Privacy policy
As of: October 2026
This translation is provided for convenience. The German version is legally binding.
Controller
Holzwerke Rückerl Produktions GmbH, Hesselbühl 24, 88630 Pfullendorf, Germany
Represented by the managing directors Marc Georg Rückerl and Roman Alexander Rückerl
Email: info@holzwerke-rueckerl.de, phone: +49 7552 93518-0
Hosting and server logs
This website is operated by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. The application form is processed in a data centre in Frankfurt am Main. Vercel delivers the pages themselves via a worldwide network, usually from the location closest to you. We have a data processing agreement with Vercel (Art. 28 GDPR). Vercel is certified under the EU-US Data Privacy Framework, for which an adequacy decision of the European Commission exists (Art. 45 GDPR).
When you visit the website, Vercel processes technically necessary data: IP address, date and time, page visited, amount of data transferred, referrer, browser and operating system. This is necessary to deliver the page and to fend off attacks. The legal basis is our legitimate interest in secure operation (Art. 6 (1) (f) GDPR). The logs are stored only briefly and then deleted automatically.
The transmission is encrypted via TLS.
Cookies and browser storage
Without your consent, this website sets no cookies and uses no analytics or advertising services. We store your choice in the banner in your browser's storage (localStorage) so that we do not ask again on every visit. This is strictly necessary for that purpose (§ 25 (2) no. 2 TDDDG). Fonts, images and 3D content come from our own server, not from third parties.
Google Analytics (only with consent)
If you click “Allow” in the banner, we use Google Analytics 4 by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. This shows us which pages are visited and where visitors come from, so we can improve the website. Your browser only loads the script from Google after you have given your consent.
For this, Google sets cookies (_ga and _ga_…) valid for up to 2 years and processes information about your device, browser, approximate location, referring page and the pages visited. According to Google, Google Analytics 4 does not store IP addresses. We have switched off Google Signals and personalised advertising. The data is deleted after 2 months.
The legal basis is your consent (Art. 6 (1) (a) GDPR, § 25 (1) TDDDG). We have a data processing agreement with Google (Art. 28 GDPR). Google may also process data in the USA. Google LLC is certified under the EU-US Data Privacy Framework, for which an adequacy decision of the European Commission exists (Art. 45 GDPR).
You can withdraw your consent at any time with effect for the future: Open cookie settings. When you withdraw, we delete the analytics cookies.
Contact by email or phone
If you write to us or call us, we process your details to answer your enquiry. If it concerns an offer or an order, the legal basis is Art. 6 (1) (b) GDPR, otherwise our legitimate interest in answering (Art. 6 (1) (f) GDPR). We delete the data as soon as it is no longer needed for this. We keep business correspondence for as long as commercial and tax law require (up to 6 or 10 years).
Our emails run through Microsoft 365 by Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. We have a data processing agreement with Microsoft. Microsoft may also process data in the USA. Microsoft Corporation is certified under the EU-US Data Privacy Framework, for which an adequacy decision of the European Commission exists (Art. 45 GDPR).
Applications
If you apply via the form or by email, we process your details and documents only for the application process (Art. 6 (1) (b) GDPR). The form stores nothing on the web server but sends your application to us by email. Only the people who decide on the hiring have access.
Only the marked fields are mandatory: position, name and email. Without these details we cannot process your application. Everything else is voluntary.
If your documents contain special categories of data, such as health information or a severe disability, we process them only as far as necessary for the process (Art. 9 (2) (b) GDPR).
If you are not hired, we delete the data no later than six months after the process ends. We need it for that long to defend ourselves against possible claims under the German General Equal Treatment Act (AGG) (Art. 6 (1) (f) GDPR). If you are hired, the data goes into your personnel file.
Recipients
Your data is received only by our service providers Vercel (hosting) and Microsoft (email), with your consent also Google (analytics), all as processors. We do not sell data and only pass it on if a law requires us to.
No automated decisions
We do not make decisions based solely on automated processing and do not create profiles (Art. 22 GDPR).
Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). You can withdraw consent at any time (Art. 7 (3) GDPR). An informal message toinfo@holzwerke-rueckerl.de is enough.
You can lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is the Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg, Lautenschlagerstraße 20, 70173 Stuttgart, Germany.
Right to object
If we process your data on the basis of a legitimate interest (Art. 6 (1) (f) GDPR), you can object at any time on grounds relating to your particular situation (Art. 21 GDPR). We will then no longer process the data unless we can demonstrate compelling legitimate grounds that override your interests, or the processing serves the establishment, exercise or defence of legal claims.