PrivacyPolicy.
Information on the processing of personal data in accordance with the GDPR. Last updated: 11 September 2026.
1. Controller
The controller within the meaning of the General Data Protection Regulation (GDPR) is:
e.Ray Europa GmbH
Goebelstraße 21
Halle R
64293 Darmstadt
Germany
Email: info@e-ray.eu
2. Hosting
This website is hosted by Strato AG, Pascalstraße 10, 10587 Berlin (“Strato”). Strato processes data on our behalf that is generated when our website is accessed (in particular server log files, see section 3). A data-processing agreement under Article 28 GDPR is in place with Strato. Further information: strato.de/datenschutz/.
3. Collection of general data on access (server log files)
Each time this website is accessed, the server automatically records a number of technical pieces of information stored in log files:
- browser type and version used
- operating system used
- referrer URL (the previously visited page)
- subpages accessed
- date and time of access
- IP address
- internet service provider of the accessing system
This data is used exclusively for the correct delivery of content, to ensure technical functionality, to optimise the website and for security in case of attacks. There is no merging with other data sources or any inference about you as a person.
Legal basis: Article 6 (1) (f) GDPR (legitimate interest in the secure and stable provision of the website).
Log files are stored for a maximum of 14 days and then deleted.
4. Cookies and similar technologies
This website does not set any cookies of its own for advertising or tracking purposes. Fonts, scripts and images are served from our own server (see section 7). Embedded videos are only loaded from YouTube when you click, see section 8.
When you open a form (contact, demo request, data sheet download), we set a technically necessary session cookie (eray_form). It protects form submission against misuse, contains no personal data and is deleted when you close your browser. Legal basis: § 25 (2) no. 2 TDDDG.
Which visitor-analytics technology is used, what it stores on your device and how you can object is described in full in section 6.
5. Contacting us (email, contact form and download forms)
If you contact us by email or via the contact form, the personal data you provide (typically name, email address, organisation, message content) will be stored to process your request. This data will not be passed on to third parties unless stated otherwise in this declaration.
We provide data sheets via a short form. In doing so, we process your name, your email address, your organisation if you choose to provide it, and the document you have requested, in order to supply the data sheet and to be able to answer follow-up questions about the product. The details are sent by email to our mailbox. They are not used for newsletters or advertising.
Legal basis: Article 6 (1) (b) GDPR (pre-contractual measures, including the provision of requested documents) or Article 6 (1) (f) GDPR (legitimate interest in answering enquiries).
Storage period: we store your enquiry for as long as it is needed for processing and delete it at the latest after the expiry of statutory retention periods.
6. Reach measurement and visitor analytics (SalesViewer®)
We use SalesViewer® technology from SalesViewer® GmbH to record, for marketing, market research and optimisation purposes, which companies and organisations visit our pages. This only happens if you have agreed in the consent banner – without your consent the service is not loaded.
How it works: a javascript based code is used, which serves to capture company-related data and according website usage. The data captured using this technology are encrypted in a non-retrievable one-way function (so-called hashing). The data is immediately pseudonymised and is not used to identify website visitors personally.
Legal basis: Article 6 (1) (a) GDPR and § 25 (1) TDDDG (consent).
Storing your decision: we store your answer to the consent banner in your browser’s localStorage (key eray.consent) so that you are not asked again on every visit. This is strictly necessary storage under § 25 (2) no. 2 TDDDG. Storage duration: until you delete it or change your decision.
Withdrawal: you can withdraw your consent at any time with effect for the future via the Analytics settings link at the bottom of every page. Independently of that, you can object to the collection in general by activating the SalesViewer® opt-out; this stores an opt-out cookie on your device.
Deletion: the data stored by SalesViewer® will be deleted as soon as they are no longer required for their intended purpose and there are no legal obligations to retain them.
7. Fonts (locally hosted)
This website uses its own selection of the fonts Ubuntu, Roboto and Roboto Mono, hosted locally on our server (Strato AG, see section 2). No data is transferred to third parties – in particular, no data is loaded from Google.
Legal basis: Article 6 (1) (f) GDPR (legitimate interest in a uniform appearance).
8. Videos (YouTube)
On individual pages we embed videos from YouTube (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). These videos do not load automatically: at first you only see a preview image stored on our own server. As long as you do not click it, no data is transferred to Google and no cookies are set.
Only when you start a video is a connection to Google’s servers established. Google then learns your IP address and further browser data; if you are logged in to YouTube at the same time, Google can associate the request with your account. We use the extended privacy mode (youtube-nocookie.com), in which, according to YouTube, information is only stored on your device once the video starts. We have no influence on the scope and purpose of the processing by Google.
The legal basis is your consent under Article 6 (1) (a) GDPR and § 25 (1) TDDDG, which you give by clicking on the video. You may withdraw it with effect for the future by not starting any further videos. Further details on the processing by Google: policies.google.com/privacy.
9. Routine deletion and blocking
We process and store personal data only for the period necessary to achieve the respective storage purpose, or to the extent required by European or national legislation. If the storage purpose ceases to apply or a prescribed storage period expires, the personal data is routinely blocked or deleted in accordance with statutory provisions.
10. Your rights as a data subject
You have the following rights with regard to the personal data concerning you:
- Information (Article 15 GDPR) – about the data stored about you and a copy of it.
- Rectification (Article 16 GDPR) – of inaccurate or incomplete data.
- Erasure (Article 17 GDPR) – provided no retention obligations stand in the way.
- Restriction of processing (Article 18 GDPR).
- Data portability (Article 20 GDPR) – receipt of your data in a structured, common and machine-readable format.
- Objection (Article 21 GDPR) – to processing based on Article 6 (1) (e) or (f) GDPR.
- Withdrawal of consent (Article 7 (3) GDPR) – with effect for the future.
- Complaint to a supervisory authority (Article 77 GDPR).
To exercise these rights, an informal email to info@e-ray.eu is sufficient.
11. Competent supervisory authority
Hessian Commissioner for Data Protection and Freedom of Information
PO Box 3163
65021 Wiesbaden
datenschutz.hessen.de
12. Legal bases of processing – overview
We base the processing of personal data on the following legal grounds:
- Article 6 (1) (a) GDPR – consent (where required for the visitor analytics described in section 6).
- Article 6 (1) (b) GDPR – performance of a contract or pre-contractual measures (e.g. processing of your enquiry, provision of requested documents).
- Article 6 (1) (c) GDPR – compliance with legal obligations (e.g. tax retention).
- Article 6 (1) (f) GDPR – legitimate interests (e.g. server log files, visitor analytics as described in section 6).
13. Obligation to provide data
Provision of personal data is in part required by law or contract (e.g. tax regulations, contract conclusion). Without provision of the necessary data, a contract with you may not be possible. Otherwise, the provision of personal data is voluntary.
14. Automated decision-making / profiling
We use neither fully automated decision-making within the meaning of Article 22 GDPR nor profiling.
Standard text modules partly based on the privacy-policy generator of DGD Deutsche Gesellschaft für Datenschutz GmbH; shortened, modernised and adapted to the specific processing on this website.
