Privacy policy

This English version is provided for information. The German version is the legally binding one.

1 · Controller

The controller responsible for data processing on this website within the meaning of Art. 4 No. 7 GDPR is:

ITR GmbH Hauptstraße 31 93186 Pettendorf Germany

Telephone: +49 (0) 9409-777 3598 E-mail: info@itr-anlagenbau.com

Represented by the management: Fikret Önal, Davut Varli

2 · Data protection officer

Mr. Melih Önal E-mail: datenschutzbeauftragter@itr-anlagenbau.com Postal address: ITR GmbH, “An den Datenschutzbeauftragten” (To the data protection officer), Hauptstraße 31, 93186 Pettendorf

Please direct inquiries from authorities to behoerdenanfragen@itr-anlagenbau.com.

3 · What this website does not do

So that you do not have to search, first what does not take place here:

• No cookies. The website sets no cookies — neither its own nor third-party ones. That is why there is no consent dialog either.
• No reach measurement, no analysis tools. No Google Analytics, no Matomo, no pixel, no tag manager.
• No profiling, no automated decision-making within the meaning of Art. 22 GDPR.
• No embedded third-party content. No maps, no videos, no social network buttons, no advertising networks.
• No storage in the browser. Neither localStorage nor sessionStorage.
• No fonts from third-party servers. The fonts used are downloaded when the website is built and loaded from our own delivery path. When the site is accessed, no connection to Google is established.

The pages of this website are generated in advance and delivered as finished files. The only thing processed server-side is the inquiry form — and only at the moment you submit it.

4 · Accessing the website — server log files

Each time the site is accessed, technically necessary connection data that your browser transmits automatically is processed:

• IP address of the requesting device
• date and time of access
• address of the requested page or file
• transfer status and amount of data transferred
• browser and operating system used
• if applicable, the previously visited page (referrer)

Purpose: delivery of the website, operational security, detection and defense against attacks, and error analysis.

Legal basis: Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in the secure and stable operation of the website. Without processing the IP address, delivery is technically not possible.

This data is not merged with other data sources. No evaluation relating to individuals takes place.

Hosting: The website is operated by Vercel Inc., which in this respect acts as a processor pursuant to Art. 28 GDPR. On processing in the United States, see section 8.

Retention period: The log data is kept exclusively for the aforementioned purposes and deleted as soon as it is no longer required for them. No further retention takes place. If log data is exceptionally needed to investigate a specific security incident, retention ends with its final resolution.

5 · Inquiry form

Via our inquiry process you can send us a technical inquiry. This is the only place on this website where you transmit data to us.

Which details are collected

Mandatory details — without them we cannot process the inquiry:

Voluntary details — they improve the reply but are not required: telephone number · workpiece and material · type of contamination · required cleanliness · production volume and cycle time · system designation · serial number · description of the task · a drawing or a photo as a file attachment.

For the attachment: a maximum of 4 MB; permitted are .pdf, .step, .stp, .stl, .dxf, .jpg, .jpeg and .png. Both are checked server-side.

Automatically transmitted context: If you open the form from a product, industry or service page, the relevant pillar, topic and industry are transmitted along with it, so that your inquiry does not arrive without context. These details describe the previously visited page, not your person. In addition, we assign a transaction number and a timestamp.

What happens to the details

After submission, the server checks the entries and sends two e-mails:

1. The inquiry to the responsible mailbox of ITR GmbH — with all details and, if present, the file attachment. Your e-mail address is stored as the reply address. For service and spare parts requests, a separate mailbox may be responsible.
2. A confirmation of receipt to you — with transaction number and a summary of your details. Without your file attachment; this goes exclusively to us.

Dispatch takes place via SMTP through the e-mail service of our provider ALL-INKL.COM from a sender mailbox of ITR GmbH. No copy in a “Sent items” folder is created — the inquiry exists only in the mailbox that receives it.

No storage on the web server takes place. There is no database, no ticket system and no CRM. Your details are contained in the two e-mails; after that they exist only in the mailboxes of ITR GmbH at ALL-INKL.COM, like any other business e-mail.

If dispatch fails, you receive an honest error message with telephone number and e-mail address. A delivery that did not take place is never confirmed.

Legal basis: Art. 6 para. 1 lit. b GDPR, insofar as your inquiry is directed at the conclusion or performance of a contract (pre-contractual measures). Otherwise Art. 6 para. 1 lit. f GDPR — our legitimate interest in answering business inquiries.

Retention period: We process your details until your request has been finally clarified. If the inquiry leads to a business relationship, the commercial and tax retention periods of six or ten years apply (Section 257 HGB, German Commercial Code; Section 147 AO, German Fiscal Code). If it does not lead to one, we delete the correspondence as soon as it is no longer needed and no retention obligation stands in the way.

Protection against automated submissions

The form contains an additional field that is invisible to you. If it is filled in — which only automated programs do — we discard the submission.

We deliberately do not use a picture puzzle (CAPTCHA). Such a puzzle would be a hurdle for people with disabilities and would mean a data transfer to a third-party provider. The described method does without both.

6 · Contact by e-mail, telephone or post

If you contact us directly, we process your details to handle your request. The legal basis is Art. 6 para. 1 lit. b GDPR for contract-related requests, otherwise Art. 6 para. 1 lit. f GDPR. For the retention period, section 5 applies accordingly.

7 · Recipients and processors

Your data is received by:

Contracts for processing pursuant to Art. 28 GDPR are in place with all service providers that process personal data for us.

No transfer to third parties for advertising purposes takes place.

8 · Transfer to third countries

The website is operated by Vercel Inc., based in the United States. The connection data named in section 4 is therefore also processed there.

The transfer is safeguarded twice over:

• Adequacy decision. Vercel Inc. is certified under the EU-U.S. Data Privacy Framework. For certified companies, the European Commission has determined an adequate level of protection by decision of July 10, 2023 (Art. 45 GDPR).
• Standard contractual clauses. In addition, the data processing agreement concluded with Vercel incorporates the standard contractual clauses of the European Commission (Art. 46 para. 2 lit. c GDPR).

The e-mail dispatch and the mailboxes of ITR GmbH are located at ALL-INKL.COM — Neue Medien Münnich, based in Germany. Your details transmitted via the inquiry form therefore do not leave the European Union.

9 · Your rights

You have the following rights vis-à-vis us:

To exercise them, a message to our data protection officer is sufficient. In case of reasonable doubts about your identity, we may request additional information to confirm it.

Right to object

If we process your data on the basis of legitimate interests pursuant to Art. 6 para. 1 lit. f GDPR, you may object to this processing at any time on grounds relating to your particular situation. We will then no longer process your data unless we demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing serves the establishment, exercise or defense of legal claims.

You may object to processing for the purpose of direct marketing at any time without giving reasons. After that, no processing for this purpose takes place anymore.

10 · Competent supervisory authority

Bayerisches Landesamt für Datenschutzaufsicht (BayLDA) (Bavarian State Office for Data Protection Supervision) Promenade 27, 91522 Ansbach, Germany Telephone: +49 981 180093-0 E-mail: poststelle@lda.bayern.de

11 · Processing in business dealings

Beyond the website, we process personal data of contact persons at customers, suppliers and service providers.

Purposes: address management and communication · handling of quotations, orders and purchase orders · information and advice on our products and services · establishment, exercise and defense of legal claims · handling of data subject rights under data protection law.

Categories: contact data (name, function, address, e-mail, telephone, fax), communication content, contract and order data, as well as declared withdrawals and objections.

Legal bases: Art. 6 para. 1 lit. b GDPR where there is a contractual relation · Art. 6 para. 1 lit. f GDPR where there is a legitimate interest in handling the business relationship and in direct marketing to existing customers · Art. 6 para. 1 lit. c GDPR where there are legal obligations.

Origin: The data comes directly from you or from other contact persons of your company.

Necessity: Provision is neither legally nor contractually prescribed, but is required for conducting the business relationship. Without it, cooperation including the associated communication is not possible.

12 · Changes to this policy

We adapt this policy when the processing or the legal situation changes. The version published on this page at the time is authoritative.

Last updated: August 11, 2026