Privacy policy
Updated: 07 October 2026
1. Controller
Controller within the meaning of the General Data Protection Regulation (GDPR):
M2D GmbH
Am Turm 11, D - 53721 Siegburg, Germany
Email: info@m2d-com.de
2. General information
This website uses no analytics or tracking services, sets no advertising cookies and embeds no social media plugins. Personal data is processed only as necessary to operate the website and respond to your enquiries.
3. Hosting and server logs
This website is hosted by Timeweb; the server is located in Amsterdam, the Netherlands (EU). When you access the website, the server automatically records information in log files: IP address, access date and time, requested page, browser type and operating system. This data supports reliable operation and system security (legal basis: Article 6(1)(f) GDPR) and is deleted after 14 daily log rotations.
4. Contacting us
If you contact us by email or phone, we process the information you provide (name, contact details and enquiry content) to handle your enquiry (Article 6(1)(b) GDPR for pre-contractual steps, or Article 6(1)(f) GDPR). The data is deleted once it is no longer needed for its purpose and no statutory retention requirements apply.
When you use the callback form, we store your name, phone number, enquiry, the page visited and its language to process your request. The callback service logs the enquiry on the server; routine cleanup removes entries older than 30 days. To limit abuse, a value derived from the IP address is held in memory; requests from the previous hour are considered for rate limiting. The data is not used for advertising.
For internal handling, a notification containing your name, phone number, enquiry, page path and language is sent to the responsible team through Telegram. The provider is Telegram Messenger Inc., a company outside the European Economic Area. Information on Telegram’s processing is available in the Telegram privacy policy. Alternatively, you may contact us directly by email.
5. Language selection and robotics check
The language is selected through the page address. The robotics check evaluates your answers in your browser and does not automatically send them to us. Information is transmitted only when you submit a contact enquiry yourself.
6. Fonts
All fonts on this website are hosted locally on the server. Visiting the site does not establish connections to external font services such as Google Fonts.
7. Your rights
- Access to processed data (Article 15 GDPR)
- Correction of inaccurate data (Article 16 GDPR)
- Erasure (Article 17 GDPR) and restriction of processing (Article 18 GDPR)
- Data portability (Article 20 GDPR)
- Objection to processing (Article 21 GDPR)
- Complaint to a data protection supervisory authority (Article 77 GDPR)
8. Encryption
This website uses TLS encryption for security, indicated by “https://” in the address bar.
9. Changes
We reserve the right to update this privacy policy to reflect current legal requirements or changes to our services.