INFORMATION ABOUT THE COLLECTION OF PERSONAL DATA
Below, we inform you about the collection of personal data when using our website. Personal data is any data that can be attributed to you personally, such as name, address, email addresses, and user behavior.

1. The responsible party according to Art. 4 (7) of the EU General Data Protection Regulation (GDPR) is:

CHRISTOPH ULRICH
Sulzbrunnenstraße 21
74564 Crailsheim
+49 7951 – 9697-13
(see Impressum).

You can reach our Data Protection Officer at datenschutz@hero-textil.de or by post at our address.

When you contact us by email or phone, the data you provide (your email address, possibly your name, and phone number) will be stored by us in order to answer your questions. We will delete the data collected in this context after it is no longer required for storage, or we will limit the processing if there are legal retention obligations. If we rely on commissioned service providers for certain functions of our offer or wish to use your data for advertising purposes, we will inform you of these processes in detail below. We will also specify the criteria for the duration of the storage.

2. Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability, objection, and to withdraw consent at any time (Articles 15–21 GDPR; Art. 7(3) GDPR).

You also have the right to lodge a complaint with a supervisory authority, e.g. the authority in Baden-Württemberg (Germany).

3. Contact (email/phone)

If you contact us by email or phone, we process the data you provide (e.g. email address, name, phone number, message) to handle your request.
Legal basis: Art. 6(1)(b) GDPR or Art. 6(1)(f) GDPR.
Retention: deleted when no longer required unless statutory retention applies.

4. Website access / server logs

When you use the website for information only, we process technical data transmitted by your browser (e.g. IP address, timestamp, requested page, referrer, browser/OS, status codes) to deliver the website and ensure stability and security.
Legal basis: Art. 6(1)(f) GDPR.

5. Hosting (STRATO)

Hosting provider:
Strato GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany.

According to STRATO, IP addresses in server logs for attack detection/defence are stored for a maximum of seven days.
Legal basis: Art. 6(1)(f) GDPR; where applicable, processing under a data processing agreement (Art. 28 GDPR).

6. Cookies and similar technologies

We use cookies and similar technologies (e.g. local storage) to provide the website and—if you consent—to enable optional services.

• Strictly necessary: required for operation, security and consent storage.
  Legal basis: § 25(2) TTDSG and Art. 6(1)(f) GDPR.

• Optional (consent): e.g. web fonts, external media.
  Legal basis: § 25(1) TTDSG in conjunction with Art. 6(1)(a) GDPR.

7. Consent management (Oveleon Cookiebar / Contao)

We use a consent management tool (“Cookiebar” by Oveleon) to record and manage your choices. Your consent status is stored in your browser (cookies / similar storage, e.g. ccb_contao_token_1).
Retention: until you withdraw/change your choice (via “Cookie settings”) or delete browser data.

8. Adobe Typekit / Adobe Fonts (web fonts) – only with consent

We use Adobe Typekit/Adobe Fonts for font display. Loading occurs only after your consent (“Webfonts” category). When loaded, a connection to Adobe is established and your IP address and technical browser/device data may be processed.
Provider: Adobe Systems Software Ireland Limited, 4–6 Riverwalk, Citywest Business Campus, Dublin 24, Ireland.
Legal basis: Art. 6(1)(a) GDPR and § 25(1) TTDSG.
Third-country transfers: depending on processing, transfers to third countries (e.g. the US) cannot be ruled out.
Withdrawal: via cookie settings at any time.

9. External media (Flyeralarm iFrame) – only with consent

On certain pages we embed external content via iFrame provided through publish.flyeralarm.digital. The content loads only after your consent (“External media” category).
Provider: FLYERALARM Digital – FLYERALARM GmbH, Alfred-Nobel-Str. 18, 97080 Würzburg, Germany.
Legal basis: Art. 6(1)(a) GDPR and § 25(1) TTDSG.
Withdrawal: via cookie settings at any time.

10. Cookie-Settings

11. Updates

We update this privacy policy when required by changes in law, the website, or the services used.