Privacy information

Version: 13 November 2026

1. Controller and contact

The controller for this website and the processing described below is TOGETHER GmbH, Albert-Einstein-Str. 1, 95028 Hof, Germany. Email: info@together-gmbh.com; telephone: +49 9267 9142990. Please use these contact details for privacy questions and requests to exercise your rights.

2. Website access and hosting

Our appointed hosting provider processes the connection data necessary to deliver the website, including your IP address, access time, requested address and technical browser and operating system information. The referring page may also be received if your browser supplies it. This supports website operation, troubleshooting and security. The legal basis is Article 6(1)(f) GDPR: our legitimate interest in a functioning, secure website. Processors are bound by agreements under Article 28 GDPR.

Technical logs are retained only as necessary for the relevant operational and security purpose. A specific security incident may require retention until investigation and necessary legal action are complete. Your enquiry details are not added to a publicly accessible catalogue.

3. Browser session storage and cookies

We use your browser's sessionStorage, under the key keepcool-preview-enquiry-v1, to retain item references, technical requirements and configuration choices when you move to the contact page or switch languages. We do not store your name, company, email address or message in this session storage. Selection data is saved following a relevant user action and normally remains for the lifetime of the browser tab. You can clear it through your browser.

This storage serves only the selection and enquiry function you expressly request, under section 25(2)(2) TDDDG. Where personal data is involved, the legal bases described below also apply. This website uses no analytics or advertising cookies, tracking or externally loaded web fonts. No separate cookie consent is requested for the necessary selection function described here.

4. Enquiries and quotations

When you contact us by email or telephone, we process the details you provide to answer your enquiry, clarify technical requirements and prepare a quotation. These may include company and contact person details, business contact information, specifications, quantities and requested delivery dates. Please provide only the information needed for this purpose.

The website form does not itself send a message or create a server-side enquiry record. Its email button opens your email application with an enquiry text. The email is transmitted to us only when you send it in that application. Alternatively, you can download the text locally. Your email application's and your email provider's conditions apply to their processing. Acknowledging this privacy information in the form confirms that you have read it; it is not blanket consent for unrelated processing.

Article 6(1)(b) GDPR applies where you are personally a party to the contract and processing is necessary for steps taken at your request before a contract, or for its performance. For contacts employed by a company that is the contracting party, necessary business communication relies on Article 6(1)(f) GDPR and our legitimate interest in handling the business relationship. We do not use this basis to repurpose your enquiry for independent advertising.

5. Orders, delivery and invoicing

If an order follows, we also process necessary data for order confirmation, procurement, delivery, invoicing, payment, warranty and follow-up questions. Necessary delivery and contact information may be shared with a parcel carrier or freight forwarder appointed by us, such as the recipient's name, delivery address and business contact details needed to arrange delivery. For an agreed direct shipment, the supplier performing the delivery may receive necessary delivery information. We do not share complete correspondence if individual details suffice.

The legal bases are Articles 6(1)(b) and (f) GDPR as explained above and Article 6(1)(c) GDPR for statutory duties, including commercial and tax record retention. Payment data is processed as necessary for payment and accounting.

6. Recipients and service providers

Within our company, access is limited to people handling the matter. Other recipient categories, where necessary, include hosting, email and IT providers; carriers; suppliers performing agreed direct shipments; payment providers or banks for the selected payment method; tax advisers and accounting providers; and authorities where disclosure is legally required. Disclosure is limited to the relevant purpose and necessary extent. Providers act as processors or independent controllers depending on their role.

Transfers of personal data outside the European Economic Area may take place only under Articles 44 et seq. GDPR, for example based on an adequacy decision or appropriate safeguards. If such a transfer is intended for your specific transaction, you will receive the necessary information about the destination country and transfer basis. You may request information on applicable safeguards using the contact details above.

7. Retention and deletion

We retain personal data only as required for the stated purposes or statutory retention duties. A completed general enquiry is deleted when no further processing, business relationship, retention duty or necessary legal defence requires it. Commercial and business correspondence subject to retention is generally kept for six years; accounting vouchers generally for eight years. Certain other records require longer retention. In particular, section 257 HGB and section 147 AO apply. The start of the period follows the applicable law. Outstanding claims or statutory extensions may require longer retention. Data is deleted or securely destroyed after the applicable periods expire.

8. Your rights

Subject to statutory conditions, you have rights of access (Article 15 GDPR), rectification (Article 16), erasure (Article 17), restriction (Article 18) and data portability (Article 20). If processing relies on consent, you may withdraw it at any time for the future. Statutory retention and evidence requirements remain applicable.

Right to object: Where processing relies on Article 6(1)(f) GDPR, you may object on grounds relating to your particular situation under Article 21 GDPR. You may object to direct marketing at any time without giving particular reasons.

You may complain to a data protection supervisory authority. In particular, the Bavarian State Office for Data Protection Supervision (BayLDA), Promenade 18, 91522 Ansbach, supervises private companies in Bavaria. Information: www.lda.bayern.de.

9. Required information and automated decisions

Contacting us is voluntary. Information necessary to answer an enquiry, prepare the requested quotation or perform a contract is required for that purpose; without it, processing the request may not be possible. Required form fields are marked. Optional information such as a telephone number may be omitted. This website makes no solely automated decisions with legal or similarly significant effects and performs no corresponding profiling.

10. Security

Website transmission is encrypted when you use the HTTPS address. We use appropriate technical and organisational measures against unauthorised access, loss and alteration. Ordinary email is not necessarily end-to-end encrypted. Please agree a suitable transfer method with us before sending particularly confidential documents.