Privacy policy

This notice explains how we process personal data when you visit this website or contact us. Updated: October 2026.

1. Controller

Artisan Wood GmbH, represented by Mustafa Birogul
An der Tongrube 5–9, 40789 Monheim am Rhein, Germany
Phone: +49 2173 848 68 38
Privacy enquiries: info@artisan-wood.de

2. Website and hosting

HostGator (HostGator.com, LLC, USA; Newfold group) hosts this website. IP addresses, requested pages, timestamps, referrers, browser and operating system details and technical errors may be processed to deliver, maintain and protect the site. Recipients include the hosting provider and its technical service providers. Our legitimate interest in reliable and secure operation is the legal basis (Article 6(1)(f) GDPR).

Logs are retained only as needed for operation, troubleshooting and security; specific incidents may require longer retention for investigation or legal claims. Provider information: Newfold/HostGator privacy notice.

3. Contact forms, email and telephone

We process your contact details and message, including your name, email and any company or telephone details you provide, to answer your enquiry. Forms use WPForms within our WordPress website. Please do not submit particularly sensitive information through the form.

The legal basis is Article 6(1)(b) GDPR for contractual or pre-contractual enquiries, otherwise Article 6(1)(f) GDPR, reflecting our interest in answering messages. Use is voluntary; without the necessary contact details we may be unable to reply. Enquiries are deleted after handling unless a business relationship, statutory retention duties or legitimate grounds such as legal claims require continued retention. Commercial and tax retention periods may apply to business records.

4. Cookies and CookieYes

CookieYes Limited, 3 Warren Yard, Warren Park, Wolverton Mill, Milton Keynes, MK12 5NW, United Kingdom, manages cookie choices and consent records. Consent status, timestamps, identifiers and browser information may be processed. Legal bases for documenting consent and necessary device access are Article 6(1)(c) GDPR and section 25(2) TDDDG.

Non-essential cookies and consent-based processing rely on section 25(1) TDDDG and Article 6(1)(a) GDPR. Change or withdraw your choices for the future using the cookie icon or consent management control. The cookie dialog lists categories, individual cookies and their lifetimes. CookieYes privacy notice.

5. Google Analytics

Google Analytics, integrated through Site Kit, helps us understand page views and interactions and improve the website. The EEA provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Data may include online identifiers, referrers, device and browser details, usage events and approximate location derived from IP addresses. Consent-based analytics and device access rely on Article 6(1)(a) GDPR and section 25(1) TDDDG.

Google Consent Mode communicates your consent status and adjusts tag behaviour. Reduced technical signals without analytics cookies may arise depending on that status. Processing in the USA is possible. You can change your choice in the cookie dialog. See Google services on partner sites and the Analytics opt-out browser add-on.

6. Jetpack and Automattic

Jetpack provides visitor statistics, security functions and delivery of static files. It may process IP addresses, browser details, requested pages, referrers and timestamps. Providers include Automattic Inc., USA, and, for European users, Aut O’Mattic A8C Ireland Ltd., Grand Canal Dock, 25 Herbert Place, Dublin, Ireland.

Consent-based statistics and cookies rely on Article 6(1)(a) GDPR and section 25(1) TDDDG. Necessary security and delivery functions rely on our legitimate interest in a secure, working website (Article 6(1)(f) GDPR); necessary device access relies on section 25(2) TDDDG. Automattic specifies 28 days for raw statistics logs. See Jetpack privacy and Automattic privacy policy.

7. Google reCAPTCHA

Forms use reCAPTCHA to detect automated or abusive submissions. Technical data, including IP address, browser and device details and interactions associated with the check, may be sent to Google. Google Ireland Limited, Dublin, Ireland, is involved for European users. Google acts as a processor of reCAPTCHA customer data.

Our legitimate interest in protecting communication channels is the basis under Article 6(1)(f) GDPR. Where consent is required for non-essential device access or further processing, section 25(1) TDDDG and Article 6(1)(a) GDPR apply. Without necessary permissions, the form may be restricted. You can alternatively contact us by email or telephone.

8. Recipients and international transfers

Only people and service providers who need data for these purposes receive it, alongside recipients required by law. Hosting, Google and Automattic services may process data outside the EU/EEA, particularly in the USA. Transfers are subject to Articles 44 et seq. GDPR, including an applicable adequacy decision or safeguards such as EU standard contractual clauses. Contact us for information about the recipients and safeguards applicable to your data.

9. Retention and security

We delete or anonymise data when its purpose ends, unless statutory duties or legitimate grounds require retention. Criteria include enquiry handling, legal deadlines, claims and cookie or consent lifetimes. This website uses HTTPS encryption.

10. Your rights

Subject to legal conditions, you have rights of access, rectification, erasure, restriction and portability (Articles 15–18 and 20 GDPR). You may withdraw consent for the future at any time (Article 7(3)). You may object to processing based on Article 6(1)(f) on grounds relating to your particular situation (Article 21). You may object to direct marketing at any time.

You may complain to a supervisory authority, particularly where you live or work or where an alleged infringement occurred (Article 77). In North Rhine-Westphalia: LDI NRW, Kavalleriestraße 2–4, 40213 Düsseldorf, Germany.

11. External links and updates

External links, including map services, open other providers’ websites, where their privacy notices apply. We update this notice when the website or its processing changes.