Legal
Privacy Policy
Information on the processing of personal data on this website.
1. Controller
Parkett Stelzl Robert Stelzl Görzer Straße 144 81549 Munich Germany
Phone: +49 (0)89 689 21 77
Email: info@parkett-stelzl.de
2. General information
Protecting your personal data is important to us. We treat your personal data confidentially and in accordance with applicable data protection laws, in particular the General Data Protection Regulation (GDPR), the German Telecommunications Digital Services Data Protection Act (TDDDG), and this privacy policy.
You can generally use our website without providing personal data. Where personal data is collected on this website, this occurs in particular when you contact us, submit an enquiry, use a form, or use certain embedded services.
Please note that data transmission over the Internet, for example when communicating by email, may have security vulnerabilities. Complete protection of data against access by third parties is not possible.
3. Contact
If you contact us via the contact form, email, or telephone, we process the information you provide in order to handle your enquiry and any follow-up questions.
In particular, the following data may be processed:
- Name
- Contact details, in particular email address and telephone number
- Subject
- Preferred contact method
- Preferred availability
- Content of your enquiry
- Information about your project or flooring
- Project address (optional)
- Photos or documents submitted voluntarily
Processing is based on Art. 6(1)(b) GDPR where your enquiry relates to pre-contractual measures or an existing contractual relationship. In all other cases, processing is based on our legitimate interest in handling your enquiry pursuant to Art. 6(1)(f) GDPR.
Data is deleted once it is no longer required for handling the enquiry and no statutory retention obligations apply.
4. Contact form and email delivery via Resend
This website uses the Resend service to send form notifications and transactional emails.
Provider: Resend 2261 Market Street #5039 San Francisco, CA 94114 USA
When you submit a form on our website, the data entered is processed via Resend for the purpose of technical delivery and handling of your enquiry. This may include in particular your name, email address, telephone number, message text, optionally uploaded attachments (photos or documents), and technical delivery data.
After submitting the form, you will also receive a confirmation email at the email address you provided.
To protect against automated spam, our server checks every enquiry before it is sent: a field invisible to visitors, a signed timestamp that ensures a minimum and maximum time between opening and submitting the form, the origin of the request and the plausibility of the entries. We do not use any external services for this and do not collect any additional data. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in protection against abusive enquiries.
Processing takes place to handle your enquiry on the basis of Art. 6(1)(b) GDPR or on the basis of our legitimate interest in reliable and secure electronic communication pursuant to Art. 6(1)(f) GDPR.
When using Resend, personal data may be transferred to third countries, in particular the USA. Resend provides contractual data protection arrangements for this purpose, including a Data Processing Addendum and Standard Contractual Clauses where applicable. Where required, processing is based on appropriate safeguards pursuant to Art. 44 et seq. GDPR.
Further information can be found in Resend's privacy information.
5. Cookies and similar technologies
Our website uses cookies and similar technologies. Only storing your consent decision is technically necessary (Section 6). We only use technologies for statistics, marketing and external content with your consent.
Services requiring consent – Google Tag Manager, Google Analytics, Google Ads, YouTube and Google Maps – are only loaded after you consent. Before you consent, your browser does not connect to these providers. The consent banner and the "Cookie settings" show which of these services we currently offer; we do not use services that are not available for selection there. You can also open the video and the 360° tour individually via "Load once"; the content is then loaded for this page view only and your decision is not stored.
You may change or withdraw your consent at any time with effect for the future — via the "Cookie settings" link in the footer on every page.
The legal basis for technically necessary storage is Section 25(2) no. 2 TDDDG and Art. 6(1)(f) GDPR. The legal basis for cookies and services requiring consent is Section 25(1) TDDDG and Art. 6(1)(a) GDPR.
6. Consent management
We obtain consent with our own consent management, operated on this website. No data is transferred to a provider of a consent management platform.
You can choose the following purposes separately. All of them are off until you switch them on:
- Statistics: Google Analytics (Section 9)
- Marketing: Google Ads conversion tracking (Section 10)
- External media: YouTube (Section 11) and Google Maps (Section 12)
We store your decision in the cookie "ps_consent" on your device. It contains the services you consented to, the time of your decision and the version of our settings, and is only set for this website. It is deleted after 180 days, after which we ask again. We also ask again if the services we use or the description of the purposes change.
Via "Cookie settings" in the footer you can review, change or withdraw your choice at any time. If you withdraw consent for statistics or marketing, we delete the related Google Analytics or Google Ads cookies on our domain and reload the page so that no Google tags keep running.
The legal basis is Section 25(2) no. 2 TDDDG and Art. 6(1)(c) GDPR in conjunction with Art. 7(1) GDPR (proof of consent).
7. Hosting via Vercel
This website is hosted by Vercel.
Provider: Vercel Inc. 440 N Barranca Ave #4133 Covina, CA 91723 USA
When you access the website, Vercel processes technical access data, in particular IP address, date and time of access, pages accessed, browser and device information, referrer URL, HTTP status code, and technical server log data. Processing takes place to provide the website securely, reliably, and with good performance.
Processing is based on Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure, stable, and fast operation of our website.
We have a data processing agreement with Vercel pursuant to Art. 28 GDPR. Where personal data is transferred to third countries, this is done on the basis of appropriate safeguards pursuant to Art. 44 et seq. GDPR, in particular Standard Contractual Clauses where applicable.
8. Google Tag Manager
For the "Statistics" and "Marketing" categories, we integrate Google Tag Manager if these categories are available for selection in the cookie settings and you have consented.
Provider: Google Ireland Limited Gordon House, Barrow Street Dublin 4 Ireland
Google Tag Manager is used to manage website tags centrally and to integrate services such as Google Analytics in a controlled manner. To our understanding, Google Tag Manager does not create its own analytics profiles and does not set its own analytics cookies. However, when Google Tag Manager is loaded, technical data, in particular the IP address, may be transmitted to Google.
Google Tag Manager is only loaded after you consent to statistics (Section 9) or marketing (Section 10). We use Google's consent mode ("Consent Mode v2") in basic mode: no Google tags are loaded before your consent. Afterwards, we only pass the permissions that match your choice to the Google tags: statistics allows storage for analytics ("analytics_storage"), marketing allows storage and transmission of data for ad measurement ("ad_storage", "ad_user_data"). The permission for personalised advertising ("ad_personalization") always remains denied. In addition, every tag in Tag Manager is bound to the matching consent.
Consent to statistics does not include consent to marketing, and vice versa.
The legal basis is your consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) TDDDG.
9. Google Analytics
For the "Statistics" category, we use Google Analytics 4, a web analytics service provided by Google, if this category is available for selection in the cookie settings and you have consented.
Provider: Google Ireland Limited Gordon House, Barrow Street Dublin 4 Ireland
Google Analytics helps us understand how visitors use our website (audience measurement and website analysis). Information that may be processed includes page views, time spent on the site, devices and browsers used, approximate region, and interactions on the website, such as scrolling, clicks on external links, downloads and starting to fill in a form.
We also record two events: a successfully sent contact enquiry (with the language of the form) and a click on a phone number (whether office or showroom, and in which area of the page). The content of your enquiry, your email address and your phone number are not transmitted to Google Analytics.
Google Analytics is integrated via Google Tag Manager and is only activated if you consent to the "Statistics" category. Google Analytics then sets the cookies "_ga" and "_ga_<ID>", which according to Google are stored for up to 2 years.
We have activated the "Google Signals" feature in Google Analytics. If you have also consented to the "Marketing" category, Google may link usage data with information from your Google account, provided you are signed in there and have allowed personalised advertising. This gives us aggregated reports, for example on age groups, interests and cross-device use, but no data about individual persons. Without consent to "Marketing", no data is collected for Google Signals.
Our Google Analytics account is linked to our Google Ads account. This link is not enabled for personalised advertising. We do not use the data for personalised advertising or remarketing; the corresponding permission ("ad_personalization") remains denied.
According to Google, IP addresses are not logged or stored in Google Analytics 4. Nevertheless, transmission of data to Google servers, including in third countries such as the USA, cannot be ruled out.
Where required, processing is based on appropriate safeguards pursuant to Art. 44 et seq. GDPR, such as the provider's Standard Contractual Clauses.
We use Google Analytics to improve our offering, navigation, and website content.
The legal basis is your consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) TDDDG.
You may change or withdraw your consent at any time — see Section 5.
10. Google Ads conversion tracking
For the "Marketing" category, we use Google Ads conversion tracking if this category is available for selection in the cookie settings and you have consented.
Provider: Google Ireland Limited Gordon House, Barrow Street Dublin 4 Ireland
If you have consented to the "Marketing" category, the website loads the Google Ads tag. It measures whether one of the following actions follows a click on one of our Google ads:
- a successfully sent enquiry via the contact form – counted only after our server has confirmed delivery, not when you click "Send" and not if an error occurs
- a click on one of our phone numbers
A click on a phone number is not proof that a call took place. We only record that you clicked the link, not whether a conversation followed.
This lets us measure the success of our ads and spend our advertising budget more effectively. This includes in particular the time and type of the action, the page visited, IP address and technical device and browser information. To attribute an action to an ad click, Google uses pseudonymous identifiers, in particular the ad click identifier and identifiers in the cookies "_gcl_au" and – if you reached our website via an ad – "_gcl_aw" (according to Google up to 90 days). The content of your enquiry and your contact details from the form are not transmitted.
Statistics and marketing are separate: if you only consent to statistics, the Google Ads tag is not loaded and no conversion is sent to Google Ads. If you only consent to marketing, Google Analytics is not activated.
We do not use this data for personalised advertising or remarketing; the corresponding permission ("ad_personalization") remains denied.
Enhanced conversions: the Google tags include a feature that can automatically detect email addresses entered on web pages and send them to Google in hashed form in order to attribute conversions more accurately. This feature is switched on in our Google tags and can only take effect if you have consented to marketing. We have excluded the email field of our contact form from automatic detection. The email address entered there is therefore not transmitted to Google, nor are your phone number, name, project address or message. There are no other input fields for email addresses on our website.
Transfer to Google servers, including in third countries such as the USA, cannot be ruled out. Google LLC is certified under the EU-US Data Privacy Framework; the provider's Standard Contractual Clauses also apply.
The legal basis is your consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) TDDDG.
You may change or withdraw your consent at any time — see Section 5.
11. YouTube
A YouTube video is embedded on our website.
Provider: Google Ireland Limited Gordon House, Barrow Street Dublin 4 Ireland
We use privacy-enhanced mode (youtube-nocookie.com). The video is not loaded automatically; first you see a preview image served from our own server. Only when you choose "Load once" or "Always allow", or have consented to YouTube in the cookie settings, does your browser connect to YouTube. This transfers in particular your IP address, technical device and browser information and the page visited. Even in privacy-enhanced mode, YouTube may store information in your browser, for example in local storage. We have no influence on this.
With "Load once", the video is loaded for this page view only and we do not store your decision. With "Always allow", we store your consent as described in Section 6.
Transfer to Google servers, including in third countries such as the USA, cannot be ruled out. Google LLC is certified under the EU-US Data Privacy Framework; the provider's Standard Contractual Clauses also apply.
The integration is intended to give you an insight into our showroom in Munich-Forstenried.
The legal basis is your consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) TDDDG.
You may change or withdraw your consent at any time — see Section 5.
12. Google Maps / 360° virtual tour
A Google Maps or 360° virtual tour is embedded on our website.
Provider: Google Ireland Limited Gordon House, Barrow Street Dublin 4 Ireland
The 360° tour is not loaded automatically; first you see a preview image served from our own server. Data may only be transmitted to Google once you choose "Load once" or "Always allow", or have consented to Google Maps in the cookie settings. This may include in particular IP address, technical device information, location data, usage data, and information about the page accessed. With "Load once", we do not store your decision.
Transmission to Google servers, including in third countries such as the USA, cannot be ruled out. Where required, processing is based on appropriate safeguards pursuant to Art. 44 et seq. GDPR, such as the provider's Standard Contractual Clauses.
The integration is intended to give you a virtual insight into our showroom in Munich-Forstenried.
The legal basis is your consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) TDDDG.
You may change or withdraw your consent at any time — see Section 5.
13. Server log files
When you access our website, technical data is automatically recorded by our hosting provider Vercel (see Section 7). This may include:
- IP address
- Date and time of the request
- Page accessed
- Browser type and version
- Operating system used
- Referrer URL
- HTTP status code
This data is processed to provide the website technically, ensure stability and security, and analyse errors.
The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure and reliable operation of the website.
14. SSL/TLS encryption
For security reasons, this website uses SSL or TLS encryption. You can recognise an encrypted connection by the fact that the browser address bar begins with "https://".
15. Your rights
Under applicable law, you have the following rights:
- Right of access pursuant to Art. 15 GDPR
- Right to rectification pursuant to Art. 16 GDPR
- Right to erasure pursuant to Art. 17 GDPR
- Right to restriction of processing pursuant to Art. 18 GDPR
- Right to data portability pursuant to Art. 20 GDPR
- Right to object pursuant to Art. 21 GDPR
- Right to withdraw consent pursuant to Art. 7(3) GDPR
If you have given consent, you may withdraw it at any time with effect for the future.
If you believe that the processing of your personal data violates data protection law, you also have the right to lodge a complaint with a data protection supervisory authority.
The competent supervisory authority is generally: Bayerisches Landesamt für Datenschutzaufsicht Promenade 18 91522 Ansbach Germany
16. Currency of this privacy policy
This privacy policy may be updated when technical, legal, or organisational changes occur.