Privacy Policy
Last updated: 7 August 2026
1. Data Protection at a Glance
General Information
The protection of your personal data is important to us. This privacy policy informs you about which personal data we process when you visit our website and use our services, for what purposes the processing takes place, on what legal basis it is based and what rights you have.
Personal data is any information relating to an identified or identifiable natural person.
Controller
The controller responsible for the processing of personal data on this website is:
CADdent GmbH
Max-Josef-Metzger-Str. 6
86157 Augsburg
Germany
Phone: +49 821 5999965-0
Email: datenschutz@caddent.eu
Data Protection Officer
Our data protection officer can be contacted via:
Projekt 29 GmbH & Co. KG
Ostengasse 14
93047 Regensburg
Germany
Phone: +49 941 298693-0
Data protection enquiries can also be sent to datenschutz@caddent.eu.
2. General Legal Bases
We only process personal data if there is a legal basis for doing so.
Depending on the processing, the following legal bases in particular may apply:
Art. 6(1)(a) GDPR – Consent
if you have given us your consent to a specific processing operation, for example for analytics, marketing or tracking technologies or a newsletter.
Art. 6(1)(b) GDPR – Contract and pre-contractual measures
if the processing is necessary for the performance of a contract with you or for handling an enquiry initiated by you prior to entering into a contract.
Art. 6(1)(c) GDPR – Legal obligation
if we are obliged to process data due to legal requirements.
Art. 6(1)(f) GDPR – Legitimate interests
if the processing is necessary to safeguard our legitimate interests or those of third parties and is not overridden by the interests or fundamental rights and freedoms of the data subject. Our legitimate interests include in particular the secure, stable and efficient operation of our website, IT security and the handling of general business communication.
Where information is stored on or read from your terminal device, we additionally comply with Section 25 of the German Telecommunications Digital Services Data Protection Act (TDDDG).
Cookies, pixels, tracking technologies and comparable access to your terminal device that are not strictly necessary are generally only used with your prior consent pursuant to Section 25(1) TDDDG.
For storage or access that is strictly technically necessary, the exception under Section 25(2) TDDDG may apply.
3. Storage Period
We only store personal data for as long as is necessary for the respective purpose of processing.
Where statutory retention obligations exist, the data concerned will be stored for the duration of the respective statutory retention period and, during this time, will generally only be processed for the purposes provided for by law.
If a specific storage period is stated for individual processing operations below, that period takes precedence.
If no specific storage period is stated, the duration of storage depends in particular on the purpose of processing, statutory retention obligations, limitation periods and the necessity for the establishment, exercise or defence of legal claims.
4. Recipients of Personal Data
We use external service providers in the course of our business activities.
These may include in particular:
- hosting and IT service providers,
- providers of website operation and technical maintenance,
- email and communication service providers,
- newsletter service providers,
- analytics and marketing service providers,
- advertising platforms,
- external data protection and IT security service providers.
Where service providers process personal data exclusively on our behalf, they are engaged on the basis of a data processing agreement pursuant to Art. 28 GDPR.
Personal data is only disclosed if there is a legal basis for doing so under data protection law.
5. Transfers to Third Countries
When certain services are used, personal data may be processed outside the European Union or the European Economic Area.
Transfers to a third country only take place in compliance with Art. 44 et seq. GDPR.
For transfers to recipients in the United States, an adequacy decision of the European Commission pursuant to Art. 45 GDPR on the basis of the EU-US Data Privacy Framework may be relied upon in particular, provided that the respective recipient is certified accordingly.
Where no applicable adequacy decision exists, the standard contractual clauses approved by the European Commission pursuant to Art. 46(2)(c) GDPR and, where appropriate, supplementary technical and organisational safeguards may be used in particular.
6. Server Log Files
When you access our website, the web server processes technically necessary information.
This may include in particular:
- IP address,
- date and time of access,
- requested URL or file,
- referrer URL,
- browser type and browser version,
- operating system used,
- host name or technical device information,
- HTTP status code and amount of data transferred.
The processing takes place for the technical provision of the website, to ensure stability and security, for error analysis and to detect and defend against abusive access and attacks.
Legal basis: Art. 6(1)(f) GDPR.
Our legitimate interest lies in the secure, functional and stable operation of our website and our IT systems.
Server log data is generally stored for a limited period and then deleted or anonymised. Longer storage only takes place if this is necessary to investigate a specific security incident, to preserve evidence or due to legal obligations.
7. SSL/TLS Encryption
This website uses SSL/TLS encryption.
This protects data that you transmit to us via our website from unauthorised access by third parties during transmission.
8. Contact via Contact Form, Email or Telephone
If you contact us via the contact form, by email or by telephone, we process the personal data you provide in order to handle your enquiry.
The following data in particular may be processed via the contact form:
- laboratory or company,
- customer number,
- title,
- salutation,
- first name,
- last name,
- telephone number,
- email address,
- preferred method of contact,
- subject of the enquiry,
- design system,
- order number,
- content of the message or notes,
- technically necessary transmission data.
Mandatory fields are only collected insofar as they are necessary for handling the respective enquiry.
If your enquiry relates to the initiation or performance of a contract, the processing is based on Art. 6(1)(b) GDPR.
For other business enquiries, the processing is based on Art. 6(1)(f) GDPR. Our legitimate interest lies in the proper handling and documentation of business communication.
Merely taking note of this privacy policy does not constitute consent under data protection law.
Your data will generally be deleted as soon as your enquiry has been conclusively dealt with and no further storage is required.
If the enquiry leads to a contractual relationship or if statutory retention obligations exist, the data concerned will be stored for a correspondingly longer period.
9. Consent Management and Privacy Settings
On our website we use a consent management solution that allows you to select which technically non-essential services and technologies may be activated.
In particular, it stores whether and for which categories or services you have given or refused consent.
This storage is necessary so that we can take your choice into account on subsequent page views and demonstrate that consent has been given.
Your consent decision is processed to fulfil accountability obligations under data protection law and to manage your privacy settings.
Legal bases: Art. 6(1)(c) GDPR in conjunction with the accountability and documentation obligations under data protection law, and additionally Art. 6(1)(f) GDPR.
Where information is stored on or read from your terminal device for this purpose, this is done on the basis of Section 25(2) No. 2 TDDDG, insofar as the storage is strictly necessary to provide the consent function you have expressly requested.
Your consent decision is generally stored for a maximum of twelve months, unless an earlier renewed request becomes necessary due to significant technical or legal changes.
You can withdraw or change any consent you have given at any time with effect for the future via the privacy settings available on the website.
10. Google Tag Manager
We use Google Tag Manager.
The provider for users in the European Economic Area is:
Google Ireland Limited
Gordon House
Barrow Street
Dublin 4
Ireland
Google Tag Manager is used for the technical management of website tags.
Analytics and marketing services in particular can be controlled via the Tag Manager.
Google Tag Manager must not result in an analytics or marketing service that requires consent being activated before you have given your consent.
Insofar as personal data, in particular technical connection data such as the IP address, is transmitted to Google through the integration of Google Tag Manager itself, it is only activated on the basis of your prior consent.
Legal bases: Art. 6(1)(a) GDPR and, where your terminal device is accessed, Section 25(1) TDDDG.
You can withdraw your consent at any time via the privacy settings.
Insofar as data is transferred to Google companies in the USA, the safeguards described under “Transfers to Third Countries” apply.
11. Google Analytics 4
Subject to your consent, we use Google Analytics 4, a web analytics service provided by Google.
The provider for users in the European Economic Area is:
Google Ireland Limited
Gordon House
Barrow Street
Dublin 4
Ireland
Google Analytics enables us to analyse how visitors use our website. The following information in particular may be processed:
- pages visited,
- time and duration of visits,
- interactions and events,
- referrers,
- approximate geographical location,
- browser and device information,
- pseudonymous online identifiers,
- campaign and source information.
Google Analytics may use cookies or similar technologies to distinguish returning users and sessions.
It is used exclusively with your prior consent.
Legal bases: Art. 6(1)(a) GDPR and Section 25(1) TDDDG.
Google Analytics is configured so that analytics tags are not activated before you have given your consent.
According to Google, IP addresses of users from the European Union are not logged or stored in Google Analytics. The IP address is used to derive approximate location information and is then discarded.
The retention period for user- and event-level data is limited to a defined period in our Google Analytics configuration. Aggregated statistical reports may remain available for longer.
You can withdraw your consent at any time with effect for the future via our privacy settings.
Insofar as data is transferred to the USA, the safeguards described in the section “Transfers to Third Countries” apply.
12. Google Ads and Conversion Tracking
Subject to your consent, we use Google Ads services to measure the effectiveness of our advertisements and to optimise our advertising campaigns.
The provider for users in the European Economic Area is:
Google Ireland Limited
Gordon House
Barrow Street
Dublin 4
Ireland
If you reach our website via a Google ad or perform a defined action on our website, information may be processed using cookies or similar technologies.
This may include in particular:
- pages visited,
- clicks and interactions,
- time of a conversion,
- campaign information,
- advertising and click identifiers,
- browser and device data,
- technical connection data.
We use this information in particular to determine whether an advertisement has led to an enquiry, a contact, a download, an order process or another conversion defined by us.
Google Ads conversion tracking is used exclusively with your consent.
Legal bases: Art. 6(1)(a) GDPR and Section 25(1) TDDDG.
Insofar as Google Ads functions are used for remarketing or personalised advertising, these are also only used with the corresponding consent.
You can withdraw your consent at any time via our privacy settings.
Insofar as data is transferred to the USA, the safeguards set out in the section “Transfers to Third Countries” apply.
13. Google Consent Mode
Insofar as we use Google Consent Mode, the consent status you have set via our consent management solution is transmitted to the Google services used.
We use Consent Mode in such a way that your decision is respected.
Analytics and advertising storage is not enabled without your corresponding consent.
Insofar as Google services on our website are only loaded after prior consent, no corresponding analytics or marketing data is transmitted to Google before consent has been given.
You can change your privacy settings at any time via the website’s consent settings.
14. Meta Pixel, Meta Custom Audiences and Conversion Measurement
Insofar as Meta advertising technologies are used on our website, this is done exclusively with your prior consent.
The provider is:
Meta Platforms Ireland Limited
Merrion Road
Dublin 4
D04 X2K5
Ireland
The Meta Pixel can be used to measure the effectiveness of advertisements on Facebook and Instagram, to attribute conversions and – provided that corresponding consent has been given – to create target audiences for advertising measures.
The following data in particular may be processed:
- IP address,
- browser and device information,
- pages visited,
- referrers,
- times of page views,
- interactions and defined events,
- pseudonymous cookie and device identifiers,
- information on attribution to advertising campaigns.
The processing is carried out exclusively on the basis of your consent.
Legal bases: Art. 6(1)(a) GDPR and Section 25(1) TDDDG.
In the context of certain Meta Business Tools, CADdent and Meta may be joint controllers pursuant to Art. 26 GDPR for the collection and transmission of certain event data. Meta may be independently responsible for the subsequent processing of the data by Meta.
You can withdraw your consent at any time via our privacy settings.
Insofar as personal data is transferred to the USA, the safeguards set out in the section “Transfers to Third Countries” apply.
15. LinkedIn Insight Tag
Insofar as we use the LinkedIn Insight Tag, this is done exclusively with your prior consent.
The provider is:
LinkedIn Ireland Unlimited Company
Wilton Plaza
Wilton Place
Dublin 2
Ireland
The LinkedIn Insight Tag enables us in particular to carry out:
- the measurement of conversions,
- the statistical analysis of our LinkedIn advertising campaigns,
- the creation of website audiences for retargeting,
- aggregated insights into the use of our website in connection with LinkedIn campaigns.
The following data in particular may be processed:
- URL,
- referrer URL,
- IP address,
- timestamp,
- device and browser properties,
- page and interaction events.
The processing is carried out exclusively with your consent.
Legal bases: Art. 6(1)(a) GDPR and Section 25(1) TDDDG.
According to LinkedIn, directly identifying information is generally removed from Insight Tag data within seven days. The remaining pseudonymised data is generally deleted within 180 days.
You can withdraw your consent at any time via our privacy settings.
Insofar as data is transferred to the USA, the safeguards set out in the section “Transfers to Third Countries” apply.
16. YouTube
Videos from the video platform YouTube may be embedded on our website.
The provider for users in the European Economic Area is:
Google Ireland Limited
Gordon House
Barrow Street
Dublin 4
Ireland
YouTube content is embedded in such a way that a connection to YouTube is only established once you have consented to the corresponding processing or have expressly activated the content.
When a YouTube video is activated, the following information in particular may be transmitted to Google or YouTube:
- IP address,
- page visited,
- browser and device information,
- time of access,
- information about interaction with the video.
If you are logged into a Google or YouTube account at the same time, Google may be able to associate the usage with your user account.
Legal bases: Art. 6(1)(a) GDPR and Section 25(1) TDDDG, insofar as information is stored on or read from your terminal device.
You can withdraw your consent at any time via the privacy settings.
Insofar as data is transferred to the USA, the safeguards described in the section “Transfers to Third Countries” apply.
17. Newsletter and CleverReach
If you subscribe to our newsletter, we process the personal data required for this purpose.
For sending and managing our newsletters we use:
CleverReach GmbH & Co. KG
Schafjückenweg 2
26180 Rastede
Germany
CleverReach processes the data in the context of the services provided to us.
For the newsletter subscription, we process in particular your email address and, where applicable, other data provided voluntarily.
The subscription is based on your consent.
Legal basis: Art. 6(1)(a) GDPR.
A double opt-in procedure may be used to secure the subscription. In this case, it is logged that a subscription and subsequent confirmation have taken place. This documentation serves as proof that consent was properly given.
Our newsletters may also contain functions for measuring success. In particular, it may be recorded whether a message was opened and which link was clicked.
Insofar as personalised newsletter tracking is used, this is also based on your consent.
You can withdraw your consent at any time with effect for the future, in particular via the unsubscribe link in every newsletter.
After unsubscribing, your data will be deleted from the active newsletter distribution list, unless another legal basis justifies further storage.
To prove consent previously given, the necessary evidence may continue to be stored on a restricted basis within the statutory limitation periods.
18. Facebook and Instagram Company Pages
We maintain company profiles on Facebook and Instagram.
The provider is:
Meta Platforms Ireland Limited
Merrion Road
Dublin 4
D04 X2K5
Ireland
When you visit our social media pages, Meta processes personal data in accordance with its own privacy policy.
We may receive statistical information from Meta about the use of our company pages, known as Insights data.
Insofar as we jointly determine the purposes and means of certain processing operations with Meta, joint controllership pursuant to Art. 26 GDPR may exist.
Our processing serves in particular public relations, corporate communication, customer communication and the analysis of the reach of our company profiles.
Insofar as no consent is required and the processing takes place within our area of responsibility, it is based on Art. 6(1)(f) GDPR. Our legitimate interest lies in up-to-date corporate communication and in providing information to customers and prospective customers.
Meta is responsible for the processing carried out independently by Meta.
19. LinkedIn Company Page
We maintain a company page on LinkedIn.
The provider is:
LinkedIn Ireland Unlimited Company
Wilton Plaza
Wilton Place
Dublin 2
Ireland
When you visit or interact with our LinkedIn company page, LinkedIn may process personal data.
We may receive aggregated statistical information from LinkedIn about the use of our company page.
Our processing takes place in particular for the purposes of corporate communication, brand presentation, communication with customers, prospective customers and business partners, and reach analysis.
Legal basis for the processing for which we are responsible: Art. 6(1)(f) GDPR.
Our legitimate interest lies in up-to-date B2B communication and the external presentation of our company.
Registering or logging in to LinkedIn does not constitute consent towards CADdent to website tracking or the use of the LinkedIn Insight Tag. The LinkedIn Insight Tag on our website is only used after separate consent has been given.
20. External Links and Social Media Links
Insofar as we merely provide links to external websites or social media platforms on our website, the mere display of the link generally does not yet establish a connection to the respective external provider.
Only when you click on such a link do you leave our website, and the privacy policy of the respective third-party provider applies.
21. Your Rights
Subject to the statutory requirements, you have in particular the following rights:
Right of access – Art. 15 GDPR
You can request information as to whether and which personal data we process about you.
Right to rectification – Art. 16 GDPR
You can request the correction of inaccurate personal data and the completion of incomplete personal data.
Right to erasure – Art. 17 GDPR
You can request the erasure of your personal data subject to the statutory requirements.
Right to restriction of processing – Art. 18 GDPR
You can request the restriction of processing subject to the statutory requirements.
Right to data portability – Art. 20 GDPR
Where the statutory requirements are met, you can receive the personal data you have provided in a structured, commonly used and machine-readable format or request its transmission to another controller.
Right to object – Art. 21 GDPR
Insofar as we process personal data on the basis of Art. 6(1)(e) or (f) GDPR, you can object to the processing at any time on grounds relating to your particular situation.
If personal data is processed for direct marketing purposes, you can object to this processing at any time.
Withdrawal of consent – Art. 7(3) GDPR
You can withdraw any consent you have given at any time with effect for the future.
The lawfulness of the processing carried out on the basis of the consent until its withdrawal remains unaffected.
To exercise your rights, you can contact us at datenschutz@caddent.eu.
22. Right to Lodge a Complaint with a Data Protection Supervisory Authority
Pursuant to Art. 77 GDPR, you have the right to lodge a complaint with a data protection supervisory authority.
As a private company based in Bavaria, CADdent falls in particular under the competence of:
Bavarian State Office for Data Protection Supervision (BayLDA)
Promenade 18
91522 Ansbach
Germany
You may also generally contact a data protection supervisory authority in the place of your habitual residence, your place of work or the place of the alleged infringement.
23. Objection to Unsolicited Advertising
We hereby object to the use of the contact details published as part of our statutory information obligations for the purpose of sending advertising or other promotional material that has not been expressly requested.
24. Changes to this Privacy Policy
We regularly review this privacy policy and amend it when legal requirements, the services used or the type of data processing change.
The current version published on this website applies in each case.
Last updated: 7 August 2026