Privacy Policy
1. Data protection at a glance
This website is a purely informational and inquiry website. We use no marketing cookies, no external tracking or analytics services and no external fonts. To improve the website, we count a small number of exclusively aggregated usage signals (section 6). We process personal data when you contact us via the contact form or by e-mail, as technically required by our hosting provider (server log files), and through Cloudflare Turnstile on pages with forms to prevent automated submissions.
2. Controller
T.K. Kabel oHG
Geschwister-Scholl-Straße 11
71384 Weinstadt, Germany
Phone: +49 (0) 7151 / 60 68 70
E-mail: info@tk-kabel.de
The controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.
3. Hosting, server log files and backups
We host our website with an external service provider in Germany: Joomla100, owner Ekkehard Körbel, Am Würzgarten 12, 65375 Oestrich-Winkel. Contact: info@joomla100.com. A data processing agreement (Art. 28 GDPR) is in place with the provider.
Joomla100 uses Welcome 2 Inter.Net, Bernd Mößinger, Schießhüttenstraße 35, 60386 Frankfurt am Main, as an infrastructure subprocessor. Its services include virtual servers, backup storage, maintenance and support. Processing takes place at the Maincubes GmbH FRA01 data centre, Goethering 29, 63067 Offenbach am Main. Routing is provided by Equada GmbH, Am Neuen Berg 3, 63755 Alzenau.
When the website is accessed, the server automatically records so-called server log files that your browser transmits:
- IP address of the requesting device
- date and time of the request
- page / file requested
- browser and operating system used
- referrer URL
- amount of data transferred
- HTTP status code
This data is used solely for the secure and stable operation of the website and to defend against attacks. The legal basis is our legitimate interest pursuant to Art. 6(1)(f) GDPR. This data is not merged with other data and is not evaluated for marketing purposes. IP addresses in the log files are not anonymised.
Domain log files are automatically rotated on a daily basis. No more than 14 older log files are retained, giving a fixed retention period of roughly 14 days. Global server log files are deleted after no more than four weeks. According to the data centre, there are no other server-wide custom logs that store personal data.
Backups created as part of the hosting service are retained for no more than 15 days.
4. Contact form and contact by e-mail
When you send us an inquiry via the contact form or by e-mail, we process the data you provide in order to handle your request. This may include: name, company, e-mail address, telephone number, the cable type and technical specification you are looking for, an optionally uploaded file, and your message. The form is transmitted encrypted (TLS) to our e-mail address info@tk-kabel.de.
The legal basis is Art. 6(1)(b) GDPR (initiation/performance of a contract) and otherwise our legitimate interest in answering your inquiry (Art. 6(1)(f) GDPR). The actual form data is used solely to process the inquiry and is not transmitted to Cloudflare. We store it until your inquiry has been conclusively handled and delete it afterwards, unless statutory retention periods (e.g. under commercial or tax law, such as § 257 HGB or § 147 AO) apply.
To protect against automated spam, the form uses Cloudflare Turnstile (section 4.2). To prevent misuse, your IP address is technically transmitted to our server when you submit the form. A pseudonymous verification value (HMAC) is generated from it using a secret key to limit the number of requests. The full IP address is not stored in the rate-limit file used for this purpose. Entries that have been inactive for more than 24 hours are deleted when the abuse prevention check next runs (Art. 6(1)(f) GDPR). This also applies to the quick inquiry form (section 4.1) and the metrics endpoint described in section 6.
4.1 Quick inquiry form
On product and datasheet pages we offer a shortened inquiry form (“quick inquiry”). We process the contact detail you provide (e-mail address or phone number), your details on design and quantity, the requested cable type and the page from which the inquiry was sent. Processing is carried out solely to answer your inquiry (Art. 6(1)(b) GDPR). The inquiry data is transmitted to us by e-mail. The information on the contact form applies accordingly.
4.2 Cloudflare Turnstile
On pages containing contact or quick-inquiry forms, we use Cloudflare Turnstile to detect automated submissions and misuse. The provider is Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA.
Turnstile processes technical signals such as the IP address, TLS fingerprint, user agent, sitekey and associated origin. The contents of your form fields are not transmitted to Turnstile. The processing is used solely to distinguish human visitors from automated bots and to secure the form. The legal basis is our legitimate interest in a secure and functional inquiry channel pursuant to Art. 6(1)(f) GDPR.
Insofar as Turnstile stores information on your device or accesses information already stored there, this is based on section 25(2) no. 2 TDDDG because it is technically necessary to provide the secure form explicitly requested by you.
Cloudflare processes signals on our behalf to provide the service and, according to its own information, also acts as a controller when improving its bot-detection capabilities. Processing may take place in the United States. Cloudflare is certified under the EU-US Data Privacy Framework; where this adequacy decision does not apply, Cloudflare states that transfers are based on EU Standard Contractual Clauses. Cloudflare retains personal data only for as long as necessary to provide, secure and improve its services or to meet legal obligations; the specific period depends on the type of data and the purpose of processing.
You may object to the processing on grounds relating to your particular situation. Since Turnstile is technically required for use of the forms, you may alternatively contact us by e-mail or phone. Further information is available in the Turnstile Privacy Addendum and Cloudflare Privacy Policy.
5. Self-hosted video
The image film on our home page is served directly from our own web server. No external video service is embedded and no connection to YouTube or Google is established. Like any other page request, the request for the video file may appear in the server log files described in section 3.
6. Data-minimising success measurement
To improve the findability of our datasheets and the operation of the inquiry channel, we count the following events:
- successfully sent full contact inquiries
- successfully sent quick inquiries
- clicks on PDF files
- datasheet searches that return no results
- playback of the self-hosted cable-advisor help video
- start of the cable advisor
- completion of the cable advisor
- click on the contact option in the cable advisor
The metrics file stores only the event type and the number per calendar day. It does not store search terms, selected filters, filenames, requested URLs, IP addresses, browser identifiers or other identifiers. We use no cookies for this purpose and create no user profiles. Independently of this, the technical server request may appear in the server log files described in section 3. Within the metrics function, the IP address is used solely for the pseudonymous request limit described in section 4. Entries that have been inactive for more than 24 hours are deleted when the abuse prevention check next runs.
The legal basis is our legitimate interest in an understandable, functional website and a reliable inquiry channel pursuant to Art. 6(1)(f) GDPR. Daily values older than 730 days are removed from the metrics file during the next counting or reporting operation.
7. No marketing tracking or external fonts
This website uses no marketing cookies, no external web analytics or tracking services and embeds no external fonts (e.g. Google Fonts, Adobe Fonts). T.K. Kabel does not profile users for marketing purposes or track their browsing behaviour on a personal basis. The aggregated counters are described in section 6, the self-hosted video in section 5 and technical signals used by Cloudflare Turnstile in section 4.2.
8. SSL/TLS encryption
For security reasons this website uses SSL/TLS encryption. You can recognise an encrypted connection by the “https://” in your browser’s address bar.
9. Your rights
You have the right at any time to free information (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing (Art. 21 GDPR). To exercise these rights, please contact the controller named above.
Where processing is based on your consent, you may withdraw it at any time with effect for the future (Art. 7(3) GDPR). The lawfulness of processing carried out before withdrawal remains unaffected.
You also have the right to lodge a complaint with a supervisory authority. The competent authority is: Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg, Heilbronner Straße 35, 70191 Stuttgart, Germany.
Last updated: 26 August 2026
