1. Responsible

The responsible party within the meaning of the General Data Protection Regulation (GDPR) and other national data protection laws is:

Kronfeld Engineering

Owner: Karl Kronfeld

Hauptstr. 9

16259 Beiersdorf

Germany

Email: info@anto.de

Phone: +49 176 55100884

2. General information on data processing

We process personal data of our users only to the extent necessary to provide a functional website as well as our content, products, and services. Processing is generally only carried out with the user's consent or when processing is permitted by legal regulations (in particular, Art. 6 para. 1 GDPR).

3. Hosting and Website System (Odoo)

Our website and the webshop system are operated via Odoo. Data processing primarily takes place on Odoo servers within the European Union. To the extent that data is transmitted to third countries (e.g., USA) as part of maintenance or support, this is based on standard contractual clauses of the EU Commission as well as the EU-U.S. Data Privacy Framework (DPF). A contract for data processing in accordance with Art. 28 GDPR exists with Odoo.

4. Access data (server log files)

When accessing our website, information is automatically collected by the web server and stored in log files:

• IP address of the requesting computer

• Date and time of access

• Name and URL of the retrieved file

• Browser type and version as well as operating system

• Referrer URL (the previously visited page)

Legal basis: Art. 6 para. 1 lit. f GDPR (legitimate interest in the technical stability and security of the website).

5. Cookies & Tracking

Unsere Website verwendet Cookies und ähnliche Technologien. Technisch notwendige Cookies werden zur Bereitstellung des Shopsystems eingesetzt. Analyse- und Marketing-Cookies werden erst nach Ihrer ausdrücklichen Einwilligung über unser Cookie-Banner gesetzt. Detaillierte Informationen, Speicherdauern und Widerrufsmöglichkeiten finden Sie in unserer separaten Cookie-Richtlinie.

6. B2C shop, customer account & guest orders

For order processing in the B2C sector, we process the following data:

• Last name, first name

• Billing and shipping address

• E-Mail-Adress

• Phone number (optional)

• Payment data

Purpose: Contract processing, delivery of goods, customer service.

Legal basis: Art. 6 para. 1 lit. a GDPR

7. B2B shop & business customer inquiries

For merchants, traders, and B2B customers, we process data for the establishment and execution of B2B trade relationships as well as through the B2B inquiry form:

• Company name and legal form

• Name of the contact person / representative

• Business contact details (email, phone)

• Company's shipping and billing address

• Value-added tax identification number (VAT ID) or business proof

• Order data and B2B conditions

Purpose: Verification of business status (§ 14 BGB), creation of B2B offers, activation of wholesale prices, processing of tax-free intra-community deliveries or exports.

Legal basis: Art. 6 para. 1 lit. b GDPR (contract/pre-contract) as well as Art. 6 para. 1 lit. f GDPR (legitimate interest in the verification of business customers).

8. Data transmission during shipping & customs (EU & non-EU)

To process orders, we transmit your delivery address data to transport and logistics companies commissioned by us (e.g., DHL, DPD, UPS).

Shipping to non-EU countries (e.g., Switzerland, United Kingdom, Norway):

For export deliveries to countries outside the European Economic Area (EEA), we transmit the data required for customs declaration (name, company name, address, goods value, HS customs code numbers) to the responsible customs authorities and shipping service providers.

Legal basis: Art. 6 para. 1 lit. b GDPR (contract fulfillment) as well as Art. 6 para. 1 lit. c GDPR (fulfillment of customs and tax obligations).

8. Payment processing

• PayPal: When paying via PayPal, your payment data is transmitted to PayPal (Europe) S.à r.l. et Cie, S.C.A., Luxembourg (Legal basis: Art. 6 para. 1 lit. b GDPR).

• Prepayment / Bank transfer: When paying by transfer, we process the payment data transmitted by your bank to allocate the incoming payment.

• Credit card / Other service providers: As far as offered at checkout, payment data is processed directly through certified payment service providers.

10. B2B and contact forms

For inquiries via our contact forms, we process your information including the provided contact details to handle the inquiry and in case of follow-up questions.

Legal basis: Art. 6 para. 1 lit. b GDPR (pre-contractual measures) or Art. 6 para. 1 lit. f GDPR (legitimate interest in responding to inquiries).

11. Newsletter

The registration for our newsletter is done via the double opt-in procedure. The dispatch and statistical evaluation are carried out through the integrated email system of Odoo.

Legal basis: Art. 6 para. 1 lit. a GDPR (consent). You can unsubscribe from the newsletter at any time via the unsubscribe link in the newsletter or by email to us.

12. Analysis & Marketing Tools (e.g., Google Analytics)

If you have consented via our cookie banner, we use analysis and tracking services (such as Google Analytics from Google Ireland Limited). The data transfer to the USA is protected by the provider's DPF certification (EU-U.S. Data Privacy Framework).

Legal basis: Art. 6 para. 1 lit. a GDPR in conjunction with § 25 para. 1 TDDG.

13. Social Media & Third-Party Integrations

On our website, we link to external profiles on social networks (e.g., Instagram, Facebook) and may embed external media such as YouTube videos or maps. Loading external content only occurs after your interaction or consent.

14. Storage Duration & Tax Retention Periods

We only store personal data as long as it is necessary to fulfill the respective purpose. Due to commercial and tax law requirements (e.g., HGB, AO), we are obliged to retain invoice and contract data from B2C and B2B purchases for up to 10 years.

15. Your Rights as a Data Subject

You have the following rights regarding your data under the GDPR:

• Right to access (Art. 15 GDPR)

• Right to rectification (Art. 16 GDPR)

• Right to deletion (Art. 17 GDPR)

• Restriction of processing (Art. 18 DSGVO)

• Right to data portability (Art. 20 GDPR)

• Right to object (Art. 21 GDPR): You can object to the processing of your data, which is based on Art. 6 para. 1 lit. f GDPR, at any time.

16. Right to lodge a complaint with the supervisory authority

You have the right to complain to a data protection supervisory authority about the processing of your personal data by us (e.g., the State Commissioner for Data Protection and Freedom of Information Brandenburg).

17. Currency and status

This privacy policy is currently valid and has the status of August 2026.