Privacy Policy
Last updated: 19 August 2026
1. Controller
The controller responsible for the processing of personal data on this website is:
Valbruna Edel Inox GmbH
Siemensstraße 14
41542 Dormagen
Germany
Telephone: +49 (2133) 2706-0
Fax: +49 (2133) 2706-30
E-mail: [email protected]
Managing Directors: Massimo Amenduni Gresele, Ernesto Amenduni Gresele, Christian Pottbecker
Registergericht: Amtsgericht Neuss, HRB 4971
2. Data Protection Officer
We have appointed a Data Protection Officer. You can reach them at:
Herr Frank Mobers
Valbruna Edel Inox GmbH
Siemensstraße 14
41542 Dormagen
Germany
E-mail: [email protected]
Enquiries addressed to the Data Protection Officer are treated confidentially.
3. General information
Personal data means any information relating to an identified or identifiable natural person. We process such data only on one of the legal bases set out in Art. 6(1) GDPR. The applicable basis is stated with each processing activity below.
This website provides information about our company and our product range. It contains no online shop, no ordering function and no contact form. No automated decision-making, including profiling, takes place.
You are under no obligation to provide us with personal data. However, without the information required to answer an enquiry or process an application, we cannot deal with it.
4. Processing when you visit this website
4.1 Server log files
When you access this website, your browser transmits technical data to our web server, which is stored in log files. This includes in particular:
- the IP address of the requesting device
- the date and time of access
- the address requested and the volume of data transferred
- the previously visited page, where transmitted
- browser type, browser version and operating system
The purpose is the technical delivery of the website, ensuring system stability and security, and investigating abusive access. The legal basis is our legitimate interest in secure and uninterrupted operation (Art. 6(1)(f) GDPR).
Log files are deleted as soon as they are no longer required for the purposes stated above. Where they are needed to investigate a specific security incident, they are retained until that investigation has been concluded.
The technical operation of this website is managed by NOOO Agency S.r.l., Via Fornaci 136, 35129 Padova, Italy. The servers are located in a data centre of Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. Processing therefore takes place exclusively within the European Union, and log files are stored exclusively in Germany.
Both companies process the above data exclusively on our behalf and on our instructions. A data processing agreement pursuant to Art. 28 GDPR is in place with NOOO Agency S.r.l.; Hetzner Online GmbH is engaged therein as a sub-processor.
4.2 Cloudflare
Traffic between your browser and this website is routed through the network of Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA. Cloudflare provides a content delivery network and protection against overload and abuse.
In doing so, Cloudflare processes technical connection data including your IP address, and may use cookies or comparable technologies to detect automated access. Your behaviour is not analysed for advertising purposes.
The legal basis is our legitimate interest in the secure and efficient provision of this website (Art. 6(1)(f) GDPR).
Cloudflare also processes data in the United States. Such transfers are based on the European Commission's Standard Contractual Clauses; in addition, the company is certified under the EU-US Data Privacy Framework. A data processing agreement is in place with Cloudflare.
Further information: https://www.cloudflare.com/privacypolicy/
4.3 No other external services
All files required to display this website — fonts, stylesheets and program libraries — are delivered from our own server.
No connections to third-party servers are therefore established when you visit this website. The sole exception is the routing of traffic via Cloudflare described in section 4.2, which cannot technically be avoided. In particular, no connection to Google servers takes place.
4.4 Cookies and consent management
Cookies are small text files stored on your device. We distinguish:
Strictly necessary cookies are set so that the website functions — for example, to store your language selection or your choice in the consent banner. The legal basis for storage is § 25(2) no. 2 TDDDG (German Telecommunications Digital Services Data Protection Act); for the subsequent processing, our legitimate interest in a functioning website (Art. 6(1)(f) GDPR). No consent is required for these.
All other cookies and comparable technologies are used only if you have previously consented. The legal bases are § 25(1) TDDDG and Art. 6(1)(a) GDPR.
To obtain and document your consent we use the consent management tool Complianz. It stores your decision in a cookie on your device so that the banner does not reappear on every page, and records it as evidence towards the supervisory authorities.
Your consent is voluntary and may be withdrawn at any time with effect for the future. The lawfulness of processing carried out before withdrawal remains unaffected. You can change your selection at any time via the consent banner settings; you may also delete cookies in your browser or prevent them from being stored at all. In that case, some functions of this website may not be available.
4.5 Language selection
This website is available in German and English. Your language selection is stored in a strictly necessary cookie so that you remain in the chosen language on subsequent page views. The legal basis is § 25(2) no. 2 TDDDG in conjunction with Art. 6(1)(f) GDPR.
4.6 No web analytics
No statistical analysis of your usage behaviour takes place on this website. We use no analytics, tracking or advertising tools, and we do not create usage profiles.
5. Contacting us
If you contact us by e-mail, telephone or fax, we process the information you provide — typically your name, contact details and the content of your enquiry — in order to deal with your request.
The legal basis is Art. 6(1)(b) GDPR where your enquiry relates to the initiation or performance of a contract. In all other cases we rely on our legitimate interest in properly handling enquiries addressed to us (Art. 6(1)(f) GDPR).
We delete this data once your enquiry has been dealt with conclusively and no statutory retention obligations apply. Retention periods under German commercial and tax law remain unaffected.
Please note that unencrypted transmission of data by e-mail carries security risks. For confidential information we will gladly offer you an alternative channel.
6. Job applications
If you apply for a position with us, we process the application documents and contact details you submit in order to carry out the application procedure.
The legal basis is § 26(1) sentence 1 BDSG (German Federal Data Protection Act) in conjunction with Art. 88 GDPR, and Art. 6(1)(b) GDPR. Where you voluntarily provide further information, its processing is based on your consent (Art. 6(1)(a) GDPR).
Access to your documents is restricted to those persons involved in the respective application procedure.
If no employment relationship is established, we delete your application including the associated e-mail correspondence six months after the procedure concludes. This period serves to meet our evidentiary obligations, in particular under the German General Equal Treatment Act (AGG).
Your documents are not added to a talent pool for future positions.
7. Recipients of personal data
We disclose personal data only where this is necessary to perform a contract, where we are legally obliged to do so, where you have consented, or where a legitimate interest justifies disclosure.
Where we engage service providers who process personal data on our behalf, this is done under a data processing agreement pursuant to Art. 28 GDPR. Such providers are bound by our instructions and contractually obliged to comply with data protection requirements.
Recipients are currently the providers named in section 4 and, where necessary, tax advisors, auditors and public authorities within the scope of statutory obligations.
8. Transfers to third countries
Personal data is transferred to countries outside the European Union only within the scope of the service described in section 4.2.
Such transfers are based on the European Commission's Standard Contractual Clauses pursuant to Art. 46(2)(c) GDPR and, where applicable, on an adequacy decision under the EU-US Data Privacy Framework pursuant to Art. 45 GDPR.
9. Retention
We store personal data only for as long as is necessary for the respective purpose or as required by statutory retention periods. Specific periods are stated with the individual processing activities in sections 4 to 6. Once the purpose no longer applies and any retention periods have expired, the data is deleted.
10. Your rights
You have the following rights in relation to us:
- Access to whether and which data concerning you we process (Art. 15 GDPR)
- Rectification of inaccurate data and completion of incomplete data (Art. 16 GDPR)
- Erasure, unless a retention obligation applies (Art. 17 GDPR)
- Restriction of processing under the conditions of Art. 18 GDPR
- Data portability for data you provided to us on the basis of consent or a contract, in a commonly used, machine-readable format (Art. 20 GDPR)
- Withdrawal of consent with effect for the future (Art. 7(3) GDPR)
An informal message to the contact details in section 1 or 2 is sufficient to exercise these rights.
Right to object under Art. 21 GDPR
Where we process your data on the basis of a legitimate interest pursuant to Art. 6(1)(f) GDPR, you have the right to object to that processing at any time on grounds relating to your particular situation. If you object, we will no longer process the data concerned unless we can demonstrate compelling legitimate grounds which override your interests, rights and freedoms, or unless the processing serves to establish, exercise or defend legal claims.
Where we process your data for direct marketing purposes, you have the right to object at any time and without giving reasons. Following such an objection, we will no longer use your data for that purpose.
11. Right to lodge a complaint
Without prejudice to any other remedy, you have the right to lodge a complaint with a data protection supervisory authority, in particular in the Member State of your residence, place of work or the place of the alleged infringement.
The authority competent for us is:
Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen
Kavalleriestraße 2–4
40213 Düsseldorf
Germany
12. Changes to this Privacy Policy
We update this Privacy Policy when the processing activities on this website or the legal framework change. The version published here applies in each case.
13. Governing language
This English text is provided for convenience. In the event of any discrepancy, the German version of this Privacy Policy prevails.