Pirvacy Policy

Last updated: August 2026

1. Controller and general information

This Privacy Policy explains which personal data are processed when you visit our website, for what purposes the processing takes place and what rights you have.

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

Microganic GmbH
Betonstr. 19a
49324 Melle
Germany

Phone: +49 (0)5422 95953-0
Email: info@microganic.de
Represented by: Dipl.-Kfm. Peter Holtkamp

We process personal data only on a legal basis, in particular Article 6(1)(a) GDPR (consent), point (b) (contract or pre-contractual measures), point (c) (legal obligation) or point (f) GDPR (legitimate interests). Where information is stored on or read from your terminal device, Section 25 TDDDG also applies.

2. Hosting, server log files and encryption

When you access our website, the web server or hosting provider automatically processes technical data. These may include, in particular, the IP address, date and time, page or file accessed, referrer URL, browser, operating system, hostname, HTTP status code and amount of data transferred.

The processing serves to provide the website technically, ensure its stability and security and detect errors, attacks and misuse. The legal basis is Article 6(1)(f) GDPR; our legitimate interest is the secure and trouble-free operation of our website.

Server log files are stored only for as long as necessary for these purposes and are then deleted in accordance with the retention period set by the hosting provider. A longer period may be required in the event of specific security incidents or misuse. Hosting and IT service providers may receive the data and, where required, are engaged as processors under Article 28 GDPR.

Our website is transmitted via an SSL/TLS-encrypted connection. This protects, in particular, content submitted through forms during transmission.

3. Cookies and consent management with Borlabs Cookie

Our website uses cookies and similar technologies. Non-essential statistics, marketing and external-media services are generally activated only after your prior consent. The legal bases are Section 25(1) TDDDG and, where personal data are processed, Article 6(1)(a) GDPR. Strictly necessary storage and access operations are carried out under Section 25(2) no. 2 TDDDG.

We use Borlabs Cookie to manage your choices. Provider: Borlabs GmbH, Hamburger Str. 11, 22083 Hamburg, Germany. The consent dialog allows you to manage, in particular, the categories Necessary, Statistics, Marketing and External Media.

Depending on the configuration, Borlabs Cookie stores in particular the consents you have granted or rejected, a randomly generated UID, cookie version, validity period, domain and path. This information is used to implement your choice and to demonstrate consent. According to the provider, visitor data are not transferred to Borlabs but are stored on the website operator’s server.

The technically necessary storage of the consent choice is based on Section 25(2) no. 2 TDDDG. Where the documentation relates to an identifiable person, it is processed to comply with our accountability and evidentiary obligations under Article 6(1)(c) GDPR in conjunction with Articles 5(2) and 7(1) GDPR.

You can change or withdraw your choice at any time for the future via the cookie or privacy settings available on the website.

4. Contacting us

If you contact us via the contact form, by email or by telephone, we process the contact details and content you provide in order to handle your request and any follow-up questions.

For contractual or pre-contractual enquiries, the legal basis is Article 6(1)(b) GDPR. Other business or general enquiries are processed under Article 6(1)(f) GDPR; our legitimate interest is the proper handling of incoming enquiries. Additional consent is generally not required for an ordinary contact request.

The data are deleted once the request has been conclusively dealt with, unless statutory retention obligations or other legal grounds require continued storage.

5. Google services

We use services of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, in each case only after the relevant consent where required. Processing by Google LLC or other Google group companies, particularly in the United States, cannot be ruled out. Section 25(1) TDDDG applies to consent-requiring storage or access operations; further processing of personal data is based on Article 6(1)(a) GDPR.

5.1 Google Analytics 4

Google Analytics 4 is used for statistical analysis of the website. Data processed may include page views, source of visits, duration of use, interactions, device and browser information, technical identifiers and approximate location information derived from the IP address. Google Analytics is activated only after your consent via Borlabs Cookie. Where enabled by us and covered by your consent, aggregated demographic characteristics and interests may also be analysed.

User and event data are retained in accordance with our Google Analytics configuration for the period required for analysis and are then deleted or automatically removed by Google.

5.2 Google Ads, conversion tracking and remarketing

Google Ads allows us to measure the effectiveness of advertising and, after your consent, address interest-based audiences. Data processed may include information about ad clicks, pages visited, conversion events, device and browser data, technical identifiers and advertising or cookie IDs; usage or interest profiles may also be created.

5.3 YouTube and Google Maps

Our website may embed YouTube videos and Google Maps. Data processed may include the IP address, browser and device information, page visited, time, interactions and cookie or device identifiers. Location data are processed only if you enable them.

YouTube and Google Maps content is loaded only after your consent via Borlabs Cookie or the relevant content blocker. Before consent, only a placeholder is generally displayed.

5.4 Google Fonts

Where Google Fonts are loaded externally from Google servers, your IP address and browser or device information may in particular be transferred to Google. Externally embedded Google Fonts are loaded only after your consent. If the fonts are hosted locally on our server, no connection to Google is established when the font is loaded.

6. Newsletter with rapidmail

If you subscribe to our newsletter, we process your email address and any other voluntary information. Registration generally uses the double opt-in procedure. For evidentiary purposes, the email address, time of registration and confirmation, IP address and technical verification information may be stored.

We use rapidmail for dispatch and evaluation. Provider: Positive Group Deutschland GmbH, Ingeborg-Krummer-Schroth-Straße 18a, 79106 Freiburg im Breisgau, Germany. Delivery information and, where covered by your consent, newsletter openings and clicked links may be evaluated.

The legal basis for newsletter dispatch and personalised performance measurement is Article 6(1)(a) GDPR; where information on your terminal device is accessed, Section 25(1) TDDDG also applies. Evidence of consent is processed under Article 6(1)(c) GDPR in conjunction with Articles 5(2) and 7(1) GDPR.

You may withdraw your consent at any time using the unsubscribe link in the newsletter. The data will then be removed from the active distribution list unless statutory retention or evidentiary duties require otherwise; your email address may be stored on a suppression list to prevent further mailings. Where rapidmail processes data on our behalf, an agreement under Article 28 GDPR is in place. According to the provider, newsletter data are processed on servers in Germany.

7. Vimeo

Our website may embed videos from Vimeo.com, Inc., 330 West 34th Street, 10th Floor, New York, NY 10001, USA. When a video is loaded, data such as the IP address, browser and device information, page visited, time, video interactions and cookie or device identifiers may be processed. If you are logged in to Vimeo, use may be associated with your account.

Vimeo content is loaded only after your consent via Borlabs Cookie or a content blocker. The legal bases are Section 25(1) TDDDG and Article 6(1)(a) GDPR. Data may be transferred to the United States.

8. Transfers to third countries

Google and Vimeo services may involve processing outside the EU or the European Economic Area, particularly in the United States. Transfers to third countries take place only in accordance with Articles 44 et seq. GDPR.

Where a transfer to Google LLC or Vimeo.com, Inc. is covered by a valid certification under the EU-U.S. Data Privacy Framework, it is based on the European Commission adequacy decision pursuant to Article 45 GDPR. Where required, European Commission-approved Standard Contractual Clauses under Article 46(2)(c) GDPR or other appropriate safeguards may additionally be used.

9. Recipients and retention

Where necessary for the respective purpose, recipients of personal data may include hosting and IT service providers, email and newsletter providers, analytics and marketing providers, external-media providers, professional advisers and public authorities. Processors are engaged in accordance with Article 28 GDPR.

Unless a specific period is stated in this Privacy Policy, we retain personal data only for as long as necessary for the respective purpose. They are then deleted unless statutory retention, evidentiary or other legal obligations require otherwise.

10. Your rights, withdrawal and objection

Subject to the statutory requirements, you have in particular the following rights:

Right to object under Article 21 GDPR: Where we process data on the basis of Article 6(1)(e) or (f) GDPR, you may object on grounds relating to your particular situation. You may object to processing for direct marketing purposes at any time without giving reasons.

11. Right to lodge a complaint

Under Article 77 GDPR, you have the right to lodge a complaint with a data protection supervisory authority. The authority particularly competent for us is:

The State Commissioner for Data Protection of Lower Saxony (Der Landesbeauftragte für den Datenschutz Niedersachsen)
Prinzenstraße 5
30159 Hannover
Germany
Phone: 0511 120-4500
Email: poststelle@lfd.niedersachsen.de

Your right to contact another competent supervisory authority remains unaffected.

12. Automated decisions, provision of data and updates

We do not make decisions based solely on automated processing within the meaning of Article 22 GDPR that produce legal effects concerning you or similarly significantly affect you. However, after your consent, usage, interest or audience profiles may be created in connection with Google Analytics, Google Ads and remarketing for analytics and advertising purposes.

Providing personal data merely to visit our website is generally neither legally nor contractually required; certain technical data are, however, necessary for secure delivery of the website. If you contact us, we need the information required to handle your request. Newsletter registration is voluntary; a valid email address is required for delivery.

We update this Privacy Policy if our website, services used, technical configurations or legal requirements change. The version currently published on the website applies.

Last updated: August 2026