Last updated: July 2026

This Privacy Policy applies to the online services of Duracrista GmbH, accessible at https://duracrista.com (hereinafter "Website").

1. Data Controller

Duracrista GmbH

Mergenthalerallee 73–75

65760 Eschborn

Germany

Represented by the Managing Director: Marc Raebiger

Phone (DE): +49 151 61280359

Phone (IT): +39 375 1457731

E-mail: info@duracrista.com

2. General Information

We take the protection of your personal data seriously. We process your data exclusively on the basis of applicable legal provisions, in particular the General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG) and the German Telecommunications Digital Services Data Protection Act (TDDDG).

The competent supervisory authority is: Hessischer Beauftragter für Datenschutz und Informationsfreiheit (HBDI), Postfach 3163, 65021 Wiesbaden, Germany — www.datenschutz.hessen.de.

3. Hosting

This website is hosted by:

Hostinger International Ltd.

61 Lordou Vironos Street

6023 Larnaca, Cyprus

When you access our website, the hosting provider automatically collects so-called server log files. These include: IP address of the requesting device, date and time of access, name and URL of the retrieved file, amount of data transferred, notification of successful retrieval, browser type and version, operating system and the previously visited website (referrer URL).

These data cannot be attributed to specific individuals. No merging of this data with other data sources takes place. Processing is carried out on the basis of Art. 6(1)(f) GDPR (legitimate interest in the secure and efficient provision of our online services). The data is deleted after a maximum of 7 days.

4. Cookies and Consent Management

Our website uses cookies. Cookies are small text files stored on your device. Pursuant to Section 25 TDDDG, your explicit consent is required for the use of cookies that are not technically necessary.

When you first visit our website, a cookie banner will be displayed through which you can grant or refuse your consent. You may withdraw your consent at any time with effect for the future.

We use cookies in the following categories:

Technically necessary cookies: These cookies are essential for the operation of the website and cannot be deactivated. Legal basis: Art. 6(1)(f) GDPR.

Analytics cookies: These cookies enable us to analyse website usage in order to continuously improve our services. They are only set with your explicit consent. Legal basis: Art. 6(1)(a) GDPR.

Marketing cookies: These cookies are used to display personalised advertising and to measure the effectiveness of marketing campaigns. They are only set with your explicit consent. Legal basis: Art. 6(1)(a) GDPR.

5. Contact Form

If you send us a message via the contact form on our website, the data you enter (e.g. name, e-mail address, message) will be stored by us in order to process your enquiry and for follow-up questions.

The processing of this data is carried out on the basis of Art. 6(1)(b) GDPR (pre-contractual measures) or Art. 6(1)(f) GDPR (legitimate interest in processing your enquiry). The data will not be passed on to third parties without your consent and will be deleted after your enquiry has been fully processed, unless statutory retention obligations apply.

6. Contact by E-mail or Telephone

If you contact us by e-mail or telephone, the data you transmit (name, e-mail address, telephone number and the content of your message) will be stored by us in order to process your enquiry. The legal basis is Art. 6(1)(b) or (f) GDPR. The data will be deleted after processing is complete, unless statutory retention obligations apply.

7. Embedded YouTube Videos

Our website embeds videos from the YouTube platform. The operator is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter "Google").

We use YouTube in extended privacy mode. According to YouTube, this mode prevents cookies from being stored on your device as long as you do not play the video. As soon as you play an embedded YouTube video, connections to YouTube's servers are established and data — including your IP address — is transmitted to Google. It cannot be ruled out that YouTube or Google may also transfer data to the USA. Google has joined the EU-US Data Privacy Framework, ensuring an adequate level of data protection.

The embedding of YouTube videos is carried out on the basis of your consent pursuant to Art. 6(1)(a) GDPR in conjunction with Section 25 TDDDG, which you can grant via our cookie banner. You may withdraw your consent at any time with effect for the future.

Further information on data protection at YouTube can be found in Google's Privacy Policy: https://policies.google.com/privacy

8. Google Drive (Linked Documents)

Our website contains links to documents and folders stored in Google Drive. Google Drive is a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

When you click on these links, you will leave our website and be redirected to Google's servers. Google may collect data such as your IP address. A transfer of data to the USA cannot be ruled out; Google has joined the EU-US Data Privacy Framework.

The legal basis is Art. 6(1)(f) GDPR (legitimate interest in the efficient provision of documents). We have no control over the data processing carried out by Google. Further information: https://policies.google.com/privacy

9. Google Fonts

This website may use Google Fonts for the uniform display of typefaces. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

When a page is loaded, your browser may load the required fonts directly from Google's servers, thereby transmitting your IP address to Google. A transfer to the USA cannot be ruled out; Google has joined the EU-US Data Privacy Framework.

The legal basis is Art. 6(1)(f) GDPR. [Note: Please verify whether Google Fonts is actually loaded from external Google servers or whether the fonts are embedded locally. If local: remove this section.]

10. Use of Artificial Intelligence for Content Creation

We use artificial intelligence (AI) tools to create and optimise texts, images and other content on this website. We use services from the following providers:

Claude (Anthropic, Inc.), 548 Market St, San Francisco, CA 94105, USA — https://www.anthropic.com/privacy

ChatGPT (OpenAI, LLC), 3180 18th St, San Francisco, CA 94110, USA — https://openai.com/policies/privacy-policy

Midjourney (Midjourney, Inc.), 118 King Street, San Francisco, CA 94107, USA — https://www.midjourney.com/privacy

These AI tools are used exclusively by us for internal content creation. Personal data of our website visitors is not transmitted to these services. The content we create is editorially reviewed before publication.

We hereby inform you that parts of the texts and images published on this website have been created or edited with the assistance of AI systems. The legal basis for the internal use of these tools is Art. 6(1)(f) GDPR (legitimate interest in efficient content creation).

11. Your Rights as a Data Subject

With regard to your personal data, you have the following rights against us:

• Right of access (Art. 15 GDPR)

• Right to rectification (Art. 16 GDPR)

• Right to erasure (Art. 17 GDPR)

• Right to restriction of processing (Art. 18 GDPR)

• Right to data portability (Art. 20 GDPR)

• Right to object to processing (Art. 21 GDPR)

• Right to withdraw consent given (Art. 7(3) GDPR)

To exercise your rights, please contact us at: info@duracrista.com

You also have the right to lodge a complaint with the competent data protection supervisory authority: Hessischer Beauftragter für Datenschutz und Informationsfreiheit (HBDI), www.datenschutz.hessen.de.

12. Data Security

We implement technical and organisational security measures to protect your data against accidental or intentional manipulation, loss, destruction or access by unauthorised persons. Our security measures are continuously improved in line with technological developments. Data transmission on our website is carried out using SSL/TLS encryption (recognisable by the "https://" prefix and the padlock icon in your browser's address bar).

13. Currency and Amendment of this Privacy Policy

This Privacy Policy is currently valid and dated July 2026. Due to the further development of our website or changes to statutory or regulatory requirements, it may become necessary to amend this Privacy Policy. The most current version can always be found on our website at https://duracrista.com/privacy.

Data protection