Rothycon CARBON concrete
Lightweight Construction - Sales Representation, Technical Support, Project Management

Privacy Policy

1. Data Controller
rothycon
Owner: Roy Thyroff
Selbitzer Straße 28
95119 Naila
Germany
Phone: +49 (0) 9282 984 5650
E-mail: contact@rothycon.com

2. Data Protection Officer
A Data Protection Officer has not currently been appointed. For any questions regarding data protection, please contact the Data Controller using the contact details provided above.

3. General Information on Data Processing
We take the protection of personal data seriously. Personal data means any information relating to an identified or identifiable natural person. We process personal data in accordance with the applicable data protection regulations, in particular the General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG), the Digital Services Act (DDG), and the Telecommunications Digital Services Data Protection Act (TDDDG).

4. Website Hosting and Technical Provision
This website is hosted by an external hosting provider, currently expected to be STRATO. When you access this website, technically necessary data is processed to enable delivery of the website and ensure system security.
This may include:

  • IP address
  • Date and time of access
  • Accessed page or file
  • Referrer URL
  • Browser type and version
  • Operating system
  • Amount of data transferred
  • Access status

The legal basis for processing is Article 6(1)(f) GDPR. Our legitimate interest lies in the secure and reliable operation of this website.

5. SSL / TLS Encryption
For security reasons, this website uses SSL or TLS encryption. This protects data transmitted to us against unauthorized access by third parties during transmission.

6. Contact via E-Mail, Telephone or Contact Form
If you contact us, we process the information you provide to handle your request and any subsequent communication.
This may include:

  • Name
  • Company
  • E-mail address
  • Telephone number
  • Project information
  • Technical inquiries
  • Documents voluntarily submitted

The legal basis is Article 6(1)(b) GDPR where processing is necessary for pre-contractual measures or contractual performance, and Article 6(1)(f) GDPR for general inquiries.

7. Contact Form and Project Inquiries
Our contact form is intended to facilitate structured collection of technical questions, project inquiries, and callback requests.
Mandatory fields are only collected where necessary for processing your request. Voluntary information may assist us in evaluating and responding more effectively.
Please do not send confidential information, trade secrets, personal data of third parties, or security-sensitive project documentation before direct coordination has taken place.

8. Lead Qualification and Customer / Prospect Management

To manage inquiries, quotations, projects, and business relationships efficiently, personal data may be processed within a CRM system.

This may include:

  • Contact information
  • Communication history
  • Project data
  • Quotation information
  • Lead status
  • Tasks and reminders
  • Follow-up activities

The legal basis is Article 6(1)(b) GDPR and additionally Article 6(1)(f) GDPR.

9. Use of Microsoft 365, Outlook, Dynamics 365, Dataverse and Copilot
Microsoft services may be used for business communication, document management, appointment scheduling, contact management, CRM processes, and internal organization.
These services may include:

  • Microsoft 365
  • Outlook
  • Dynamics 365
  • Dataverse
  • Microsoft Copilot

Personal data provided during communication or project-related activities may be processed through these systems.
Where Microsoft acts as a processor, processing is based on a Data Processing Agreement. Any transfer of personal data to third countries shall take place only in accordance with applicable data protection requirements and safeguards.

10. AI-Based Communication and Assistance Systems
Where AI-powered systems, digital assistants, chat functions, or telephone assistants are used on this website or during communication, they serve the purpose of structured inquiry handling, pre-qualification, and support.
The following data may be processed:

  • Name
  • Contact details
  • Conversation content
  • Project information
  • Callback requests
  • Technical inquiries

No automated decision-making producing legal effects or similarly significant effects within the meaning of Article 22 GDPR takes place.

11. Appointment Scheduling and Video Conferences
Where online appointment scheduling or video conferencing services are offered, the necessary information may be processed, including:

  • Name
  • E-mail address
  • Telephone number
  • Company
  • Preferred appointment date
  • Subject matter
  • Communication data

Processing is based on Article 6(1)(b) GDPR or Article 6(1)(f) GDPR.

12. Newsletters and Professional Information
If you subscribe to newsletters, event announcements, or professional information services, we process your e-mail address and any additional information voluntarily provided to send you the requested content.
The legal basis is your consent pursuant to Article 6(1)(a) GDPR.
You may withdraw your consent at any time with future effect.

13. Cookies, Similar Technologies and Consent Management
This website may use technically necessary cookies required for the operation of the website.
Analytics, marketing, convenience, third-party cookies, and similar technologies are only used based on your consent through a consent management platform.
Applicable legal bases include:

  • Article 6(1)(f) GDPR for technically necessary cookies
  • Article 6(1)(a) GDPR in conjunction with Section 25 TDDDG for consent-based technologies

You may withdraw your consent at any time with future effect.

14. Google Tag Manager
Google Tag Manager may be used for the technical management of website tags.
Google Tag Manager itself generally does not set analytics cookies but may trigger other services that process data. Such services are activated only after the required user consent has been obtained.

15. Google Analytics
Where Google Analytics is used, it serves to analyze website usage and improve our content.
The following data may be processed:

  • Usage data
  • Device information
  • Browser information
  • Approximate location data
  • Referrer information
  • Website interactions

Google Analytics is only activated following your consent. The legal basis is Article 6(1)(a) GDPR in conjunction with Section 25 TDDDG.

16. Google Maps
Google Maps may be integrated to display maps, locations, and directions.
When such content is accessed, personal data may be transmitted to Google, including:

  • IP address
  • Device information
  • Usage data

Integration should only occur after consent has been provided or through a privacy-friendly two-click solution.

17. YouTube Videos
Embedded YouTube videos may be used to provide video content.
When videos are loaded or played, data may be transmitted to YouTube and Google.
Whenever possible, videos should be embedded using YouTube's enhanced privacy mode or a comparable privacy-friendly solution.

18. Google Fonts and External Fonts
Where external fonts are used, loading these fonts may establish a connection to the provider's servers.
For privacy reasons, local hosting of fonts on the website server is recommended.
Where external fonts are loaded, this must be specifically described within this Privacy Policy.

19. LinkedIn Company Profile
rothycon may maintain a company profile on LinkedIn.
When visiting our LinkedIn profile, the privacy policy of LinkedIn additionally applies.
We use LinkedIn for corporate communication, networking, professional information sharing, and public representation.
The legal basis is Article 6(1)(f) GDPR.

20. LinkedIn Insight Tag / LinkedIn Ads
Where the LinkedIn Insight Tag or comparable LinkedIn marketing services are used, LinkedIn may process information regarding visits to and use of our website.
This may include:

  • URL
  • Referrer URL
  • IP address
  • Device information
  • Browser characteristics
  • Conversion events

Use of these services requires consent via the consent management platform.

21. External Links and Third-Party Content
Our website may contain links to third-party websites and services.
The respective providers are solely responsible for their content and data protection practices.
By clicking on external links, you leave our website.

22. No Online Shop and No Payment Processing
This website does not currently operate its own online shop and does not provide payment processing services.
Should online sales, payment providers, shopping cart functions, customer accounts, or ordering processes be introduced in the future, this Privacy Policy will be updated accordingly.

23. Data Retention
We retain personal data only for as long as necessary for the respective purposes or as required by statutory retention obligations.
Once the purpose no longer applies or retention periods expire, personal data will be deleted or restricted unless another legal basis permits further processing.

24. Recipients of Personal Data
Recipients of personal data may include:

  • Hosting providers
  • IT service providers
  • Communication service providers
  • CRM and Microsoft service providers
  • Newsletter service providers
  • Web analytics and marketing providers
  • Tax advisors
  • Legal advisors
  • Other service providers where necessary


25. International Data Transfers

Where personal data is transferred to countries outside the European Union or the European Economic Area, such transfers occur only where an appropriate legal basis exists.
This may include:

  • Adequacy decisions of the European Commission
  • Standard Contractual Clauses (SCCs)
  • Explicit consent

For U.S.-based service providers, the applicable level of data protection and any available certification should be assessed.

26. Obligation to Provide Personal Data
Providing personal data is generally voluntary.
However, certain information may be required for us to process inquiries, prepare quotations, or perform contractual obligations.
Without such information, processing may not be possible in whole or in part.

27. Automated Decision-Making
No automated decision-making, including profiling within the meaning of Article 22 GDPR, that produces legal effects or similarly significant effects on you takes place.

28. Your Rights
Subject to applicable legal requirements, you have the right to:

  • Access your personal data
  • Rectify inaccurate data
  • Erase personal data
  • Restrict processing
  • Data portability
  • Object to processing
  • Withdraw consent with future effect


29. Right to Lodge a Complaint
If you believe that the processing of your personal data violates applicable data protection laws, you have the right to lodge a complaint with a supervisory authority.
The competent supervisory authority for Bavaria is:
Bavarian State Office for Data Protection Supervision (BayLDA)
Promenade 18
91522 Ansbach
Germany

30. Objection to Unsolicited Advertising
The use of contact information published within the scope of legal notice requirements for sending unsolicited advertising or informational materials is hereby prohibited.
We reserve the right to take legal action in the event of unsolicited advertising, including spam e-mails.

31. Updates to this Privacy Policy
We reserve the right to amend this Privacy Policy whenever legal requirements change or new functions, services, or processing activities are introduced on this website.
Last updated: July 2026