Privacy Policy
Last updated: October 2026. The German version is legally binding.
1. Controller
The controller responsible for data processing on this website is: Matthias Höfer, Brennholzinger, Sandgrubenweg 1, 82343 Pöcking, Germany. Phone: +49 163 7444304, email: matthias@brennholzinger.de.
2. General
I only process personal data where necessary to provide this website, to handle orders and quotes, and to meet legal obligations. All data is transmitted encrypted via HTTPS/TLS.
3. Hosting and server log files
The website is hosted by a technical service provider. When you visit, technically necessary data is processed automatically (IP address, date and time, page requested, browser, operating system). This data ensures secure and stable operation and is deleted after a short period. Legal basis: Art. 6(1)(f) GDPR. A data processing agreement is in place.
4. Cookies and local storage
This website uses no analytics, tracking or advertising cookies. Only technically necessary browser storage is used, e.g. for the cart, language preference and – when signed in – the session. Legal basis: Section 25(2) TDDDG and Art. 6(1)(b) and (f) GDPR.
5. Orders, quotes and customer account
When you place an order, request a quote or contact me by phone or email, I process your name, address, email, phone number, order and delivery data. This is required to perform the contract, deliver and communicate (Art. 6(1)(b) GDPR). Customer data is stored in a customer database to simplify future orders.
Data is deleted once no longer needed, unless statutory retention periods apply (usually 6 or 10 years under German commercial and tax law).
6. Payments via Stripe
Online payments are processed by Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Dublin 2, Ireland. Payment-related data (e.g. name, email, amount, payment method) is transmitted directly to Stripe. Card or bank details are never stored on my server. Legal basis: Art. 6(1)(b) GDPR. Transfers to the USA are possible; Stripe is certified under the EU-US Data Privacy Framework. More: https://stripe.com/privacy.
7. Accounting and invoices (Lexware Office)
For quotes, invoices and accounting I use Lexware Office by Haufe-Lexware GmbH & Co. KG, Munzinger Str. 9, 79111 Freiburg, Germany. Customer and invoice data is transmitted. Legal basis: Art. 6(1)(b) and (c) GDPR. A data processing agreement is in place.
8. Email delivery
Order confirmations, status updates, quotes and invoices are sent by email via a technical email provider. Only transactional emails are sent, no newsletters. Legal basis: Art. 6(1)(b) GDPR.
9. Contact
If you contact me by email or phone, I process your details to handle your request (Art. 6(1)(b) or (f) GDPR). Data is deleted once the request is resolved and no retention obligations apply.
10. Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). You can withdraw consent at any time with future effect. Just write to matthias@brennholzinger.de.
You may also lodge a complaint with a supervisory authority, e.g. the Bavarian Data Protection Authority (BayLDA), Promenade 18, 91522 Ansbach, Germany, www.lda.bayern.de.
11. Changes
I update this policy when the website or legal requirements change. The version published here applies.