Back
//
Privacy notice

Privacy

Thank you for visiting our website. Protecting your personal data is important to us. Below, we transparently inform you about the nature, scope and purpose of processing personal data on this site — in line with the EU General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG) and the German Telecommunications Digital Services Data Protection Act (TDDDG).

Contents

  1. 1. Controller
  2. 2. Scope of protection
  3. 3. Security of your data
  4. 4. Site access (server logs)
  5. 5. Contact and enquiry form
  6. 6. Cookies and analytics
  7. 7. External links and third parties
  8. 8. Email communication
  9. 9. Purpose limitation and disclosure
  10. 10. Retention
  11. 11. Your rights
  12. 12. Hosting, database and language
  13. 13. Resend email delivery and newsletter
  14. 14. AI chat assistant
  15. 15. First-party statistics and optional measurement services
  16. 16. External fonts
  17. 17. Processing outside the EU / EEA
  18. 18. Objection and exercising your rights
  19. 19. Updates and changes

1. Controller

The controller for data processing on this website within the meaning of Art. 4 (7) GDPR is:

SIFAT Road Safety GmbH · Brunsbütteler Damm 448 · 13591 Berlin · Germany

Tel +49 (0)30 52 00 18 112 · info@sifat.de · www.sifat.de

Authorized managing directors: Alois Schwarz, Alexander Orlandea

Commercial register: Berlin Local Court (Charlottenburg) · HRB 107998 · VAT ID: DE254636409

Further details are provided in our legal notice.

2. Scope of protection

This notice covers personal data as defined in Art. 4 (1) GDPR — any information relating to an identified or identifiable natural person, e.g. name, postal address, email address, phone number, and where applicable usage data such as your IP address.

3. Security of your data

All data is transmitted encrypted (TLS/HTTPS). We use technical and organisational measures to protect your data against loss, destruction, manipulation and unauthorised access. Our employees are committed to confidentiality and receive regular data-protection training.

4. Site access (server logs)

When you visit our website, our hosting provider processes technically necessary log data (IP address, date/time, requested resource, referrer, user agent). This data is processed solely to provide, stabilise and secure the service (Art. 6 (1) (f) GDPR — legitimate interest) The retention period depends on the hosting provider’s configuration; we cannot currently confirm a fixed deletion period.

5. Contact and enquiry form

If you contact us via the event enquiry form or by email, we process the details you provide (e.g. name, company, email, phone, location, timeframe, staffing needs, notes) to handle your request and, where appropriate, for follow-up. The legal basis is Art. 6 (1) (b) GDPR (pre-contractual measures/contract performance) or Art. 6 (1) (f) GDPR (legitimate interest in responding).

We delete this data once it is no longer required, unless statutory retention obligations apply (depending on the document type under German commercial and tax law).

6. Cookies and analytics

Consent is required for cookies and comparable technologies subject to consent (Art. 6 (1) (a) GDPR, § 25 (1) TDDDG), except for strictly necessary cookies (§ 25 (2) TDDDG). Our own visitor statistics currently operate independently of this choice, as described below, and require legal review. You can withdraw your consent at any time via the cookie settings; this does not affect the lawfulness of prior processing.

Details on the providers used (including Google Analytics 4, Google Ads, Meta Pixel, LinkedIn Insight Tag), retention periods, transfers to third countries and opt-out options are provided in our cookie policy.

7. External links and third parties

Our website may contain links to external websites operated by third parties. The respective operators are solely responsible for their content and data processing. We do not share personal data with third parties without a legal basis.

8. Email communication

We do not send unsolicited advertising (spam). We use email to reply to your enquiries, confirm orders and send requested information. You may object to further contact at any time by informing us in writing (e.g. by email).

9. Purpose limitation and disclosure

We only process personal data for the purposes described in this notice. We disclose data to third parties only where necessary for contract performance, where you have consented, or where a legal basis exists (e.g. official or court order). Processors are carefully selected and bound by contract in accordance with Art. 28 GDPR.

10. Retention

We retain personal data only as long as necessary for the stated purposes or as required by statutory retention rules (in particular under German commercial and tax law). Specific deletion periods for visitor events and at hosting, email and AI providers have not yet been conclusively verified. The browser lifetime of the statistics identifier is not a deletion period for stored events.

11. Your rights

You have the right to information (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection to processing based on legitimate interests (Art. 21). You may withdraw consent at any time with effect for the future (Art. 7 (3) GDPR).

To exercise your rights, an informal message to info@sifat.de is sufficient. You also have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR); for us this is the Berlin Commissioner for Data Protection and Freedom of Information.

12. Hosting, database and language

The website and its database are provided through Lovable / Lovable Cloud. Connection and request data are processed to operate the service, which uses Cloudflare infrastructure for delivery. The legal basis is Art. 6 (1) (f) GDPR (secure and reliable provision).

To choose a language, we read the country code supplied by the hosting infrastructure and your browser language preference. We do not separately determine your precise location. Your language choice is stored locally in your browser.

13. Resend email delivery and newsletter

Event enquiries and newsletter registrations are emailed to our team through Lovable’s Resend connection. This processes the form details, your email address and the originating website address. Event enquiries also include the company website and event details.

Newsletter registration includes company, name, email, city, country and language. Your registration is forwarded to our marketing team for processing. Requested promotional messages are based on your consent (Art. 6 (1) (a) GDPR). You may withdraw it at any time by emailing sales@sifat.de; we will then stop using your details for newsletter advertising. Statutory evidence and retention obligations remain unaffected.

14. AI chat assistant

When you use the chat and send a message, your message and conversation history are forwarded through Lovable to Google Gemini to generate a reply. Technical connection data is also processed. The legal basis is Art. 6 (1) (f) GDPR (responding to voluntary enquiries), or Art. 6 (1) (b) GDPR for specific contractual enquiries.

Use is optional. Please do not enter sensitive data or personal details of third parties. You may instead contact us through the enquiry form or sales@sifat.de. Replies may be inaccurate and are not binding offers. No automated decision with legal or similarly significant effects within the meaning of Art. 22 GDPR is made.

15. First-party statistics and optional measurement services

Our own visitor statistics record page views, the start and submission of event enquiries and newsletter registrations. Records include a random session identifier, timestamp, page path, language, selected format, referring page and, where supplied, search terms and campaign parameters. The identifier is held in sessionStorage for the browser session; events are stored in Lovable Cloud. Analysis helps improve the website and measure campaigns. This data is pseudonymous, not automatically anonymous.

Google Analytics 4 (statistics) and Google Tag Manager, Meta Pixel and LinkedIn Insight Tag (marketing) are also implemented as optional integrations. These third-party scripts load only when the service is configured and you have accepted its category. Google Ads tags may be included through a configured Tag Manager. Usage, device and connection data may be sent to the respective providers. Consent-based measurement relies on Art. 6 (1) (a) GDPR and § 25 (1) TDDDG.

16. External fonts

Your browser loads Inter and Space Grotesk font files from Google Fonts (Google Ireland Limited). Your IP address and technical request data are sent to Google, even without consent to statistics or marketing cookies. The purpose is consistent website presentation; the legal basis is Art. 6 (1) (f) GDPR.

17. Processing outside the EU / EEA

The technical, email, AI and measurement services described may process data outside the EU or EEA, particularly in the USA. Transfers are subject to Art. 44 et seq. GDPR. Depending on the provider and processing, an adequacy decision under Art. 45 GDPR or appropriate safeguards, notably EU standard contractual clauses under Art. 46 GDPR, may apply. Naming a provider does not guarantee a particular certification. You may request information about the recipients and safeguards applicable to your data from info@sifat.de.

18. Objection and exercising your rights

For processing under Art. 6 (1) (f) GDPR, you may object on grounds relating to your particular situation. You may object to direct marketing at any time without giving reasons, including associated profiling. We will then stop processing the relevant data for advertising.

Requests to exercise your rights are generally free of charge. We normally respond within one month and will explain any legally permitted extension. Where necessary, we may request information to verify your identity.

19. Updates and changes

We reserve the right to adapt this privacy notice so that it always meets current legal requirements or reflects changes to our services. The updated version will apply from your next visit.

As of: October 19, 2026