1. Controller
The controller within the meaning of the General Data Protection Regulation (GDPR) and of other data protection provisions is:
Powertune Spezialkabelsysteme GmbH & Co. KG
Johann-Adam-Kleinschroth-Str. 10
97318 Kitzingen
Germany
Phone: +49 9321 3924811
E-mail: info@powertune.de
Website: https://powertune.de
2. General information on data processing
The protection of your personal data is important to us. We process personal data exclusively within the framework of the applicable statutory provisions, in particular the General Data Protection Regulation (GDPR), the Bundesdatenschutzgesetz (BDSG, the German Federal Data Protection Act) and other applicable data protection rules.
We process personal data in order to provide our website, to deal with enquiries and applications, to carry out pre-contractual measures and to fulfil legal obligations. We describe further purposes, such as statistics and measuring the success of our ads, together with their respective legal basis in sections 7 to 11.
3. Hosting
Our website is hosted by IONOS SE, Elgendorfer Straße 57, 56410 Montabaur, Germany. When you visit our website, IONOS automatically collects and stores information in what are known as server log files. This may include the following data in particular:
- Website visited
- Date and time of access
- Volume of data transferred
- Browser type and browser version
- Operating system
- Referrer URL
- IP address
The processing takes place on the basis of Art. 6(1)(f) GDPR. Our legitimate interest lies in providing our website securely, stably and efficiently.
IONOS processes this data, the contents of the database of our website, uploaded files and our e-mails on our behalf (as a processor under Art. 28 GDPR).
4. Server log files
IONOS stores the server log files mentioned in section 3 on its servers on our behalf. This data is processed exclusively to ensure technical operation, to analyse faults and to safeguard system security. This data is not merged with other data sources. IONOS keeps the log files only for a limited period and deletes them afterwards; IONOS determines this period for its servers. What the security plugin Wordfence logs on our website is described in section 13.
5. Project enquiry and contact
If you send us a project enquiry using the enquiry form, we process the details you provide: subject, name, company, e-mail address, telephone number, quantity, target date and project description. In addition there are the files you upload and (if you use the function) your wiring harness sketch. We use this data to deal with your enquiry, to prepare a quote and to contact you. The mandatory details are your name, your e-mail address and the description of your project; without them we cannot accept your enquiry. All other details are voluntary. There is no statutory or contractual requirement to provide us with data.
We store the enquiry in the database of our website and the files in a protected directory on the server of our hosting provider IONOS. Files and sketch arrive there even before the enquiry itself. Files from the form are uploaded when you click "Send enquiry", immediately before the enquiry is transmitted. Files that you assign to a connector in the sketch editor are uploaded as soon as you assign them, and we save the sketch continuously while you are editing it. We receive a notification by e-mail about every new enquiry, to which we attach your files and the PDF of your sketch, insofar as their size permits. You yourself receive an automatic acknowledgement of receipt from info@powertune.de at the e-mail address you have given, with the reference number of your enquiry.
Your browser keeps your form entries in session storage until you send the enquiry, so that nothing is lost in the event of an error or if the page is reloaded. When you send the enquiry, it also stores a random identifier of the sending process there. If the enquiry has to be sent again after a disruption, this identifier tells us that it has already arrived, and we store it only once. Your browser deletes both as soon as the enquiry has reached us, at the latest when you close the browser tab.
If you send files or use the sketch function, our website creates a draft on our server. Your browser stores the key to this draft in local storage, together with your sketch if you draw one. If there is a sketch in your browser, this entry is kept even after you have sent the enquiry, so that you can make a further enquiry building on your sketch. It then also contains the reference number of the enquiry with which you last sent the sketch. If you send a further enquiry with files or a sketch from the same browser while the entry exists, it belongs to the same draft, and we link it to your earlier enquiry. With "Remove sketch" or "Discard" you delete the entry, including the key, in your browser. If there is no sketch in your browser, because you only send files or have completely cleared your sketch in the editor, your browser deletes the entry as soon as an enquiry has reached us, at the latest when you load the enquiry form again. If sending fails, the entry is kept until then so that you can try again.
If you have switched on "Marketing" in the cookie settings and have come to us via a Google ad, we additionally store the identifier of this ad click and the record of your consent with your enquiry, and report to Google Ads later if we classify the enquiry as suitable for us (section 10). With your consent in the cookie settings we also report the receipt of the enquiry to Google Analytics and Google Ads (sections 9 and 10).
If you contact us by e-mail or by telephone, we process the details you provide only in order to deal with your request. Our e-mail mailboxes are hosted by our hosting provider IONOS; e-mails to us are received and stored on its mail servers.
The legal basis is Art. 6(1)(b) GDPR (carrying out pre-contractual measures). If your enquiry does not serve to initiate a contract, the legal basis is our legitimate interest in answering enquiries (Art. 6(1)(f) GDPR). To protect against misuse, for example against large numbers of automatically sent enquiries or uploaded files, we limit how often our enquiry form and the sketch editor can be used from the same IP address within one hour. This applies to creating, saving and retrieving a draft, uploading and retrieving files and sending an enquiry. For this purpose our server processes your IP address with each of these requests. What is stored for this is not the IP address itself but a hash value calculated with a secret key (HMAC-SHA-256) from the type of request and your IP address, together with the start of the current hour and the number of requests in that hour. Once the limit has been reached, our server does not accept further requests of this type from the same IP address until the next hour. The legal basis is our legitimate interest in protecting our enquiry form and our server against misuse (Art. 6(1)(f) GDPR). We delete these counters automatically once a day as soon as their hour is more than one day in the past, so as a rule after one to two days.
We delete enquiries two years after they were received, together with files, sketch, the PDF of the sketch and, if stored, the identifier of an ad click with the record of your consent. We keep an enquiry for six years if we classify it as suitable for us because we send or intend to send you a quotation in response to it, or if it results in an order. It then concerns the initiation of a business transaction and forms part of our business correspondence (Section 257 of the German Commercial Code, HGB; Section 147 of the German Fiscal Code, AO). The six years begin at the end of the calendar year in which the enquiry was received (Section 257(5) HGB); we therefore delete such an enquiry from September 2026 at the beginning of 2033. The legal basis for this retention is Art. 6(1)(c) GDPR. We only delete a file that you have sent with several enquiries once none of these enquiries is retained any longer. Drafts, intermediate versions of your sketch and uploaded files that were not sent with an enquiry are deleted 30 days after you last changed the draft or sent an enquiry from it. These periods apply to the data stored by our website, not to e-mails. The statutory retention periods apply to the notification about your enquiry and the acknowledgement of receipt sent to you, to enquiries that you send us directly by e-mail or that we transfer to our business records, and to the documents relating to an order; for commercial letters this is six years (section 15). Deleted data may remain in backup copies of our website until the respective backup is deleted.
6. Applications
Applicants can send us their application documents by e-mail. The processing takes place exclusively for the purpose of carrying out the application procedure in accordance with Art. 6(1)(b) GDPR and Section 26 BDSG. If no employment relationship comes about, application documents are deleted once the application procedure has been completed, taking statutory retention periods into account, unless consent to longer storage has been given.
7. Cookies and storage in the browser
Our website uses cookies and comparable technologies such as the local storage of your browser (local storage and session storage). The following are technically necessary and therefore always active:
- the cookie "pt_consent" with your decision in the cookie settings (details below)
- the entry "pt-lang" in local storage with the language you have chosen in the language selection
- the entry "pt-region-hinweis" in local storage if you have closed the notice about another language version, so that it does not appear again
- your entries in the enquiry form (entry "pt-anfrage:…") and, when you send the enquiry, the identifier of the sending process (entry "pt-anfrage:…:kennung") in session storage, until the enquiry has reached us or you close the browser tab
- your wiring harness sketch and the key to your draft on our server in local storage (entry "pt-anfrage-skizze"), after sending together with the reference number of the enquiry with which you last sent the sketch and the number of this version of the sketch; if files that you had assigned to a connector in the sketch are missing on our server, additionally with their names and the connector concerned, until you attach the files again or send the sketch without them. With a sketch, the entry is stored as soon as you sketch something, even after sending, until you delete it with "Remove sketch" or "Discard"; without a sketch, that is for an enquiry with files only from the time of sending or after you have cleared your sketch, until an enquiry has reached us or you load the enquiry form again (section 5)
- a marker of the sketch editor in session storage (entry "pt-kb-erster-versuch"), until you close the browser tab
Entries in local storage have no expiry date; you can delete them at any time by deleting the data of this website in your browser. The legal basis for this storage is Section 25(2) no. 2 TDDDG (the German act on data protection in telecommunications and digital services) in conjunction with Art. 6(1)(f) GDPR. Our legitimate interest is that your settings and entries are preserved.
We use cookies and similar technologies for analysis and marketing purposes only after you have given your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG). These include the cookies from Google (sections 9 and 10) and the entry "pt-klick" in local storage, in which your browser stores the identifier of a click on one of our Google ads (section 10). Your consents are managed through the cookie settings of this website. They are part of the website itself; no third party service is integrated for this.
We store your decision in the cookie "pt_consent" on your device. It contains the time of the decision, the categories you have chosen and the version of the consent text. The storage period is 12 months; after that we ask again. We also ask again as soon as the consent text changes, for example because a service is added. Like every cookie, your browser sends it to our server each time you call up one of our pages. It is only evaluated there when you send a project enquiry: we then check whether you have consented to "Marketing". Only in that case do we store an ad click identifier sent with the enquiry, together with the time and version of your consent as a record (section 10). We do not pass this cookie or the record on to third parties.
You can change your settings at any time or withdraw your consent with effect for the future. You will find the entry "Cookie settings" in the footer of every page. If you switch everything off there and save, we reset the consent signals sent to Google and delete the cookies that Google has set for powertune.de.
8. Google Tag Manager
We use Google Tag Manager from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The Tag Manager manages the integration of further services on our website, for example Google Analytics and the conversion tracking of Google Ads. The Tag Manager itself does not evaluate any personal data.
The Tag Manager is only loaded once you switch on the category "Statistics" or "Marketing" in the cookie settings. As long as you have not done so, your browser does not establish any connection to Google when you visit our website. For technical reasons, your IP address is transmitted to Google when it is loaded. Google may also process data on servers in the USA; the transfer is based on the adequacy decision of the EU Commission on the EU-US Data Privacy Framework, under which Google is certified. The legal basis is your consent in accordance with Art. 6(1)(a) GDPR and Section 25(1) TDDDG. Further information: policies.google.com/privacy
9. Google Analytics 4
Insofar as you have given your consent, we use Google Analytics 4, a web analytics service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics allows us to analyse user behaviour on our website. Among other things, the following information is processed:
- Pages viewed and landing pages
- Source of the visit, such as a search engine, an ad or a referring website
- Time spent and scrolling
- Clicks on links to other websites and on our telephone number and e-mail address
- File downloads and search terms entered in the search on our website
- Starting and sending the enquiry form
- Device and browser information and the approximate location
- IP address (used by Google to determine the approximate location; for visitors from the EU, Switzerland and the United Kingdom, according to Google it is then deleted immediately and neither logged nor stored)
After a project enquiry has been sent, we transmit the event "generate_lead" to Google Analytics with the type of enquiry ("Subject" field), whether a sketch was attached and the reference number of the enquiry. Using the reference number, we can assign the measurement to a specific enquiry and thus see which search or ad it came from. For this purpose Google Analytics sets, among others, the cookies "_ga" and "_ga_81TDLR2X6N" with a lifetime of up to 2 years. Google Analytics retains the event data for 14 months; aggregated reports without reference to individual visitors are not affected by this.
The processing takes place exclusively on the basis of your consent in accordance with Art. 6(1)(a) GDPR and Section 25(1) TDDDG. The data collected may also be processed by Google on servers in the USA; the transfer is based on the adequacy decision of the EU Commission on the EU-US Data Privacy Framework, under which Google is certified. Further information: support.google.com/analytics, policies.google.com/privacy
10. Google Ads conversion tracking
With your consent we use the conversion tracking of Google Ads from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. With it we measure the success of our advertising campaigns and see whether a Google ad has led to a visit or to an enquiry. For this purpose Google uses cookies and similar technologies, among others the cookie "_gcl_au" and, after an ad click, "_gcl_aw", each with a lifetime of 90 days.
After a project enquiry has been sent successfully, our website reports to Google Ads that an enquiry has been received. In doing so we transmit the reference number of the enquiry, so that the same enquiry is not counted twice. We do not transmit names, project descriptions or files. Insofar as we use the function "enhanced conversions", your e-mail address is transmitted to Google in addition, not in plain text but as a hash value (SHA-256). Google matches this value against Google accounts that are signed in in order to improve the measurement.
If you come to us via an ad from Google, Google usually appends an identifier of this ad click to the address of our website, the "gclid". Only if you have switched on "Marketing" in the cookie settings does your browser store this identifier in local storage (entry "pt-klick") and send it to us with a project enquiry. The entry is kept even after you have sent the enquiry, so that it can accompany a further enquiry, for no longer than 90 days after your visit via the ad. After that, our website deletes it the next time you call up one of our pages. If you withdraw your consent, it deletes it immediately. You can also delete it at any time by deleting the data of this website in your browser.
We store the identifier together with your enquiry, but only if the cookie "pt_consent", which your browser sends along with the enquiry, contains valid consent to "Marketing". As a record of this consent, we store the time it was given and the version of the consent text alongside it. We assess enquiries internally. If we classify your enquiry as suitable for us or if it results in an order, we report this to Google Ads (import of offline conversions). From this, Google can recognise which search queries and ads lead to suitable enquiries. In doing so we only transmit the identifier of the click, the name of the event, the time of your enquiry and a calculated value. We do not transmit your name, your company, your contact details, your project description, your sketch or your files. The recipient is Google Ireland Limited. We delete the identifier and the record together with your enquiry (section 5).
Advertising is not personalised. We do not keep any remarketing or audience lists, we do not address you again with ads because of your visit, and we place ads exclusively in Google Search. The consent signal for personalised advertising ("ad_personalization") therefore remains switched off permanently, even if you switch on the category "Marketing" in the cookie settings. Your consent in the category "Marketing" relates solely to the measurement of success described above.
The legal basis is your consent in accordance with Art. 6(1)(a) GDPR and Section 25(1) TDDDG. You can withdraw it at any time in the cookie settings. Google may transfer data to the USA; the transfer is based on the adequacy decision of the EU Commission on the EU-US Data Privacy Framework, under which Google is certified. Further information: policies.google.com/privacy
11. Google Maps
On our contact page you can display a map from the Google Maps service. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The map is only loaded once you click on "Load map". Only then does your browser establish a connection to Google and transmit, among other things, your IP address; Google may set cookies in the process. Google may also process data on servers in the USA; the transfer is based on the adequacy decision of the EU Commission on the EU-US Data Privacy Framework, under which Google is certified. The legal basis is your consent given by that click (Art. 6(1)(a) GDPR, Section 25(1) TDDDG). The links "Plan a route" open Google Maps in a new window; data is only transmitted once you follow such a link. Further information: policies.google.com/privacy
12. Fonts and 3D graphics
The fonts of our website and the program library for 3D graphics (three.js) are stored on our own web server and are delivered from there. When our website is called up, no connection to Google Fonts or to other external providers is established for this purpose; personal data is not transmitted to third parties in this context. The legal basis is our legitimate interest in a consistent and appealing presentation of our online offering in accordance with Art. 6(1)(f) GDPR.
13. Wordfence Security
In order to protect our website against unauthorised access, malware and cyber attacks we use the security plugin Wordfence. The provider is Defiant, Inc., 1700 Westlake Ave N Ste 200, Seattle, WA 98109, USA. Wordfence runs on our server at IONOS and processes there, among other things:
- IP addresses
- Access information
- Security relevant event data
The processing takes place on the basis of our legitimate interest in the security and integrity of our website in accordance with Art. 6(1)(f) GDPR. In the process, IP addresses and details of attacks and login attempts may be transmitted to servers of Defiant in the USA, for example to determine the approximate location of an IP address. Where this happens, the transfer is based on the standard contractual clauses of the EU Commission (Art. 46(2)(c) GDPR); you can obtain a copy on request to info@powertune.de. Further information: wordfence.com/privacy-policy
14. Links to social networks and to further offerings
Our website contains links to our profiles on LinkedIn, Instagram and Facebook as well as to the websites of WEKAS and Powercable. These are simple links, not embedded plugins: data is only transmitted to the respective providers once you follow a link. Please refer to the privacy notices of the providers to find out which data they process there.
15. Storage period
How long we store personal data depends on the purpose of the respective processing and on statutory retention obligations, for example under commercial and tax law. Where a specific storage period has been set for a processing operation, we state it in the respective section of this privacy policy. Irrespective of this, you can request that we erase your data or restrict its processing, insofar as the statutory requirements are met (section 16).
16. Rights of the data subjects
Within the framework of the applicable statutory provisions you have the following rights:
- Right of access: You have the right to request information about the personal data we process.
- Right to rectification: You have the right to request the rectification of inaccurate personal data or the completion of incomplete personal data.
- Right to erasure: You have the right to request the erasure of your personal data, provided that the statutory requirements for this are met.
- Right to restriction of processing: You have the right to request the restriction of the processing of your personal data, insofar as the statutory requirements are met.
- Right to data portability: You have the right to receive the personal data concerning you in a structured, commonly used and machine readable format or to request that it be transmitted to another controller.
- Right to withdraw consent: You can withdraw consent you have given at any time with effect for the future. The lawfulness of the processing carried out up to the withdrawal remains unaffected.
17. Right to object
Insofar as we process personal data on the basis of Art. 6(1)(f) GDPR, you have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data. If personal data is processed for direct marketing purposes, you have the right to object at any time to processing for such marketing.
18. Right to lodge a complaint with a supervisory authority
You have the right to lodge a complaint with a data protection supervisory authority about the processing of your personal data by us. The supervisory authority responsible for our company is in particular:
Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 18
91522 Ansbach
Germany
Phone: +49 (0) 981 1800930
E-mail: poststelle@lda.bayern.de
19. Data security
We use technical and organisational security measures in order to protect your personal data against accidental or deliberate manipulation, loss, destruction or against unauthorised access by third parties. Our security measures are continuously improved in line with technological development. The transmission between your browser and our website is encrypted with TLS.
20. Validity and amendment of this privacy policy
This privacy policy is currently valid and is dated September 2026. As our website is developed further, as new technologies are introduced or because of changed legal or official requirements, it may become necessary to adapt this privacy policy. The version of the privacy policy that is valid at any given time can be called up on our website at any time at https://powertune.de/en/privacy/.