Privacy Policy

Status: 2025-10-15

This privacy policy informs you about how we process personal data when you visit our website, contact us, or use our online services.

Controller (Art. 4 No. 7 GDPR)

ATI Industrie Ltd.

Registered office of the company (head office):

Register: Companies Registration Office Ireland

Registration number: 643128

Contact address Germany:

Authorized Director: Jens Christian Metz

Contact:

Phone: +49 7473 91999-87

E-mail: impressum@tickprotektor.com

Note: The legally responsible party is ATI Industrie Ltd. As a contact address in Germany, the address is additionally subject to the BDSG; the main data protection office within the meaning of Art. 56 GDPR is the location where key decisions regarding the purposes and means of processing are made (currently: Ireland, unless otherwise communicated).

Data protection contact / Data protection officer

A data protection officer is not currently appointed, as the legal requirements according to Art. 37 GDPR in conjunction with § 38 BDSG are not met according to the current situation.

For data protection inquiries, please contact:

Note for Germany: If the threshold values of § 38 BDSG are reached (in particular regularly ≥ 20 persons who are constantly employed with the automated processing of personal data, or in the case of high-risk processing), we will appoint a data protection officer; the contact details will then be published here.

Purposes, legal bases, storage periods, recipients

Below, we present our processing activities in a transparent manner. If service providers (processors, Art. 28 GDPR) are used, corresponding contracts exist. Third-country transfers are explained under point 6.

3.1 Provision of the website & server log files

3.2 Consent management (cookies/tracking consent)

3.3 Contact requests (e-mail, telephone, contact form)

3.4 Newsletter dispatch (if used)

Note Tracking: Opening/click tracking only takes place with additional consent; you can object to this at any time or revoke your consent.

3.5 Web analysis / range measurement (if used)

Obligation to provide data

There is no legal obligation to provide data as part of the website. Certain information is required for contact/contracts; without this, we may not be able to process your request.

Your rights (Art. 15–21 GDPR)

You have the right to information, correction, deletion, restriction, data portability and the right to object to processing based on Art. 6 para. 1 lit. f GDPR and the right to revoke granted consent at any time with effect for the future. You also have the right to complain to a data protection supervisory authority (see point 7).

Third country transfers (especially USA)

If we use services in which personal data is transferred to third countries, we ensure an adequate level of protection. This can be done in particular via:

  • Adequacy decisions of the EU Commission (e.g. EU-US Data Privacy Framework – DPF, for certified US companies),
  • EU standard contractual clauses (SCC) and, if necessary, additional measures.

You can find specific information for each service in the respective sections above or in the cookie/provider list in the consent tool.

Responsible supervisory authority

For headquarters in Ireland (One-Stop-Shop):

Data Protection Commission (DPC)
21 Fitzwilliam Square South
Dublin 2, D02 RD28, Ireland
https://www.dataprotection.ie/

For the German contact address / contact point for those affected in Germany:

The State Commissioner for Data Protection and Freedom of Information Baden-Württemberg (LfDI BW)
Lautenschlagerstraße 20
70173 Stuttgart
https://www.baden-wuerttemberg.datenschutz.de/

Your right to contact any data protection supervisory authority in the EU remains unaffected, in particular the one at your place of residence or at the place of the alleged violation.

Safety precautions

We take technical and organizational measures (TOM) according to Art. 32 GDPR (e.g. TLS encryption, access controls, logging, rights/role concepts). Please note that data transmission over the Internet may have security gaps that are beyond our control.

Recipient/provider list (continuously maintained)

ProcessingProviderLocationRoleLegal basisThird country transferDPA
Hosting/Server LogsIONOS SEGermanyProcessorArt. 6 para. 1 lit. f Yes
CMPconsentmanagerGermany/EUProcessorArt. 6 para. 1 lit. c/f Yes
E-mail/CRMIONOS SEGermanyProcessorArt. 6 para. 1 lit. b/f Yes
NewsletterIONOS SEGermanyProcessorArt. 6 para. 1 lit. a Yes
Web analysisGoogle Analytics (Google Ireland Ltd.)Ireland/USAProcessor/possibly Joint Controller Art. 6 para. 1 lit. a
USA, DPF/SCCYes
Embedded contentYouTube (Google Ireland Ltd.)Ireland/USAIndependent ControllerArt. 6 para. 1 lit. a
USA, DPF/SCCYes

Storage periods (overview)

  • Server logs: 7–30 days (incident cases longer).
  • Contact requests: 6–12 months; commercial/tax law storage: up to 10 years.
  • Newsletter data: until revocation; DOI evidence up to 3 years.
  • Analysis/marketing IDs: according to consent; otherwise no storage.
  • Applications: 6 months after completion (unless consent for longer storage).

Automated decisions/profiling

There is no automated decision-making within the meaning of Art. 22 GDPR. Profiling only takes place if you have given your separate consent (e.g. newsletter tracking).

Amendment of this data protection declaration

We reserve the right to adapt this declaration in the event of changes to our processing, services or the legal situation. The current version will be published here. We will communicate essential changes separately – if necessary.