Controller
The controller responsible for data processing on this website is Atelier Bubori GmbH, Industriestr. 3, 78052 Villingen-Schwenningen, Germany. You can contact us by email at
hello@express-messestand.de or by phone at +49 7721 88588-0.
Server logs and hosting
When you visit our website, our hosting provider processes technical access data such as your IP address, date and time of access, requested URL, referrer, browser type and operating system. This processing is necessary to deliver the website, maintain system security and trace technical issues. The legal basis is Art. 6(1)(f) GDPR. The data is stored only for as long as required for secure operation and troubleshooting.
Cookies and browser-side storage
This website uses technically necessary browser-side storage so that core functions work reliably. This includes in particular your selected language version as well as your consent or rejection decision for optional services. On a first visit, the website additionally compares the browser language in order to guide visitors as directly as possible to the matching language version. The legal basis for this technically necessary storage and language control is Art. 6(1)(f) GDPR.
CookieScript / consent management
We use CookieScript to manage consent and cookie settings. In this context, information about your consent choice, timestamps, browser data and technically required identifiers may be processed and stored in your browser so that your selection can be respected on later visits. The legal basis for this consent-management service is Art. 6(1)(c) GDPR where legally required consents are managed, and Art. 6(1)(f) GDPR for the technically reliable documentation and restoration of your choice.
Google Tag Manager, Google Analytics and Google Ads
We use Google Tag Manager, Google Analytics 4 and Google Ads / the Google tag on this website. Google Tag Manager is used to manage technical and marketing-related tags on the site. Google Analytics 4 may be used to measure reach and analyse how our website is used. Google Ads may be used for conversion measurement and advertising purposes. In this context, your IP address, browser and device information, page views, referrer data and consent or cookie information may be processed. Where processing serves analytics, marketing, conversion or reach-measurement purposes, it is based on your consent pursuant to Art. 6(1)(a) GDPR. Further information on Google's data processing can be found in Google's privacy information.
Adobe Fonts (Typekit)
We use Adobe Fonts (Typekit) to render the typography of this website. When the site is loaded, a connection to Adobe servers is established. In this context, your IP address, browser and device information and technical request data may be processed. The legal basis is Art. 6(1)(f) GDPR because we have a legitimate interest in a consistent, brand-compliant visual appearance.
Maps on the website
On the homepage and location pages we use Leaflet together with map data and tiles from OpenStreetMap and CARTO. When the map is loaded, a connection is established to the relevant map and tile servers. In that process, your IP address, browser and device information and the requested map sections may be processed. The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is the user-friendly presentation of our locations.
Contact and enquiry form
If you contact us by email or via our enquiry form, we process the information you provide, in particular your name, email address, optional phone number, selected service interests and your message, in order to handle your enquiry, prepare a quote and answer follow-up questions. The legal basis is Art. 6(1)(b) GDPR for pre-contractual steps and, where you additionally consent to contact by email or phone, Art. 6(1)(a) GDPR.
When JavaScript is active, our current form setup prepares a pre-filled message in your default email application. In that case, the data you enter is initially processed locally in your browser and is only transmitted to your own email provider when you actively send the message. If this client-side preview is not used, the same form can alternatively be submitted to our server endpoint. In that case, we process the submitted form data on our server in order to forward your enquiry to our team by email.
Form abuse protection
To protect the server-side form flow against spam and misuse, our server processes limited technical connection data. This includes in particular a hashed reference to the requesting IP address in order to enforce short-term rate limiting. The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in protecting our systems and communication channels.
External communication paths
If you send an enquiry through your local email application, further transmission takes place via the email provider you use. If an enquiry is sent server-side, technical delivery takes place via our hosting and mail infrastructure. Depending on the providers involved, processing may take place in countries outside the EU/EEA. Where this is the case, processing takes place only on the basis of an adequate level of protection or other suitable safeguards.
Social media links
Our website contains only ordinary outbound links to external profiles, in particular Instagram and LinkedIn. No social media plug-ins are loaded merely by displaying the website. A connection to the respective platform is established only when you actively click one of these links.
SSL / TLS encryption
To protect the transmission of confidential content, this website uses up-to-date SSL or TLS encryption.
Storage periods
We store personal data only for as long as required for the relevant purposes or for as long as statutory retention obligations apply. Enquiries and related correspondence are regularly deleted or restricted once processing has been completed and there are no statutory or business reasons requiring further retention.
Your rights
You have the right to access the personal data we process about you as well as the right to rectification, erasure, restriction of processing, data portability and objection in accordance with the applicable legal provisions. If processing is based on your consent, you may withdraw that consent at any time with effect for the future. You also have the right to lodge a complaint with a data protection supervisory authority.
Changes to this privacy policy
We update this privacy policy whenever our website, the services we use or the legal requirements change. The version published on this page applies.
Questions about data protection
If you have any questions about data protection or the processing of your personal data, please contact us at
hello@express-messestand.de.
