Privacy Policy

1. Privacy at a Glance

General Information

The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to personally identify you. Detailed information on the subject of data protection can be found in our privacy policy listed below this text.

Data Collection on This Website

Who is responsible for data collection on this website?

Data processing on this website is carried out by the website operator. You can find their contact details in the section “Information about the responsible party” in this privacy policy.

How do we collect your data?

Your data is currently collected exclusively automatically by our IT systems when you visit the website. This is primarily technical data (e.g., internet browser, operating system, or time of page access). This data is collected automatically as soon as you enter this website.

What do we use your data for?

The data is collected to ensure error-free provision of the website and to ensure the security of our systems.

What rights do you have regarding your data?

You have the right at any time to receive free information about the origin, recipient, and purpose of your stored personal data. You also have the right to request correction or deletion of this data. Furthermore, you have a right of complaint with the competent supervisory authority. You can find more information in the section on data subject rights.

2. Responsible Party

The responsible party for data processing on this website is:

The responsible party is the natural or legal person who alone or jointly with others determines the purposes and means of processing personal data (e.g., names, email addresses, etc.).

3. General Data Processing

Legal Basis for Processing

Where we obtain consent for the processing of personal data, Art. 6(1)(a) GDPR serves as the legal basis.

For the processing of personal data required for the performance of a contract, Art. 6(1)(b) GDPR serves as the legal basis.

Where processing of personal data is necessary to comply with a legal obligation, Art. 6(1)(c) GDPR serves as the legal basis.

Where processing is necessary to protect a legitimate interest of our company or a third party, Art. 6(1)(f) GDPR serves as the legal basis.

SSL/TLS Encryption

This site uses SSL/TLS encryption for security reasons and to protect the transmission of confidential content. You can recognize an encrypted connection by the browser’s address bar changing from “http://” to “https://” and the lock icon in your browser bar.

Storage Duration

The storage duration of personal data varies depending on the purpose of processing and is specified in the respective sections of this privacy policy.

4. Currently Active Data Processing

Telephone Inquiries

If you contact us by phone, your inquiry including all resulting personal data (name, phone number, concern) will be processed for the purpose of handling your request.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest) or Art. 6(1)(b) GDPR (pre-contractual measures)

Storage duration: Notes on phone calls are stored for 6-10 years in accordance with statutory retention obligations, if business-relevant.

Google Fonts

This site uses Google Fonts for uniform display of typefaces. When you access a page, your browser loads the required fonts into its cache to display text and typefaces correctly.

For this purpose, the browser you use must connect to Google’s servers. This gives Google your IP address and information about which fonts were requested from which domain.

Data processed: IP address, browser information, requested fonts, referrer URL (if sent by browser)

Fonts: Bebas Neue, Inter

Legal basis: Use of Google Fonts is based on Art. 6(1)(f) GDPR. The website operator has a legitimate interest in the uniform display of typefaces on their website.

Data transfer: Google is certified under the EU-US Data Privacy Framework.

Email Communication (Zoho Mail)

For business email communication, we use Zoho Mail from Zoho Corporation B.V., Hoogoorddreef 15, 1101BA Amsterdam, Netherlands. When you send us an email to kontakt@ranjdar-group.com, it is processed via Zoho servers.

Data processed: Email address, name (if provided), email content, attachments, timestamps, sender IP address

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in business communication) or Art. 6(1)(b) GDPR (pre-contractual measures for business inquiries)

Storage duration: Business correspondence is stored for at least 6 years in accordance with commercial retention obligations (§ 257 HGB). Documents with tax relevance are stored for 10 years (§ 147 AO).

Server location: EU (Netherlands)

Technically Necessary Cookies

Our website currently only uses technically necessary cookies required for the operation of the website. These cookies do not store personal data and cannot be deactivated.

Legal basis: Use of technically necessary cookies is based on Art. 6(1)(f) GDPR (legitimate interest) and § 25(2)(2) TDDDG.

Storage duration: Session cookies are deleted as soon as you close your browser.

5. Hosting and Content Delivery

Amazon S3 (Simple Storage Service)

Storage of our static website files (HTML, CSS, JavaScript, images).

Data processed: No personal data — only website content

Server location: EU Region Frankfurt (eu-central-1)

Amazon CloudFront (Content Delivery Network)

Technically necessary processing for the delivery of our website. Without CloudFront, the website could not be displayed.

Data processed: IP address, browser type (user agent), requested pages, referrer URL

Storage duration: Exclusively temporary processing during your page visit — no permanent storage

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in providing the website)

Server locations: Edge servers worldwide (nearest server to the user)

Privacy for AWS services: AWS is certified under the EU-US Data Privacy Framework. A data processing agreement with standard contractual clauses is in place.

6. International Data Transfers

In the course of our use of AWS services and Google Fonts, personal data may be transferred to the USA.

Protective measures:

• AWS and Google are certified under the EU-US Data Privacy Framework
• Additionally, we have agreed standard contractual clauses with AWS pursuant to Art. 46(2)(c) GDPR

You have the right to request a copy of the appropriate safeguards we use.

7. Your Rights as a Data Subject

You have the following rights under the General Data Protection Regulation (GDPR):

Right of Access (Art. 15 GDPR)

You have the right to request confirmation as to whether personal data concerning you is being processed by us.

Right to Rectification (Art. 16 GDPR)

You have the right to request immediate rectification of inaccurate or completion of incomplete personal data.

Right to Erasure (Art. 17 GDPR)

You have the right to request immediate erasure of your personal data, provided the legal requirements are met.

Right to Restriction of Processing (Art. 18 GDPR)

You have the right to request restriction of processing of your personal data.

Right to Data Portability (Art. 20 GDPR)

You have the right to receive the personal data concerning you in a structured, commonly used, and machine-readable format.

Right to Withdraw Consent (Art. 7(3) GDPR)

If the processing is based on your consent, you have the right to withdraw it at any time.

Right to Lodge a Complaint (Art. 77 GDPR)

You have the right to lodge a complaint with a supervisory authority if you believe that the processing of personal data concerning you violates the GDPR.

The supervisory authority responsible for us is:

8. Data Security

We use the widely adopted SSL method (Secure Socket Layer) in conjunction with the highest level of encryption supported by your browser during your website visit.

In addition, we employ appropriate technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction, or unauthorized access by third parties.

9. No Data Protection Officer Required

Pursuant to § 38 BDSG, the appointment of a data protection officer is only required when at least 20 persons are constantly employed in the automated processing of personal data. Since fewer than 20 persons in our company are involved in the processing of personal data (currently only one person), we have not appointed a data protection officer.

For data protection inquiries, please contact the responsible party named in section 2 directly.

10. Automated Decision-Making and Profiling

We do not use automated decision-making pursuant to Art. 22 GDPR. This means that no decisions about you are based solely on automated processing that produce legal effects or similarly significantly affect you.

We also do not carry out profiling. No automated analyses of your personal aspects are performed to predict economic situation, personal preferences, interests, reliability, behavior, location, or movements.

11. Currently Unused Features

The following features are technically prepared or planned on our website but are not currently active. When we activate these features, we will update this privacy policy accordingly.

12. No Disclosure to Third Parties

Your personal data will not be transmitted to third parties for purposes other than those listed below. We only pass on your personal data to third parties if:

• You have given your express consent pursuant to Art. 6(1)(a) GDPR
• Disclosure is permitted pursuant to Art. 6(1)(f) GDPR to protect our legitimate interests
• There is a legal obligation for disclosure pursuant to Art. 6(1)(c) GDPR
• Disclosure is necessary for the performance of contractual relationships with you pursuant to Art. 6(1)(b) GDPR

13. Children and Minors

Our services are generally aimed at adults. Persons under the age of 16 (in Germany, the age limit of 16 applies pursuant to Art. 8 GDPR) may not transmit personal data to us without the consent of their legal guardians.

14. Changes to This Privacy Policy

We reserve the right to amend this privacy policy so that it always complies with current legal requirements or to implement changes to our services in the privacy policy. The new privacy policy will then apply to your subsequent visit.

15. Questions About Data Protection

If you have questions about data protection, please send us an email at kontakt@ranjdar-group.com