy & Data Handling Procedures

1. Data Controller Identification

The responsible controller for processing operations conducted on this domain is:

2. Information Collected Across This Platform

Our operational architecture enforces data minimization. We collect and process only the following personal categories:

• Contact Inquiry Data: When you submit our web communication form, we process your full name, business or private email address, selected engineering topic, and message text.
• HTTP Connection Telemetry: Standard web server log files automatically capture incoming IP addresses (stored with terminal octet masking), request timestamps, browser user agent strings, HTTP status codes, and referring URL paths.
• Local Storage State: We store a single binary consent key within browser local storage (atlas_cookie_consent) recording whether you accepted, rejected, or customized preference controls.

3. Purposes & Legal Bases of Processing

Every processing operation conducted on our systems aligns strictly with Article 6(1) of the GDPR:

• Inquiry Resolution (Art. 6(1)(b) & (f)): Form submission data is processed exclusively to answer technical questions, clarify material recovery indices, or deliver requested documentation.
• System Stability & Security (Art. 6(1)(f)): Web server logs are monitored to detect automated scraping, distributed denial-of-service attempts, and routing failures. We claim a legitimate interest in safeguarding system uptime.
• Consent Verification (Art. 6(1)(c)): Retaining cookie preference status in client-side storage is necessary to demonstrate compliance with European ePrivacy directives.

4. Third-Party Processors & Hosting Architecture

We do not operate third-party advertising cookies, external behavioral tracking pixels, or algorithmic profile builders. Infrastructure is restricted to secure cloud server hosting located within the European Economic Area (EEA). Our hosting facilities maintain ISO/IEC 27001 physical security certifications and execute strict Data Processing Agreements (DPAs) mandating end-to-end data encryption in transit and at rest.

5. Retention Durations

Personal data is retained only for the duration required to achieve its stated collection objective:

• Contact Submissions: Form communications are retained in active resolution inboxes for a maximum of 90 days following inquiry closure, after which messages are purged unless required for legal retention.
• Server Log Files: Aggregated HTTP logs are automatically scrubbed and deleted on a rolling 30-day schedule.
• Consent Tokens: Client-side consent tokens stored in your browser persist for 365 days unless you clear local application storage manually.

6. Data Subject Rights Under GDPR

If you reside within the European Union, European Economic Area, or United Kingdom, you hold clear statutory rights regarding personal records:

• Right of Access (Art. 15): You may request formal confirmation and copies of personal data stored concerning your identity.
• Right to Rectification (Art. 16): You may demand correction of erroneous, incomplete, or out-of-date records.
• Right to Erasure (Art. 17): You may demand complete deletion of personal records where processing is no longer required by law.
• Right to Restriction & Objection (Arts. 18 & 21): You may contest processing based on legitimate interests or demand processing suspension during dispute evaluation.
• Right to Data Portability (Art. 20): You may receive your provided records in a structured, machine-readable format.

To exercise any statutory right, submit a signed request to [email protected]. We fulfill verified identity requests within thirty calendar days without charge.

7. Supervisory Authority Complaints

You maintain the right to register a formal complaint with a competent European data protection supervisory authority if you evaluate our data operations as non-compliant. The primary supervisory authority for our German operations is the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW).