1. Responsible

The responsible party within the meaning of the General Data Protection Regulation (GDPR) and other national data protection laws is:

Kronfeld Engineering

Owner: Karl Kronfeld

Main St. 9

16259 Beiersdorf

Germany

Email: info@anto.de

Phone: +49 176 55100884

2. General information on data processing

We process personal data of our users only to the extent necessary to provide a functional website as well as our content, products, and services. Processing is generally only carried out with the user's consent or when processing is permitted by legal regulations (in particular, Art. 6 para. 1 GDPR).

3. Hosting and Website System (Odoo)

Our website and the webshop system are operated via Odoo. Data processing primarily takes place on Odoo servers within the European Union. To the extent that data is transmitted to third countries (e.g., USA) as part of maintenance or support, this is based on standard contractual clauses of the EU Commission as well as the EU-U.S. Data Privacy Framework (DPF). A contract for data processing in accordance with Art. 28 GDPR exists with Odoo.

4. Access data (server log files)

When accessing our website, information is automatically collected by the web server and stored in log files:

• IP address of the requesting computer

• Date and time of access

• Name and URL of the retrieved file

• Browser type and version as well as operating system

• Referrer URL (the previously visited page)

Legal basis: Art. 6 para. 1 lit. f GDPR (legitimate interest in the technical stability and security of the website).

5. Cookies & Tracking

Unsere Website verwendet Cookies und ähnliche Technologien. Technisch notwendige Cookies werden zur Bereitstellung des Shopsystems eingesetzt. Analyse- und Marketing-Cookies werden erst nach Ihrer ausdrücklichen Einwilligung über unser Cookie-Banner gesetzt. Detaillierte Informationen, Speicherdauern und Widerrufsmöglichkeiten finden Sie in unserer separaten Cookie-Richtlinie.

6. B2C shop, customer account & guest orders

For order processing in the B2C sector, we process the following data:

• Last name, first name

• Billing and shipping address

• E-Mail-Adress

• Phone number (optional)

• Payment data

Purpose: Contract processing, delivery of goods, customer service.

Legal basis: Art. 6 para. 1 lit. a GDPR

7. B2B shop & business customer inquiries

For merchants, traders, and B2B customers, we process data for the establishment and execution of B2B trade relationships as well as through the B2B inquiry form:

• Company name and legal form

• Name of the contact person / representative

• Business contact details (email, phone)

• Company's shipping and billing address

• Value-added tax identification number (VAT ID) or business proof

• Order data and B2B conditions

Purpose: Verification of business status (§ 14 BGB), creation of B2B offers, activation of wholesale prices, processing of tax-free intra-community deliveries or exports.

Legal basis: Art. 6 para. 1 lit. b GDPR (contract/pre-contract) as well as Art. 6 para. 1 lit. f GDPR (legitimate interest in the verification of business customers).

8. Data transmission during shipping & customs (EU & non-EU)

To process orders, we transmit your delivery address data to transport and logistics companies commissioned by us (e.g., DHL, DPD, UPS).

Shipping to non-EU countries (e.g., Switzerland, United Kingdom, Norway):

For export deliveries to countries outside the European Economic Area (EEA), we transmit the data required for customs declaration (name, company name, address, goods value, HS customs code numbers) to the responsible customs authorities and shipping service providers.

Legal basis: Art. 6 para. 1 lit. b GDPR (contract fulfillment) as well as Art. 6 para. 1 lit. c GDPR (fulfillment of customs and tax obligations).

8. Payment processing

• PayPal: When paying via PayPal, your payment data is transmitted to PayPal (Europe) S.à r.l. et Cie, S.C.A., Luxembourg (Legal basis: Art. 6 para. 1 lit. b GDPR).

• Prepayment / Bank transfer: When paying by transfer, we process the payment data transmitted by your bank to allocate the incoming payment.

• Credit card / Other service providers: As far as offered at checkout, payment data is processed directly through certified payment service providers.

10. B2B and contact forms

For inquiries via our contact forms, we process your information including the provided contact details to handle the inquiry and in case of follow-up questions.

Legal basis: Art. 6 para. 1 lit. b GDPR (pre-contractual measures) or Art. 6 para. 1 lit. f GDPR (legitimate interest in responding to inquiries).

11. Newsletter & Success Measurement (Odoo)

The registration for our newsletter takes place in the so-called double opt-in procedure. After registration, you will receive an email asking you to confirm your registration. To document the consent process, we store your email address during registration [if requested: as well as optionally your name], the registration and confirmation time, and your IP address.

The sending of the newsletter and the statistical evaluation (recording of open and click rates to optimize our content) is done via the integrated email system of Odoo.

Legal basis: Art. 6 para. 1 lit. a GDPR (consent) as well as Art. 6 para. 1 lit. f GDPR (legitimate interest in logging). You can unsubscribe from the newsletter and the consent to success measurement at any time via the unsubscribe link in the newsletter or by email to info@anto.de unsubscribe.

12. Analysis & Marketing Tools (e.g., Google Analytics)

If you have given your consent via our cookie banner, we use on our website Google Analytics 4, a web analytics service of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). Google Analytics uses cookies that enable an analysis of your use of the website. The IP address transmitted by your browser in the context of Google Analytics is anonymized/shortened by default. On behalf of the operator of this website, Google will use this information to evaluate your use of the website and compile surveys/reports on website activities. The data transfer to the parent company Google LLC in the USA is based on the provider's DPF certification (EU-U.S. Data Privacy Framework) as well as the EU standard contractual clauses. 

Legal basis: Art. 6 para. 1 lit. a GDPR in conjunction with § 25 para. 1 TDDDG. You can revoke your consent at any time with effect for the future via the cookie settings.

13. Social Media & Third-Party Integrations

On our website, we link to external profiles on social networks (e.g., Instagram, Facebook) and may embed external media such as YouTube videos or maps. Loading external content only occurs after your interaction or consent.

14. Storage Duration & Tax Retention Periods

We only store personal data as long as it is necessary to fulfill the respective purpose. Due to commercial and tax law requirements (e.g., HGB, AO), we are obliged to retain invoice and contract data from B2C and B2B purchases for up to 10 years.

15. Your Rights as a Data Subject

You have the following rights regarding your data under the GDPR:

• Right to access (Art. 15 GDPR)

• Right to rectification (Art. 16 GDPR)

• Right to deletion (Art. 17 GDPR)

• Restriction of processing (Art. 18 DSGVO)

• Right to data portability (Art. 20 GDPR)

• Right to object (Art. 21 GDPR): You can object to the processing of your data, which is based on Art. 6 para. 1 lit. f GDPR, at any time.

16. Right to lodge a complaint with the supervisory authority

You have the right to complain to a data protection supervisory authority about the processing of your personal data by us. The supervisory authority responsible for us is the State Commissioner for Data Protection and for the Right to Access Files Brandenburg (LDA Brandenburg), Dag-Hammarskjöld-Weg 4, 14469 Potsdam.

17. Currency and status

This privacy policy is currently valid and has the status of October 2026.