1. General information on data protection

The protection of your personal data is important to us. Personal data is any information that relates to an identified
or identifiable natural person. This includes, for example, name, email address, IP address, or user behaviour.

We process personal data only in accordance with applicable data protection laws, in particular the General Data
Protection Regulation (GDPR) and the German Telecommunications-Digital Services Data Protection Act (TTDSG).

This privacy policy informs you, in a transparent manner,

  • which personal data we process when you use our website,
  • for which purposes this takes place,
  • on which legal bases the processing is carried out,
  • how long the data is stored, and
  • which rights you have as a data subject.

2. Controller

The controller within the meaning of the GDPR is:

SMS sign media solutions GmbH
Nelly-Sachs-Straße 53
40764 Langenfeld
Germany

Phone: +49 2173 1618 735
Email: info@signmediasolutions.com

Data Protection Officer (DPO)
Daniel Slomka
Email:datenschutz@signmediasolutions.com

3. Legal bases for processing

We process personal data only on the basis of one of the following legal grounds:

  • Art. 6(1)(a) GDPR – consent
  • Art. 6(1)(b) GDPR – performance of a contract or pre-contractual measures
  • Art. 6(1)(c) GDPR – compliance with a legal obligation
  • Art. 6(1)(f) GDPR – legitimate interests
  • Section 25 TTDSG – storing/accessing information on end devices (e.g., cookies)

Where processing is based on your consent, you may withdraw your consent at any time with effect for the future.

4. Your rights as a data subject

You have the right at any time:

  • to obtain information about your personal data (Art. 15 GDPR),
  • to have inaccurate data corrected (Art. 16 GDPR),
  • to request deletion of your data (Art. 17 GDPR),
  • to request restriction of processing (Art. 18 GDPR),
  • to data portability (Art. 20 GDPR),
  • to object to processing (Art. 21 GDPR),
  • to withdraw consent at any time (Art. 7(3) GDPR), and
  • to lodge a complaint with a supervisory authority (Art. 77 GDPR).

The competent supervisory authority is generally the data protection authority of the federal state in which our company
is established.

5. Website hosting

Our website is hosted by STRATO AG, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany. STRATO processes personal
data on our behalf on the basis of a data processing agreement pursuant to Art. 28 GDPR.

Processed data

  • IP address
  • Date and time of access
  • Browser type and version
  • Operating system
  • Referrer URL

Purpose of processing

  • Technical provision of the website
  • Ensuring stability and security
  • Error analysis and abuse prevention

Legal basis

Art. 6(1)(f) GDPR (legitimate interest in operating a secure and functional website)

Storage period

Server log files are generally deleted after no more than 7 days, unless longer storage is required for
security-related reasons.

6. Cookies and consent management

Our website uses cookies and similar technologies. Cookies are small text files that are stored on your device and contain
certain information.

We distinguish between:

  • strictly necessary cookies required to operate the website, and
  • non-essential cookies, e.g., for statistics, marketing or convenience features.

Non-essential cookies are set only after your explicit consent.

To manage your consent, we use a cookie consent tool. It allows you to choose which cookie categories you
permit when you first visit our website. You can change or withdraw your selection at any time.

Legal bases

  • Art. 6(1)(c) GDPR
  • Section 25 TTDSG

7. Comments (WordPress)

If you leave comments on our website, we process the following personal data:

  • comment content
  • name or pseudonym
  • email address
  • IP address
  • user agent (browser information)

Purpose of processing

  • publication and display of comments
  • prevention of abuse and spam

Legal basis

Art. 6(1)(f) GDPR (legitimate interest in public communication and security)

Storage period

Comments remain stored as long as the related content is published online or until the comment is deleted.

8. Contact forms

If you use our contact forms, we process the data you provide (e.g., name, email address, message).

Purpose of processing

Processing and responding to your enquiry

Legal basis

Art. 6(1)(b) GDPR

Storage period

Data is deleted once your enquiry has been fully processed, unless statutory retention obligations apply.

9. Newsletter (BREVO)

We use BREVO (Sendinblue GmbH, Köpenicker Straße 126, 10179 Berlin, Germany) to send our newsletter. Processing
is carried out on the basis of a data processing agreement.

Registration and double opt-in

Newsletter registration takes place using a double opt-in procedure. For documentation purposes we store:

  • email address
  • IP address
  • date and time of registration

This storage serves as proof of your consent.

Purpose of processing

  • sending information and marketing content
  • documenting your consent

Legal basis

Art. 6(1)(a) GDPR (consent)

Newsletter tracking

Our newsletters may include features to measure opens and clicks. Such analysis is carried out only on the basis of your
consent.

Withdrawal

You may unsubscribe at any time via the unsubscribe link contained in each newsletter or by contacting us.

10. Google Ads

We use Google Ads to promote our offers.

Processed data

  • IP address (possibly truncated)
  • cookie IDs
  • usage and interaction data

Purpose

  • conversion tracking
  • remarketing
  • measuring campaign performance

Legal basis

Art. 6(1)(a) GDPR (consent)

Google Ads is activated only after your consent. Your consent status is transmitted to Google.

11. YouTube embeds

Our website embeds videos from YouTube. When you play a video, a connection to Google servers is established.

Processed data

  • IP address
  • device and usage data

Legal basis

Art. 6(1)(a) GDPR (consent)

YouTube videos are loaded only after your consent.

12. Google Maps

We use Google Maps to display our location.

Processed data

  • IP address
  • usage data

Purpose

displaying maps and route information

Legal basis

Art. 6(1)(a) GDPR (consent)

The map is loaded only after your consent.

13. Google reCAPTCHA

We use Google reCAPTCHA to protect our website against automated access and spam.

Processed data

  • IP address
  • browser and device information
  • interaction data

Purpose

protecting the website from abuse

Legal basis

Art. 6(1)(a) GDPR (consent)

14. LiveChat

We use LiveChat to communicate directly with website visitors.

Processed data

  • chat contents
  • IP address
  • technical usage data

Purpose

  • customer communication
  • support and service

Legal basis

Art. 6(1)(b) GDPR. Any additional analytics or tracking features are used only with consent (Art. 6(1)(a) GDPR).

15. Transfers to third countries

Some of the services used may transfer personal data to third countries (e.g., the USA). Transfers are carried out only
on the basis of appropriate safeguards pursuant to Art. 44 et seq. GDPR, in particular:

  • EU–US Data Privacy Framework, or
  • EU Standard Contractual Clauses adopted by the European Commission.

Despite these measures, it cannot be completely ruled out that public authorities in the third country may gain access
to the data.

16. Updates to this privacy policy

We review this privacy policy regularly and update it where necessary due to legal or technical changes.