Last updated: October 2026
This is a translation for your convenience. The German version (Datenschutzerklärung) is legally binding.
1. Controller
The controller for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:
CM Aquatechnik GmbH
Meererhof 7 – 9
41460 Neuss
Germany
Represented by the managing directors: Ceyda Bertan, Mehmet Bertan
Phone: +49 173 7025983
Email: info@cmaqua.de
We have not appointed a data protection officer because the legal requirements for doing so are not met. For questions about data protection, please use the contact details above.
2. General information
“Personal data” means any information relating to an identified or identifiable natural person. We only process personal data where this is necessary to provide this website, to handle your enquiries or to meet contractual and legal obligations, or where you have given your consent.
Unless stated otherwise below, you are not legally or contractually required to provide personal data. If you do not provide it, we may not be able to handle your enquiry.
The legal bases are in particular Art. 6(1)(a) GDPR (consent), (b) (contract and pre-contractual steps), (c) (legal obligation) and (f) GDPR (legitimate interests). Storing information on, or accessing information from, your device is additionally governed by Section 25 of the German Telecommunications Digital Services Data Protection Act (TDDDG).
3. Hosting and server log files
This website is hosted by Hostinger International Ltd., 61 Lordou Vironos Street, 6023 Larnaca, Cyprus, and delivered through the host’s content delivery network (CDN). We have a data processing agreement with the host under Art. 28 GDPR.
When you visit the website, your browser automatically transmits the following information: IP address, date and time of access, page requested, referrer URL, browser type and version, and operating system. This data is technically necessary to display the website and to keep it secure and stable. The legal basis is Art. 6(1)(f) GDPR. The log files are deleted automatically after the retention periods set by the host.
The connection to this website is encrypted with TLS/SSL.
4. Contact form, email, phone
If you contact us through the contact form, by email or by phone, we process the data you provide (e.g. name, company, email address, phone number, country, enquiry type, product and your message) to handle your enquiry and prepare a quotation. Mandatory fields are marked as such.
The legal basis is Art. 6(1)(b) GDPR where your enquiry relates to concluding a contract, and otherwise Art. 6(1)(f) GDPR (our legitimate interest in answering enquiries).
Form submissions are sent to us by email and are not additionally stored in a website database. We delete your enquiry once it has been fully handled, unless statutory retention obligations apply (in particular commercial and tax retention periods for quotations and contracts).
Spam protection: To protect against automated spam, the website checks form submissions for typical spam characteristics. If a submission is rejected as spam, we log the reason and a shortened IP address in the server error log. The legal basis is Art. 6(1)(f) GDPR (protection against misuse).
5. WhatsApp
This website contains links that let you contact us via WhatsApp. No data is sent to WhatsApp when you simply visit our website. Only when you click a WhatsApp link are you redirected to WhatsApp, operated by WhatsApp Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland, whose privacy policy then applies. If you message us on WhatsApp, we process your phone number, name and message to handle your enquiry (Art. 6(1)(b) or (f) GDPR). WhatsApp may also transfer data to the USA.
6. Cookies and local storage
To remember your language choice (German/English), this website sets the cookie “pll_language” with a lifetime of one year. Your choice between the light and dark design may be stored in your browser’s local storage. These are strictly necessary to display the website the way you requested (Section 25(2) No. 2 TDDDG, Art. 6(1)(f) GDPR).
You can delete or block cookies at any time in your browser settings.
7. External links and fonts
Our website contains links to Google Maps, to our Google business profile and to other external websites. Data is only transferred when you click such a link. The privacy policies of the respective providers apply to the linked pages.
The fonts used on this website are stored locally on our server. No connection to third-party servers is made to load them.
8. Retention period
Unless a more specific retention period is stated in this privacy policy, we only store personal data for as long as necessary for the relevant purpose. The data is then deleted, unless statutory retention periods apply (e.g. under the German Commercial Code and Fiscal Code, usually six to ten years); in that case processing is restricted.
9. Your rights
Subject to the legal requirements, you have the following rights:
- Right of access (Art. 15 GDPR)
- Right to rectification (Art. 16 GDPR)
- Right to erasure (Art. 17 GDPR)
- Right to restriction of processing (Art. 18 GDPR)
- Right to data portability (Art. 20 GDPR)
- Right to withdraw consent at any time with effect for the future (Art. 7(3) GDPR)
Please use the contact details in section 1.
10. Right to object
Where processing is based on our legitimate interests under Art. 6(1)(f) GDPR, you have the right under Art. 21(1) GDPR to object at any time, on grounds relating to your particular situation, with effect for the future. We will then stop processing unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.
If your data is processed for direct marketing purposes, you can object to this processing at any time. We will then no longer process your data for this purpose.
11. Right to lodge a complaint
Under Art. 77 GDPR you have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data is unlawful. The supervisory authority responsible for us is:
Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW)
Kavalleriestraße 2–4
40213 Düsseldorf, Germany
www.ldi.nrw.de
12. Changes
We update this privacy policy when the website or the legal requirements change. The version published here applies.