Version: September 2026
1. Controller
The controller within the meaning of the General Data Protection Regulation (GDPR) is:
SIVA GmbH
Barthelsmühlring 1
76870 Kandel
Germany
Managing Director: Jörg Schrader
Phone: +49 7275 9898780
Email: 
@
.
2. General information
The protection of your personal data is important to us. We process personal data only to the extent necessary to provide our website, its functions and our services, or where we are legally permitted or obliged to do so.
Personal data means any information relating to an identified or identifiable natural person.
This Privacy Policy explains what personal data we process when you visit our website, use its functions or contact us, for what purposes and on what legal basis.
3. Legal bases for processing
Where applicable, we process personal data on the following legal bases under Art. 6 GDPR:
- Art. 6(1)(a) GDPR – where you have given your consent;
- Art. 6(1)(b) GDPR – where processing is necessary for the performance of a contract or for taking steps at your request prior to entering into a contract;
- Art. 6(1)(c) GDPR – where processing is necessary for compliance with a legal obligation;
- Art. 6(1)(f) GDPR – where processing is necessary for the purposes of our legitimate interests or those of a third party, unless your interests or fundamental rights and freedoms override those interests.
4. Hosting and server log files
Our website is hosted by:
ALL-INKL.COM – Neue Medien Münnich
Hauptstraße 68
02742 Friedersdorf
Germany
When you access our website, technical data is automatically processed in server log files. This may include:
- IP address;
- date and time of access;
- requested file or website page;
- HTTP status code;
- amount of data transferred;
- referrer URL, where transmitted by your browser;
- browser type and version;
- operating system;
- language and other technical information.
The processing is necessary to ensure the secure and technically reliable operation of the website and is based on Art. 6(1)(f) GDPR.
According to the current information provided by ALL-INKL, server log files are generally deleted no later than seven days after creation. Longer storage may occur in individual cases where this is necessary to investigate or defend against security incidents.
SIVA GmbH has concluded an agreement with ALL-INKL for order processing pursuant to Art. 28 GDPR. The agreement was concluded on 25 May 2018 and has an indefinite term.
5. Cookies
Our website uses only technically required cookies and similar technologies that are necessary for the operation of the website or for requested functions.
We currently do not use cookies for analytics, advertising or marketing purposes and do not integrate corresponding third-party services.
The following cookies are currently used:
Real Cookie Banner
The cookie real_cookie_banner is used to store your privacy and consent settings. It is technically required for the operation of the consent management system.
Polylang
The cookie pll_language is used to store your selected language and to provide the website in the appropriate language.
PlanSo Forms
The cookie _wp_session is a temporary session cookie used by PlanSo Forms to provide the functionality of the contact form. It is not used for analytics, advertising or marketing purposes.
Further information on the processing of personal data in connection with these functions can be found in the relevant sections of this Privacy Policy.
You can change or withdraw your privacy settings at any time using the privacy settings available on our website.
6. Contact form
You can contact us via the contact form provided on our website.
Depending on the information you provide, the following data may be processed:
- name;
- company;
- email address;
- telephone number;
- message content.
The processing of this data is carried out in order to process and respond to your inquiry.
Depending on the context of your inquiry, the legal basis is Art. 6(1)(b) GDPR where the processing is necessary to take steps prior to entering into a contract or to perform a contract, or Art. 6(1)(f) GDPR where processing is based on our legitimate interest in processing and responding to business inquiries.
We retain the data provided via the contact form for as long as necessary to process your inquiry. The data is subsequently deleted unless statutory retention obligations apply, the data is required for the establishment, exercise or defence of legal claims, or an ongoing business relationship requires further storage.
7. Email and SMTP transmission
Messages submitted through the contact form are forwarded to SIVA GmbH by email.
Email transmission is technically carried out using SMTP services provided by ALL-INKL.
In this context, the sender and recipient addresses, date and time of transmission, message content and other information required for the transmission and processing of the email may be processed.
The processing is carried out for the purpose of handling your inquiry and is based, depending on the circumstances, on Art. 6(1)(b) or Art. 6(1)(f) GDPR.
8. WordPress technical functions
Our website is operated using WordPress.
WordPress and the plugins used on our website process technical information to the extent necessary to provide the website and its functions.
No additional analytics, advertising or marketing functions are activated through WordPress.
9. SSL/TLS encryption
For security reasons and to protect the transmission of confidential content, such as inquiries submitted through the contact form, this website uses SSL/TLS encryption.
You can identify an encrypted connection by the browser’s address bar displaying https:// and the lock symbol.
10. Recipients of personal data
Personal data is disclosed only where this is necessary for the technical provision of the website, the processing of your inquiry, compliance with legal obligations, or the establishment, exercise or defence of legal claims.
Our hosting and email provider ALL-INKL.COM – Neue Medien Münnich acts as a technical service provider for the operation of the website and email services.
There is currently no transfer of personal data to third parties for analytics, advertising or marketing purposes.
Where service providers process personal data on our behalf, this is carried out on the basis of the applicable data protection requirements, in particular Art. 28 GDPR.
11. Storage periods
We generally retain personal data only for as long as necessary for the respective processing purpose.
After the purpose has ceased to apply, data is deleted unless statutory retention obligations require longer storage or the data is required for the establishment, exercise or defence of legal claims or for an ongoing business relationship.
Different retention periods may therefore apply depending on the type of data and the underlying legal requirements.
12. Your data protection rights
Subject to the statutory requirements, you have the following rights:
- Right of access under Art. 15 GDPR;
- Right to rectification under Art. 16 GDPR;
- Right to erasure under Art. 17 GDPR;
- Right to restriction of processing under Art. 18 GDPR;
- Right to data portability under Art. 20 GDPR;
- Right to object under Art. 21 GDPR, where the statutory requirements are met;
- Right to withdraw consent under Art. 7(3) GDPR where processing is based on consent.
Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
To exercise your rights, please contact us using the contact details provided in section 1.
13. Right to lodge a complaint with a supervisory authority
You have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data violates applicable data protection law.
The competent supervisory authority for SIVA GmbH is:
The State Commissioner for Data Protection and Freedom of Information of Rhineland-Palatinate (LfDI Rheinland-Pfalz)
Hintere Bleiche 34
55116 Mainz
Germany
Phone: +49 (0) 6131 8920-0
Email: poststelle@datenschutz.rlp.de
The LfDI Rheinland-Pfalz is responsible, among other things, for handling complaints pursuant to Art. 77 GDPR.
14. Updates to this Privacy Policy
We reserve the right to amend this Privacy Policy where necessary in order to reflect changes to our website, our services, technical processes or applicable legal requirements.
The current version of this Privacy Policy is available on our website.
Version: September 2026