Skip to content

Privacy policy

How we handle personal data on this website.

This is a courtesy translation. Only the German version is legally binding.

1. Controller

BÜROSERVICE HÜBNER GMBH
Egert 2, 72336 Balingen, Germany
Phone: +49 7433 210128-00
Email: info@druckerboerse.com

Represented by the managing directors Juliane Hübner and Michael Hübner.

2. General information

We process personal data only to the extent necessary to provide this website and our services. Depending on the case, the legal basis is Art. 6(1)(a), (b) or (f) GDPR.

3. Visiting the website and server log files

When you access our pages, your browser transmits technical data, which our hosting provider stores in log files:

  • page accessed and time of access
  • amount of data transferred and notification of successful retrieval
  • browser type and version, operating system
  • referrer URL
  • IP address

This processing serves to deliver and secure the website and is based on our legitimate interest pursuant to Art. 6(1)(f) GDPR. This data is not merged with other data.

This website is provided via the “Cloudflare Workers” service of Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. Cloudflare operates a global network of servers; content is usually delivered from a location close to the visitor. Cloudflare processes the data on our behalf as a processor.

Cloudflare is based in the USA. For the transfer, we rely on the European Commission's Standard Contractual Clauses; Cloudflare is also certified under the EU-US Data Privacy Framework.

Processing by Cloudflare is based on a data processing agreement pursuant to Art. 28 GDPR (Cloudflare Data Processing Addendum). The log data is deleted after a few days.

4. Contact form, email and telephone

If you contact us via the form, by email or by telephone, we process your details in order to handle your enquiry and any follow-up questions. The legal basis is Art. 6(1)(b) GDPR for contract-related enquiries, otherwise point (f) or your consent pursuant to point (a).

The data remains with us until the purpose no longer applies or you ask us to delete it. Statutory retention obligations, in particular under commercial and tax law, remain unaffected.

Sending form enquiries via Mailjet

The contact form is received by our web server at Cloudflare (see section 3) and forwarded to us by email via the “Mailjet” delivery service (Mailjet SAS, Paris, France; part of the Sinch group). Mailjet processes the details you enter on our behalf; according to the provider, processing takes place on servers in the European Union. We send a copy of your enquiry to the email address you provide as confirmation.

To prevent automated abuse, we limit the number of submissions per internet connection. For this purpose, your IP address is evaluated for a short time but not stored permanently.

Protection against automated input (Cloudflare Turnstile)

To protect the form against automated abuse, we use “Cloudflare Turnstile” from Cloudflare, Inc. (for the provider and third-country transfer, see section 3). Turnstile uses technical characteristics of the browser and its behaviour when loading the page to check whether an input comes from a human; for this purpose, your IP address and browser information are transmitted to Cloudflare. The service does not set cookies for advertising or tracking purposes and does not create usage profiles. The legal basis is our legitimate interest in preventing spam and abuse pursuant to Art. 6(1)(f) GDPR.

Processing by Mailjet is based on a data processing agreement pursuant to Art. 28 GDPR.

5. Cookies

This website does not set any cookies for analytics or marketing purposes; the visitor analytics described in section 6 also works without cookies. If you switch off visitor analytics there, your browser remembers this in its local storage at your express request. Should services requiring consent be integrated in the future, we will obtain your consent in advance via a consent banner.

6. External content and visitor analytics

Images, fonts and scripts on this website are delivered via our own domain. The only exception is the security check of the contact form (Cloudflare Turnstile, see section 4). Fonts are not loaded from third-party servers, and no map services or videos are embedded.

Visitor analytics with Umami

To understand which content is in demand and to improve the website, we use the open-source software “Umami”. Umami is not a service of an analytics provider: the software runs on a dedicated server hosted by DigitalOcean, LLC (New York, USA) in a data centre in the European Union. The analytics data is not passed on to third parties for their own purposes and is not combined with other data.

Your browser loads the analytics script from our own domain and also sends the measurements back to it. Our web server at Cloudflare (see section 3) forwards them to the Umami server, trimming them beforehand:

  • Your IP address is shortened: for IPv4 by the last of its four blocks, for IPv6 to the first 48 bits. Umami only evaluates this shortened address.
  • All additional parameters are removed from the address of the page accessed, except campaign information (“utm_…”). Identifiers of advertising networks that may be attached to links are therefore not stored.
  • If your browser sends the “Global Privacy Control” signal, nothing is forwarded.

The following is recorded:

  • page accessed, page title and referring website
  • browser, operating system, device type, screen size and language setting
  • approximate location (country, region, city), derived from the shortened IP address
  • page load and rendering metrics (time to first byte, first and largest contentful paint, layout shifts, responsiveness to input)
  • certain interactions without their content: clicks on the phone number, email address, buttons, the link to our shop, other external links and downloads, switching the language, and whether the contact form was started, successfully submitted or answered with an error. On submission, only the selected topic is recorded, none of your input.

To group the page views of one visit, Umami derives an identifier from the shortened IP address, the browser identification, a secret key and the current calendar month. It cannot be traced back to the IP address and changes every month; visitors are not recognised over longer periods, across devices or across other websites. IP addresses are not stored. We keep the analytics data for as long as we need it for comparisons over longer periods.

The legal basis is our legitimate interest in a data-minimising analysis of website usage in order to improve content and loading times (Art. 6(1)(f) GDPR). The analytics script does not store anything on your device. It only reads information that your browser holds anyway in order to display the page (screen size, language, loading times) and checks whether you have switched off analytics. We therefore do not consider consent pursuant to Section 25 of the German Telecommunications Digital Services Data Protection Act (TDDDG) to be required.

DigitalOcean processes the data as a processor on the basis of a data processing agreement pursuant to Art. 28 GDPR. DigitalOcean is based in the USA and is certified under the EU-US Data Privacy Framework; the European Commission's Standard Contractual Clauses apply in addition. Regarding Cloudflare, the information in section 3 applies.

You can object to analytics at any time. If “Do Not Track” or “Global Privacy Control” is switched on in your browser, no analytics takes place. Alternatively, you can switch off analytics for this browser here; your browser remembers this in its local storage until you delete the website data.

The email delivery service for the contact form is described in section 4.

7. Encryption

For security reasons, this website uses TLS encryption. You can recognise an encrypted connection by the prefix “https://” in your browser's address bar.

8. Your rights

You have the right at any time to:

  • obtain access to the data stored about you (Art. 15 GDPR)
  • have inaccurate data rectified (Art. 16 GDPR)
  • have your data erased (Art. 17 GDPR)
  • restrict processing (Art. 18 GDPR)
  • receive your data in a portable format (Art. 20 GDPR)
  • object to processing based on legitimate interests (Art. 21 GDPR)
  • withdraw consent with effect for the future (Art. 7(3) GDPR)

To exercise these rights, simply contact us using the details above.

9. Right to lodge a complaint

You may lodge a complaint with a supervisory authority. The authority responsible for us is the State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg (Landesbeauftragter für den Datenschutz und die Informationsfreiheit Baden-Württemberg), Lautenschlagerstraße 20, 70173 Stuttgart, Germany.

10. Changes

We will update this policy whenever the legal situation or the services used on this website change.

Last updated: 4 October 2026