1. Data Controller
The controller responsible for the processing of personal data within the meaning of the General Data Protection Regulation (GDPR) is:
nxtgen.MAGPLAN GmbH
Rottweiler Str. 56
78713 Schramberg
Germany
Phone: +49 (0)7422 9518 170
Email: info@magplan.de
Represented by the Managing Director:
Robert Voulgaridis
2. Data Protection Officer
Our company is currently not legally required to appoint a Data Protection Officer.
If you have any questions regarding data protection or the processing of your personal data, you may contact us at any time using the contact details provided above.
3. General Information on Data Processing
We appreciate your interest in our company and our website.
The protection of your personal data is of great importance to us. We process personal data exclusively in accordance with the applicable data protection laws, in particular the General Data Protection Regulation (GDPR).
Personal data is processed only where necessary
- to provide a functional website,
- to respond to your inquiries,
- to perform pre-contractual measures or fulfill contractual obligations,
- to comply with legal obligations, or
- to safeguard our legitimate interests.
Where processing is based on your consent, you may withdraw your consent at any time with effect for the future.
4. Legal Basis for Processing
Depending on the specific processing activity, we rely on the following legal bases:
- Article 6(1)(a) GDPR – Consent
- Article 6(1)(b) GDPR – Performance of a contract or pre-contractual measures
- Article 6(1)(c) GDPR – Compliance with legal obligations
- Article 6(1)(f) GDPR – Legitimate interests
5. Data Retention
We retain personal data only for as long as necessary to fulfill the respective processing purposes or to comply with statutory retention obligations.
Once the purpose no longer applies or statutory retention periods have expired, the data will be deleted or blocked in accordance with applicable legal requirements.
6. Hosting
Our website is hosted by IONOS SE, Elgendorfer Straße 57, 56410 Montabaur, Germany.
IONOS processes personal data on our behalf for the purpose of providing and delivering this website. A Data Processing Agreement (DPA) has been concluded with IONOS in accordance with Article 28 GDPR.
Further information can be found at:
https://www.ionos.com/terms-gtc/privacy-policy/
The legal basis is Article 6(1)(f) GDPR.
7. Server Log Files
Whenever you access our website, technical information is automatically collected and stored in server log files.
This includes in particular:
- IP address
- Date and time of access
- Time zone
- Browser type and version
- Operating system
- Referrer URL
- Requested pages
- HTTP status code
- Amount of data transferred
These data are used exclusively to ensure the secure and stable operation of the website and are not merged with other data sources.
Legal basis:
Article 6(1)(f) GDPR.
8. SSL/TLS Encryption
This website uses modern SSL/TLS encryption technology to protect the transmission of confidential information.
An encrypted connection is indicated by the “https://” prefix and the lock symbol displayed in your browser.
9. Cookies
Our website uses cookies.
Cookies are small text files stored on your device.
They are used to
- ensure website functionality,
- improve usability,
- provide statistical analysis,
- enable marketing services.
Technically necessary cookies are essential for operating the website.
All other cookies are only set after your explicit consent.
You may revoke or modify your consent at any time with future effect.
10. Consent Management
Where required by law, your consent is obtained through our Consent Management Platform.
You can
- choose which cookie categories you accept,
- withdraw your consent,
- change your preferences at any time.
Your consent preferences are stored in order to comply with our legal obligations under Article 6(1)(c) GDPR.
11. Google Tag Manager
We use Google Tag Manager, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Google Tag Manager itself does not process personal data nor does it set cookies.
However, it enables the integration of additional services that may process personal data.
These services are activated only after your consent has been obtained.
Further information:
https://policies.google.com/privacy
Legal basis:
Article 6(1)(a) GDPR.
12. Contact Form
Our website provides a contact form through which you can contact us.
When using the contact form, we process only the personal data you voluntarily provide, such as:
- Name
- Company
- Email address
- Phone number (optional)
- Message
- Any additional information you choose to provide
The data is processed solely for the purpose of responding to your inquiry.
Legal basis:
- Article 6(1)(b) GDPR
- Article 6(1)(f) GDPR
13. Email Communication
If you contact us via email, we process your personal data solely to respond to your request.
Our email communication is provided through Microsoft 365 by Microsoft Ireland Operations Limited.
Where personal data is transferred outside the European Union, Microsoft relies on the European Commission’s Standard Contractual Clauses and other appropriate safeguards.
Further information:
https://privacy.microsoft.com/privacy-statement
No merging of this data with other data sources takes place.
Articles 6(1)(b) and 6(1)(f) GDPR.
14. Google Analytics 4
This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited.
Google Analytics helps us analyze website usage and improve our services.
The following data may be processed:
- anonymized IP address
- device information
- browser information
- visited pages
- click paths
- session duration
- country-level location
- technical information
- events
Google Analytics is activated only after your explicit consent.
No merging of this data with other data sources takes place.
Article 6(1)(a) GDPR.
Further information:
https://policies.google.com/privacy
15. Google Ads
We use Google Ads, including conversion tracking and, where enabled, remarketing features.
This enables us to measure the effectiveness of our advertising campaigns.
Google Ads is activated only after your consent.
No merging of this data with other data sources takes place.
Article 6(1)(a) GDPR.
Further information:
https://policies.google.com/privacy
16. Embedded YouTube Videos
Our website may include embedded videos from YouTube.
Where technically possible, videos are embedded using YouTube’s enhanced privacy mode.
A connection to YouTube servers is established only when you actively play a video.
Processing takes place solely after your consent.
No merging of this data with other data sources takes place.
Article 6(1)(a) GDPR.
17. Lead Forensics (if used)
Our website may use Lead Forensics to analyze visits from business organizations (B2B) and improve our online services.
The service may process technical information such as:
- IP address
- company information
- visited pages
- session duration
- browser information
Lead Forensics is activated only after your consent.
Legal basis:
Article 6(1)(a) GDPR.
Further information:
https://www.leadforensics.com/privacy-policy/
18. Recipients of Personal Data
Within our company, only those employees who require access to your personal data in order to perform their duties are granted access.
We also engage external service providers acting as processors pursuant to Article 28 GDPR, including providers in the areas of:
- Hosting
- IT infrastructure
- Website operation
- Web analytics
- Marketing
- Email communication
All processors have been carefully selected and are contractually obligated to comply with applicable data protection laws.
19. International Data Transfers
Where personal data is transferred to countries outside the European Union or the European Economic Area, such transfers are carried out only in accordance with applicable legal requirements.
Transfers take place only if:
- an adequacy decision of the European Commission exists,
- appropriate safeguards pursuant to Article 46 GDPR have been implemented (e.g., Standard Contractual Clauses), or
- you have provided your explicit consent.
Further details can be found in the respective sections of this Privacy Policy.
20. Data Security
We implement appropriate technical and organizational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure or access.
Our security measures are continuously reviewed and updated in line with technological developments.
21. Your Rights
Under the GDPR, you have the following rights:
- Right of access (Article 15 GDPR)
- Right to rectification (Article 16 GDPR)
- Right to erasure (Article 17 GDPR)
- Right to restriction of processing (Article 18 GDPR)
- Right to data portability (Article 20 GDPR)
- Right to object (Article 21 GDPR)
- Right to withdraw consent (Article 7(3) GDPR)
To exercise your rights, simply contact us at:
info@magplan.de
22. Right to Lodge a Complaint
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a competent data protection supervisory authority if you believe that the processing of your personal data violates the GDPR.
23. Automated Decision-Making
We do not use automated decision-making or profiling within the meaning of Article 22 GDPR.
24. Changes to this Privacy Policy
We reserve the right to amend this Privacy Policy where necessary due to legal or technical changes.
The version published on this website at the time of your visit shall apply.
Last updated: July 2026
