Privacy policy

The company named below is responsible for processing personal data on this website within the meaning of the General Data Protection Regulation (GDPR). Personal data means any information relating to an identified or identifiable natural person.

When the website is accessed, the hosting system may process technical data required to deliver and secure the site. This may include the requested page, date and time, transferred data volume, referrer, browser, operating system and IP address. Processing is based on Art. 6(1)(f) GDPR and the legitimate interest in secure and stable operation.

The hosting service processes these data on behalf of the controller where required under a data-processing agreement.

The production website should use SSL or TLS encryption to protect confidential content during transmission. An encrypted connection can normally be recognised by https:// and the lock symbol in the browser.

If you contact Sino-Deco, the information you provide is processed to handle and answer your enquiry. Depending on its content, the legal basis is Art. 6(1)(b) GDPR for pre-contractual measures or Art. 6(1)(f) GDPR for other business communication. The current website form opens your own email application; it does not independently store or send the entered information through WordPress.

WordPress, the theme and WooCommerce may use technically necessary cookies or comparable storage for security, language selection and requested website functions. Optional analytics or marketing technologies are activated only after the required consent. Consent can be changed or withdrawn through the cookie settings where such services are used.

The Contact area can display a map supplied by Google. The map is loaded only after the visitor actively selects the load button. A connection to Google servers is then established and technical data, including the IP address, may be transferred. Google may process data outside the European Economic Area. The visitor can alternatively use the external route link.

Subject to the statutory requirements, data subjects have rights of access, rectification, erasure, restriction of processing, data portability and objection. Consent can be withdrawn at any time with effect for the future. To exercise these rights, contact the controller using the details above.

You have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for private-sector organisations in Hesse is the Hessian Commissioner for Data Protection and Freedom of Information (HBDI), Postfach 3163, 65021 Wiesbaden, Germany; email: poststelle@datenschutz.hessen.de; telephone: +49 611 1408-0.

Personal data is retained only for as long as required for the relevant purpose or by statutory retention obligations. It is then deleted unless continued processing is legally permitted or required. This privacy policy must be updated whenever the website’s functions, providers or legal requirements change.