The protection of your personal data is important to us. This privacy policy explains what data we collect, how we use it, and what rights you have under the EU General Data Protection Regulation (GDPR).
Contents
1. Data Controller
The data controller responsible for processing your personal data is:
PROSPARE — Turbomachinery and Energy Solutions
Owner: Ream Abed
Hansjakobstrasse 13, 76572 Gaggenau, Germany, Germany
Email: sales@prospare.de
Phone: +49 157 5105 8597
VAT ID: DE324045221
2. Data We Collect
We collect the following categories of personal data:
Contact form data: When you submit our contact form, we collect your first and last name, email address, phone number, company name, and the content of your message.
Enquiry data: Part numbers, turbine models, and technical specifications you provide when requesting a quote or placing an order.
Communication data: Emails, phone call records, and other correspondence you initiate with us.
Website usage data: We may collect anonymised data about how visitors use our website (page visits, browser type, device type) through analytics tools. This data does not identify you personally.
Business data: Company details, billing address, and order history if you become a customer.
3. Purpose & Legal Basis
We process your personal data for the following purposes and legal bases under GDPR Art. 6:
- Responding to enquiries — Art. 6(1)(b): processing is necessary to take steps prior to entering a contract.
- Fulfilling orders and contracts — Art. 6(1)(b): processing is necessary for the performance of a contract.
- Legal obligations — Art. 6(1)(c): processing is required by German commercial and tax law (e.g. invoice retention).
- Legitimate interests — Art. 6(1)(f): improving our services and website, fraud prevention, IT security.
- Marketing communications — Art. 6(1)(a): only with your explicit consent, which you may withdraw at any time.
4. Data Retention
We retain your personal data only as long as necessary for the purposes for which it was collected, or as required by law:
- Contact form enquiries: Up to 3 years from last contact, unless a business relationship is established.
- Customer and order data: 10 years in accordance with German commercial law (§ 257 HGB) and tax law (§ 147 AO).
- Email correspondence: Up to 6 years, or as required for legal proceedings.
- Website analytics data: Anonymised data may be retained indefinitely.
After the retention period expires, your data is securely deleted or anonymised.
5. Data Sharing & Third Parties
We do not sell your personal data. We may share data with trusted third parties only where necessary:
- Logistics partners: Shipping companies and freight forwarders to fulfil your order.
- Payment processors: Secure payment providers for processing transactions.
- IT service providers: Hosting, email, and website services operating under data processing agreements (DPA) in compliance with GDPR.
- Legal authorities: Where required by law or court order.
Where data is transferred outside the EU/EEA, we ensure appropriate safeguards are in place (e.g. Standard Contractual Clauses).
6. Cookies
Our website may use cookies — small text files stored on your device — to ensure basic functionality and improve your experience.
Essential cookies: Required for the website to function correctly. These cannot be disabled.
Analytics cookies: Used to understand how visitors use our website (e.g. Google Analytics). These are only set with your consent.
You can control cookies through your browser settings at any time. Disabling cookies may affect the functionality of the website.
7. Your Rights
Under the GDPR, you have the following rights regarding your personal data:
- Right of access (Art. 15 GDPR): Request a copy of the personal data we hold about you.
- Right to rectification (Art. 16 GDPR): Request correction of inaccurate or incomplete data.
- Right to erasure (Art. 17 GDPR): Request deletion of your data (“right to be forgotten”), subject to legal retention obligations.
- Right to restriction (Art. 18 GDPR): Request that we limit how we use your data.
- Right to data portability (Art. 20 GDPR): Receive your data in a structured, machine-readable format.
- Right to object (Art. 21 GDPR): Object to processing based on legitimate interests or for direct marketing.
- Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time without affecting prior processing.
To exercise any of these rights, contact us at sales@prospare.de. We will respond within 30 days.
8. Data Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. Our website uses HTTPS encryption for all data transmissions.
Despite these measures, no internet transmission is completely secure. If you believe your data has been compromised, please contact us immediately.
9. Changes to This Policy
We may update this privacy policy from time to time to reflect changes in our practices or applicable law. The date at the top of this page indicates when it was last updated. We encourage you to review this page periodically.
10. Contact & Complaints
For any questions about this privacy policy or to exercise your rights, please contact us:
PROSPARE
Hansjakobstrasse 13, 76572 Gaggenau, Germany, Germany
Email: sales@prospare.de
Phone: +49 157 5105 8597
You also have the right to lodge a complaint with the supervisory authority in your EU member state. In Germany, the relevant authority is:
Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg
www.baden-wuerttemberg.datenschutz.de