Privacy Policy

Last updated: 10 March 2026

1. Controller

[d]tom Industrial Design
Dipl.-Des. Tom Farenski
Lenkersheimer Straße 14
90431 Nuremberg
Germany

Telephone: +49 (0)911 92 333 599
Email: farenski@d-tom.com
Website: d-tom.com
VAT ID No.: DE276444314

2. General information on data processing

We process personal data only to the extent necessary to provide this website, to handle enquiries, and to provide our content and services.

The legal bases for processing are, in particular:
– Art. 6(1)(b) GDPR, where processing is necessary for the performance of a contract or in order to take steps prior to entering into a contract,
– Art. 6(1)(f) GDPR, where processing is necessary for the purposes of our legitimate interests, in particular in the secure, stable and error-free provision of this website,
– Art. 6(1)(a) GDPR, where you have given us your consent, for example for receiving our newsletter.

3. Hosting and server log files

This website is hosted by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany.

When this website is accessed, information is automatically processed by the hosting provider in so-called server log files. This particularly includes:
– IP address
– date and time of access
– time zone
– page accessed or URL
– referrer URL
– files retrieved
– amount of data transferred
– HTTP status code
– browser type and browser version
– operating system

The processing is carried out for the purpose of technically providing the website and ensuring its stability and security, in particular to defend against misuse and attempted attacks.

The legal basis is Art. 6(1)(f) GDPR.

Where personal data is processed in the course of hosting, this is carried out on the basis of a data processing agreement pursuant to Art. 28 GDPR.

Server log files are stored only for as long as necessary for the secure and uninterrupted operation of the website. Longer storage will only take place where exceptionally required for evidential purposes in the event of specific security incidents.

4. Contact by email, telephone or form

If you contact us by email, telephone or via a form on this website, we process the data you provide solely for the purpose of handling your enquiry.

This may include, in particular, the following data:
– name
– email address
– telephone number
– the content of your message
– where applicable, attachments or uploaded files submitted by you

The processing is carried out in order to deal with your enquiry and, where applicable, to take steps prior to entering into a contract.

The legal basis is Art. 6(1)(b) GDPR where your enquiry relates to the initiation or performance of a contract. For other enquiries, processing is carried out on the basis of Art. 6(1)(f) GDPR.

The data arising in the course of contact will be deleted once your enquiry has been dealt with conclusively and provided no statutory retention obligations apply.

5. Storage of form submissions in the website backend

Where form submissions are additionally stored in the backend of this website, this is done for the purpose of the internal handling, documentation and traceability of enquiries.

This may include the data entered into the form, including any uploaded files.

The legal basis is Art. 6(1)(b) GDPR and/or Art. 6(1)(f) GDPR.

The stored data will be deleted as soon as its storage is no longer necessary for handling the relevant enquiry and provided no statutory retention obligations apply.

6. Newsletter via Mailchimp

If you subscribe to our newsletter, we process the data you enter, in particular your email address and, where applicable, your name, in order to send you regular information about our services, projects, topics and updates.

Subscription to our newsletter takes place by means of a double opt-in procedure. This means that after subscribing, you will receive an email in which you must confirm your subscription by clicking a confirmation link. Your subscription only becomes effective once this confirmation has been completed.

For the purpose of evidencing your consent, we store the time of subscription and confirmation together with the technical information used in this process, in particular the IP address.

The legal basis for this processing is Art. 6(1)(a) GDPR.

For the dispatch and administration of the newsletter, we use Mailchimp, a service provided by Intuit Inc. and/or The Rocket Science Group LLC d/b/a Mailchimp, USA. The data is processed on our behalf.

In this context, personal data may be transferred to a third country, in particular to the United States. According to the provider, such transfers take place on the basis of appropriate data protection safeguards.

You may withdraw your consent to receiving the newsletter at any time with effect for the future. An unsubscribe link is included in every newsletter email. Alternatively, an informal message to the contact details stated above will suffice.

Your data will be stored for newsletter dispatch for as long as the subscription remains active. Once you unsubscribe, your data will be removed from the active mailing list. Data retained as evidence of consent may continue to be stored for a limited period on the basis of legal documentation and accountability interests.

7. Cookies and similar technologies

According to the current configuration of this website, no cookies are used for advertising or conventional tracking purposes.

However, technically necessary cookies or similar technologies may be used where required for the operation of the website, security, form functionality, or protection against misuse.

The legal basis for this is Art. 6(1)(f) GDPR.

8. Spam protection through Google reCAPTCHA

In order to protect our forms against misuse and automated entries, we use Google reCAPTCHA. For users in Europe, the provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

By using reCAPTCHA, personal data and technical information may be processed, in particular IP address, browser and device information, mouse movements, time spent on the page, and other data necessary for misuse detection.

This may also involve transmission to servers operated by Google LLC in the United States.

The use of reCAPTCHA serves to protect our website and forms against spam, misuse and automated attacks.

The legal basis is Art. 6(1)(f) GDPR.

9. External links

Our website may contain links to external websites. The respective operators of those linked websites are solely responsible for their content and the processing of data on those websites.

10. Security / TLS encryption

For security reasons and in order to protect confidential content, this website uses TLS encryption. You can usually recognise an encrypted connection by the “https://” in your browser’s address bar and the padlock symbol.

11. Your rights

Within the framework of the applicable legal provisions, you have in particular the following rights:
– right of access pursuant to Art. 15 GDPR
– right to rectification pursuant to Art. 16 GDPR
– right to erasure pursuant to Art. 17 GDPR
– right to restriction of processing pursuant to Art. 18 GDPR
– right to data portability pursuant to Art. 20 GDPR
– right to object pursuant to Art. 21 GDPR to processing based on Art. 6(1)(f) GDPR
– right to withdraw consent given, with effect for the future

You also have the right to lodge a complaint with a supervisory authority regarding the processing of your personal data.

12. Changes to this Privacy Policy

We reserve the right to amend this Privacy Policy where this is necessary due to technical changes, changes in legal requirements, or changes to our services and data processing activities.