Privacy policy

Thank you for visiting our website and for your interest in our company. Protecting your personal data is important to us. Personal data is any information that can be used to identify you personally. Below we explain which data we collect when you use this website and what we use it for.

The controller within the meaning of the General Data Protection Regulation (GDPR) is PCB EXPRESS GmbH, Joseph-Dollinger-Bogen 12, 80807 München, Germany, phone: +49 (0) 89 885 6443 5, email: tech@pcbexpress.eu. Further details are given in the imprint.

Each time you open the website, your browser automatically sends data to our server, which is briefly stored in log files: IP address, date and time of access, the page or file requested, amount of data transferred, status code, referrer URL, and browser type and operating system.

This data is technically required to deliver the website and to keep it stable and secure (e.g. to fend off attacks). The legal basis is our legitimate interest under Art. 6(1)(f) GDPR. Log data is deleted after 14 days at the latest unless it is needed longer to investigate a specific security incident. It is not combined with other data sources.

The website runs on servers of a technical service provider that processes the data solely on our behalf and according to our instructions (data processing agreement under Art. 28 GDPR). All data is transferred encrypted via HTTPS (TLS).

Cookies are small text files that your browser stores on your device. We only use cookies to the extent described below. We do not use third-party cookies.

Necessary cookies only store your settings (cookie choice and selected language). They are required to provide the service you have explicitly requested; the legal basis is Section 25(2) no. 2 of the German TDDDG in conjunction with Art. 6(1)(f) GDPR.

All other cookies (e.g. for statistics) are only set if you have consented via the cookie banner (Section 25(1) TDDDG, Art. 6(1)(a) GDPR). We do not currently use any statistics or analytics tools; before we do, we will name the tool and its cookies here. You can withdraw or change your consent at any time with effect for the future via the “Cookie settings” link in the footer of every page. You can also delete or block cookies in your browser at any time.

Necessary

These cookies are required for the website to work and only store your settings. They cannot be switched off.

Statistics

Help us understand how visitors use the website so that we can improve our content and services. These cookies are only set with your consent.

Cookie: None at present.

When you contact us via the contact form, the quote request form, by email or by phone, we process the data you provide. In the contact form this is your name, email address and message, and optionally your company and phone number. A quote request also requires the company name. The same applies to manufacturing data (e.g. Gerber or ODB++ files) you send us by email.

We use this data solely to handle your request, prepare a quote and get in touch with you. Form submissions are sent by email via our mail server to our sales and customer service staff; they are not stored on the web server itself. The legal basis is Art. 6(1)(b) GDPR where your request is aimed at concluding a contract, and otherwise our legitimate interest in responding to your request (Art. 6(1)(f) GDPR).

Your data is deleted once your request has been dealt with, unless statutory retention obligations apply (e.g. for business correspondence and quotes under Section 257 of the German Commercial Code). If an order results, the section “Data processing for order handling” applies.

To protect our forms against automated spam, we use ALTCHA, which we run ourselves on our own server. Your browser solves a small computational puzzle that our server then checks. No cookies are set, no data is passed on to third parties and there is no tracking.

We also limit the number of form submissions per IP address. For this, the IP address is only held in the server's memory and discarded after one hour at the latest. The legal basis is our legitimate interest in the security of our website and in preventing abuse (Art. 6(1)(f) GDPR).

If you place an order with us, we process the data required to perform the contract (Art. 6(1)(b) GDPR). We pass it on to the carrier commissioned with the delivery where this is necessary for delivery, and payment data to the commissioned bank where this is necessary for payment processing. Once the contract has been fully performed, your data is restricted in line with tax and commercial retention periods and deleted when these periods expire.

The fonts used on this website are stored locally on our server. Opening a page does not connect to servers of Google or any other provider. We do not embed third-party content (such as maps, videos or social media plugins).

Within our company, only the departments that need your data to handle your request have access to it. Beyond that, we only pass your data on to the recipients named in this policy (technical service providers under a data processing agreement, carriers, banks). Data is only transferred to countries outside the European Union or the European Economic Area if the requirements of Art. 44 et seq. GDPR are met.

Under applicable data protection law you have the following rights towards the controller regarding the processing of your personal data:

1. access to the personal data concerning you (Art. 15 GDPR);
2. rectification of inaccurate personal data (Art. 16 GDPR);
3. erasure of the personal data concerning you where the conditions of Art. 17 GDPR are met;
4. restriction of processing where the conditions of Art. 18 GDPR are met;
5. withdrawal of consent with effect for the future (Art. 7(3) GDPR);
6. receiving your personal data in a structured, commonly used and machine-readable format (Art. 20 GDPR);
7. objection to processing (Art. 21 GDPR);
8. lodging a complaint with a supervisory authority (Art. 77 GDPR), in particular in the member state of your habitual residence, place of work or place of the alleged infringement. The authority responsible for us is the Bavarian Data Protection Authority (BayLDA), Promenade 18, 91522 Ansbach, Germany.

To exercise your rights, simply contact us using the details above, e.g. by email to tech@pcbexpress.eu.

Right to object: where we process your personal data on the basis of our legitimate interest (Art. 6(1)(f) GDPR), you have the right to object to this processing at any time on grounds relating to your particular situation. We will then no longer process the data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims. If your data is processed for direct marketing purposes, you can object to this at any time without giving reasons.

Unless a more specific storage period is stated in this policy, we only store personal data for as long as is necessary for the respective purpose. Statutory retention periods (in particular commercial and tax retention periods of six to ten years) remain unaffected; when they expire, the data is routinely deleted.

We update this privacy policy when the website or the legal requirements change. The version published here applies.