Privacy Policy
This is a convenience translation. The German version is legally binding: Datenschutzerklärung
1. Privacy at a Glance
General Information
The following information provides an overview of what happens to your personal data when you visit this website. Personal data is any data by which you can be personally identified.
Data Collection on This Website
Who is responsible for data collection on this website?
Data on this website is processed by the website operator:
interpanel GmbH
Lange Wiese 11
07613 Crossen
Email: info@interpanel.com
2. Hosting
This website is hosted externally by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany (hereinafter “Hetzner”). The personal data collected on this website is stored on Hetzner’s servers. This may include, in particular, IP addresses, contact requests, metadata and communication data, contract data, contact details, names, website access data and other data generated via a website.
Hetzner is used in the interest of the secure, fast and efficient provision of our online services by a professional provider (Art. 6(1)(f) GDPR).
We have concluded a data processing agreement (DPA) with Hetzner. This is a contract required by data protection law which ensures that Hetzner processes the personal data of our website visitors only on our instructions and in compliance with the GDPR.
3. General Information and Mandatory Disclosures
Data Protection
The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy.
When you use this website, various personal data is collected. This privacy policy explains which data we collect and what we use it for. It also explains how and for what purpose this is done.
Information About the Controller
The controller responsible for data processing on this website is:
interpanel GmbH
Alexander Buff
Lange Wiese 11
07613 Crossen
Phone: +49 36693 434220
Email: info@interpanel.com
The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data (e.g., names, email addresses, etc.).
Storage Period
Unless a more specific storage period is stated in this privacy policy, your personal data will remain with us until the purpose for which it was processed no longer applies. If you assert a legitimate request for erasure or withdraw your consent to data processing, your data will be erased unless we have other legally permissible reasons for storing your personal data.
Withdrawal of Your Consent to Data Processing
Many data processing operations are only possible with your express consent. You may withdraw consent you have already given at any time. The lawfulness of the data processing carried out before the withdrawal remains unaffected by the withdrawal.
Right to Lodge a Complaint with the Competent Supervisory Authority
In the event of infringements of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, their place of work or the place of the alleged infringement. The right to lodge a complaint is without prejudice to any other administrative or judicial remedies.
Right to Data Portability
You have the right to have data that we process automatically on the basis of your consent or in fulfillment of a contract handed over to you or to a third party in a commonly used, machine-readable format. If you request the direct transfer of the data to another controller, this will only be done insofar as it is technically feasible.
Access, Erasure and Rectification
Within the scope of the applicable statutory provisions, you have the right at any time to obtain free information about your stored personal data, its origin and recipients and the purpose of the data processing and, where applicable, a right to rectification or erasure of this data. You may contact us at any time regarding this and any other questions about personal data.
Right to Restriction of Processing
You have the right to request the restriction of the processing of your personal data. You may contact us at any time for this purpose.
SSL or TLS Encryption
For security reasons and to protect the transmission of confidential content, such as inquiries that you send to us as the site operator, this site uses SSL or TLS encryption. You can recognize an encrypted connection by the browser’s address bar changing from “http://” to “https://” and by the lock icon in your browser bar. When SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.
4. Data Collection on This Website
Server Log Files
The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:
- Browser type and browser version
- Operating system used
- Referrer URL
- Host name of the accessing computer
- Time of the server request
- IP address
This data is not combined with other data sources. This data is collected on the basis of Art. 6(1)(f) GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimization of its website; for this purpose, the server log files must be collected.
Contact Form
If you send us inquiries via the contact form, the information you provide in the inquiry form, including the contact details you enter there, will be stored by us for the purpose of processing the inquiry and in case of follow-up questions. We do not share this data without your consent.
When you submit the form, we transmit technical data on the origin of your session in order to classify your inquiry, such as campaign or referrer parameters (e.g., UTM parameters, click IDs) as well as the landing page and the form page. We process this information exclusively internally and do not pass it on to third parties. It is delivered together with your inquiry via our email service provider Resend (see below). The processing is based on our legitimate interest in attributing inquiries to their source (Art. 6(1)(f) GDPR).
This data is processed on the basis of Art. 6(1)(b) GDPR if your inquiry is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective handling of inquiries addressed to us (Art. 6(1)(f) GDPR).
To send the form information by email, we use the Resend service of Plus Five Five, Inc., San Francisco, USA. Resend processes the information on our behalf in order to deliver it to us and to you as a confirmation of receipt. In the process, data may be transferred to the USA. The transfer is based on the EU-U.S. Data Privacy Framework insofar as the provider is certified under it, and otherwise on the Standard Contractual Clauses of the EU Commission. A data processing agreement is in place with Resend. You can request a copy of the safeguards at sales@interpanel.com. The legal basis for its use is our legitimate interest in reliable delivery (Art. 6(1)(f) GDPR).
Uploaded Floor Plans and Drawings
In some contact forms on this website, you can optionally attach a floor plan or drawings as a file (PDF, JPG, PNG, DWG or DXF, up to 10 MB). The file is transmitted in its original form together with your inquiry by email via Resend to our project department and is not stored permanently on the web server. The information on Resend above applies to this transmission; the file may be processed in the USA in the process. Please upload only documents that you are authorized to share.
To prepare your project, we analyze the drawings, for example to identify rooms, areas and windows and to create a preliminary design. For this, we also use AI models. Before any AI analysis, we redact personal data in the drawing, such as names, addresses and contact details in the title block. This step runs on our own computers and on our servers at Hetzner in Germany (see Section 2). We may then transfer the redacted drawings to providers of AI services based in the USA for analysis. We use these services only via business interfaces with a data processing agreement under which the content is not used to train the AI models. The transfer is based on the EU-U.S. Data Privacy Framework insofar as the provider is certified under it, and otherwise on the Standard Contractual Clauses of the EU Commission (Art. 45 and Art. 46 GDPR). You can request a copy of the safeguards at sales@interpanel.com. An employee reviews every result before we use it. No automated decision-making within the meaning of Art. 22 GDPR takes place.
The drawings are analyzed with AI only with your consent, which you give when attaching the file in the form (Art. 6(1)(a) GDPR). Without this consent, you can send the form without an attachment. You may withdraw your consent at any time with effect for the future, for example by email to sales@interpanel.com. The lawfulness of the processing carried out before the withdrawal remains unaffected. Otherwise, the same storage periods apply to the drawings as to the other information you provide in the contact form.
The data you enter in the contact form will remain with us until you ask us to erase it, withdraw your consent to its storage or the purpose for storing the data no longer applies. Mandatory statutory provisions, in particular retention periods, remain unaffected.
Single-Room Calculator (interpanel.com/simulation)
The single-room calculator at interpanel.com/simulation is operated by our server at tools.interpanel.com and embedded in this page. This server also runs at Hetzner in Germany (see Section 2). With each calculation, your browser transmits your information about the room to this server, including dimensions, window area, orientation and weather location. For technical reasons, your IP address is also transmitted. We use it to protect against misuse and in the server log files as described above. We keep the calculation result in working memory so that you can create a PDF report within 30 minutes; we delete it after 35 minutes at the latest. The calculator does not set any cookies. It stores saved variants and the room name only in your browser’s storage (Local Storage and Session Storage), from where they are not transmitted to us. The legal basis is our legitimate interest in providing the tool (Art. 6(1)(f) GDPR).
Before creating the report, you may voluntarily provide your name, your company, your email address and your phone number. We store this information together with your inputs and the results of the calculation only with your consent, in order to contact you about it (Art. 6(1)(a) GDPR). We forward it to our sales team by email. For this transmission, we use Resend (see above); the information may be processed in the USA in the process. We do not send you a confirmation of receipt. On our server, we automatically delete the information twelve months after receipt; the storage periods of the contact form apply to the email to our sales team. You may withdraw your consent at any time with effect for the future, for example by email to sales@interpanel.com. The lawfulness of the processing carried out before the withdrawal remains unaffected. You can also create the report without providing this information.
Analytics Tools
This website uses Plausible Analytics, a privacy-friendly web analytics service. Plausible does not use cookies and does not collect any personal data. All data is collected in aggregate form. It is not possible to identify individual visitors. Plausible is fully compliant with the GDPR, CCPA and PECR.
Google Ads Conversion Tracking
We use Google Ads, an online advertising service of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). To measure which of our ads lead to an inquiry, we use conversion tracking based on Google Consent Mode (v2). If you click on one of our Google ads and then submit a form (contact, request for system documentation or comfort calculator), a so-called conversion is transmitted to Google. Cookies are set in this process only with your marketing consent. Without your consent, no cookies are set and no information is stored on or read from your device; in that case, Google receives only anonymous, cookieless signals without individual identifiers, from which conversions are statistically modeled.
In addition, we use “Enhanced Conversions”: your email address is converted in your browser, using the SHA-256 method, into an irreversible check value (hash) and is transmitted to Google exclusively in this hashed form. Your email address in plain text does not leave your browser for this purpose. Google uses the hash for matching with logged-in Google accounts and then deletes it.
The setting of cookies and the transmission of Enhanced Conversions take place exclusively on the basis of your consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) TDDDG (German Telecommunications Digital Services Data Protection Act), which you give via our cookie banner and which you can withdraw at any time with effect for the future via “Cookie settings” in the page footer. Without consent, only anonymous, cookieless signals are transmitted without access to your device. In the course of the transmission, data may be transferred to the USA; Google is certified under the EU-U.S. Data Privacy Framework. Further information can be found in Google’s privacy policy at policies.google.com/privacy.
ChatGPT Ads Conversion Measurement
We run ads in ChatGPT. For users in the European Economic Area, the provider is OpenAI Ireland Limited, 1st Floor, The Liffey Trust Centre, 117-126 Sheriff Street Upper, Dublin 1, D01 YC43, Ireland (“OpenAI”). To measure whether an ad led to a contact inquiry, we use OpenAI’s server-side Conversions API. No OpenAI script and no OpenAI cookie is used on our website for this purpose.
If you reach our website through an ad in ChatGPT, the address contains a click identifier (“oppref”). Only if you consent to the Marketing category in our cookie banner do we store this identifier for up to 30 days in your browser’s local storage (“ip_oppref”). If you submit our contact form during this time, your browser passes the identifier to our server together with the inquiry. After our email delivery service has accepted the inquiry, our server reports an “inquiry” event to OpenAI with a randomly generated event ID, the click identifier, the page address and the time. We do not send your name, email address, phone number, the content of your inquiry or your IP address. Without your consent, no identifier is stored and nothing is reported to OpenAI.
The legal basis is your consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) TDDDG. You can withdraw it at any time with effect for the future via “Cookie settings” in the page footer; the stored click identifier is then deleted immediately. OpenAI may also process the data in the USA. For more information, see OpenAI’s privacy policy at openai.com/policies/eu-privacy-policy.
5. Inquiries by Email or Phone
If you contact us by email or phone, your inquiry, including all resulting personal data (name, inquiry), will be stored and processed by us for the purpose of handling your request. We do not share this data without your consent.
6. Cookies and Consent
Our website uses cookies and comparable technologies (such as local storage in the browser). We use technically necessary procedures that are required for the operation of the site, for example storing your cookie decision itself, on the basis of Section 25(2) TDDDG without consent. We activate all other, non-necessary procedures exclusively with your consent (Section 25(1) TDDDG, Art. 6(1)(a) GDPR).
On your first visit, we ask for your consent via a cookie banner. There you can freely choose between the following categories:
- Necessary: required for the technical operation of the site, always active (no consent required).
- Statistics: anonymous recording of click positions (click heatmap) to improve the site. Only with consent.
- Marketing: Google Ads conversion tracking and ChatGPT Ads conversion measurement (see Section 4). Cookies, Enhanced Conversions and storage of the ChatGPT click identifier only with consent; without consent, only anonymous, cookieless measurement for Google and none for OpenAI.
Our cookie-free audience measurement with Plausible Analytics (see “Analytics Tools”) does not set cookies, does not process personal data and therefore does not require consent; it is not part of the cookie banner.
Your consent is voluntary and can be withdrawn at any time with effect for the future. You can access the settings at any time via the “Cookie settings” link in the page footer. The lawfulness of the processing carried out before the withdrawal remains unaffected.