Privacy Policy

Last updated: October 2026

1. Who is responsible

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

CETRAC GmbH
Diezmannstraße 13
04207 Leipzig, Germany
Managing Director: Samuel Deutschenbaur
Phone: +49 341 3084890-0
E-mail: info@cetrac.de

scaffolding-formwork.com is a website of CETRAC GmbH. If you have any questions about data protection, please write to the address above.

2. Overview

This website can be used without creating an account. By default, we only use what is technically necessary to run the site. Measuring and advertising services are loaded only if you agree to them in the consent banner. You can change your choice at any time via the link "Cookie settings" at the bottom of every page.

We process personal data on the following legal bases: your consent (Art. 6(1)(a) GDPR), the performance of a contract or pre-contractual steps such as answering your enquiry (Art. 6(1)(b) GDPR), legal obligations (Art. 6(1)(c) GDPR) and our legitimate interest in a secure and functioning website (Art. 6(1)(f) GDPR). Storing information on your device or reading it from your device is based on § 25 of the German Telecommunications Digital Services Data Protection Act (TDDDG): with your consent (§ 25(1)) or, where it is strictly necessary for the service you requested, without consent (§ 25(2)).

3. Hosting

This website runs on our own server in a data centre of Hetzner Online GmbH, Industriestraße 25, 91710 Gunzenhausen, Germany. The server is located in the European Union. We have concluded a data processing agreement with Hetzner (Art. 28 GDPR). The legal basis is our legitimate interest in a secure and reliable provision of the website (Art. 6(1)(f) GDPR).

4. Server log files

Each time you access a page, the server automatically records technical information: the requested address, date and time, the IP address, the browser and operating system you use, the referring page and the status of the request. We need this data to deliver the website, to detect faults and to defend against attacks. It is not combined with other data and is deleted after a short period, unless an incident has to be investigated. Legal basis: Art. 6(1)(f) GDPR.

5. Enquiry and contact form

If you send us an enquiry via a form on this website, we receive the details you enter (for example name, company, e-mail address, phone number, country, the items or quantities you are interested in and your message). The form sends this information directly by e-mail to our sales team. Nothing is stored in a database on this website. A hidden field and a short time check protect the form against automated spam.

We use your details only to answer your enquiry and, if a business relationship follows, to prepare and fulfil the contract (Art. 6(1)(b) GDPR). We keep them as long as necessary for this purpose and delete them afterwards, unless statutory retention periods under commercial or tax law apply (Art. 6(1)(c) GDPR).

The e-mail is sent from our server via the e-mail service Brevo (Sendinblue GmbH, Köpenicker Straße 126, 10179 Berlin, Germany). Our e-mails are processed by Microsoft Ireland Operations Ltd., One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland (Microsoft 365), and filtered for spam and malware by Hornetsecurity GmbH, Am Listholze 78, 30177 Hanover, Germany. Both act on our behalf under data processing agreements.

6. Contact by e-mail or phone

If you contact us by e-mail or phone, we process your details to handle your request (Art. 6(1)(b) GDPR, otherwise Art. 6(1)(f) GDPR). The same storage rules as for the enquiry form apply.

7. Consent banner, cookies and browser storage

When you first visit, a banner asks whether you accept measuring and advertising services. Your choice is saved for one year in the cookie cetrac_marketing (value 1 = all accepted, 0 = necessary only). This cookie is strictly necessary to respect your choice (§ 25(2) TDDDG).

The following are also stored in your browser only and never sent to us: the items you put on your enquiry list (sf_enquiry), your choice of light or dark display (sf_stil) and whether you have closed a notice (for the current session only). You can delete this data at any time in your browser settings.

Withdrawing your consent: click "Cookie settings" at the bottom of any page and choose "Necessary only". The cookies of Google Analytics, Google Ads and Meta are then removed and the services are no longer loaded. Withdrawal does not affect the lawfulness of processing carried out before it.

8. Services we use only with your consent

The following services are loaded only after you click "Accept all". Legal basis: Art. 6(1)(a) GDPR and § 25(1) TDDDG. Some providers process data in the USA. The providers named below are certified under the EU-US Data Privacy Framework, for which the European Commission has issued an adequacy decision; in addition, standard contractual clauses apply.

Google Tag Manager

We use Google Tag Manager to load the services listed below. Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The Tag Manager itself does not create user profiles, but it processes your IP address when it is loaded. We use Google Consent Mode, so Google services only work to the extent you have agreed.

Google Analytics 4

Google Analytics helps us understand how visitors use the website: which pages are viewed, how visitors arrive (for example from a search engine or from an AI assistant), and whether an enquiry is sent. For this purpose, Google stores cookies on your device and processes usage data, device and browser information and a shortened location derived from the IP address. Provider: Google Ireland Limited (see above). Data may be transferred to Google LLC in the USA. Data is stored for a maximum of 14 months. More information: policies.google.com/privacy.

Google Ads, conversion tracking and remarketing

We advertise with Google Ads. Conversion tracking shows us whether a visitor who clicked on one of our ads sent an enquiry afterwards. With remarketing, we can show our ads to people who have already visited our website. For this purpose, Google uses cookies and comparable identifiers. Provider: Google Ireland Limited (see above). More information: policies.google.com/technologies/ads.

Meta Pixel

We use the Meta Pixel to measure the success of our advertising on Facebook and Instagram and to show ads to visitors of our website. Provider: Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland. The pixel transmits information about your visit (for example pages viewed and an enquiry sent) together with your IP address and browser data to Meta. If you are logged in to Facebook or Instagram, Meta can assign the visit to your account. For the collection and transmission of this data, we and Meta are joint controllers (Art. 26 GDPR); the agreement is available at facebook.com/legal/controller_addendum. Meta's further processing is the sole responsibility of Meta: facebook.com/privacy/policy.

9. Videos (YouTube)

Some pages contain a YouTube video. It is not loaded automatically: only when you click the play button is a connection established to YouTube in extended data protection mode (youtube-nocookie.com). YouTube then receives your IP address and information about the page you are on. Provider: Google Ireland Limited (see above). Legal basis: your consent by clicking (Art. 6(1)(a) GDPR, § 25(1) TDDDG).

10. Fonts

The fonts on this website are stored on our own server. No connection to external font services is established.

11. Encryption

This website uses TLS encryption. You can recognise an encrypted connection by "https://" and the lock symbol in the address bar of your browser.

12. Your rights

You have the right to access your personal data (Art. 15 GDPR), to rectification (Art. 16), to erasure (Art. 17), to restriction of processing (Art. 18), to data portability (Art. 20) and to withdraw your consent at any time with effect for the future (Art. 7(3)).

Right to object (Art. 21 GDPR): where we process data on the basis of our legitimate interest, you can object at any time for reasons arising from your particular situation. You can object to processing for direct marketing purposes at any time without giving reasons.

You also have the right to lodge a complaint with a supervisory authority. The authority responsible for us is the Saxon Data Protection and Transparency Commissioner (Sächsische Datenschutz- und Transparenzbeauftragte), Devrientstraße 5, 01067 Dresden, Germany.

To exercise your rights, simply write to info@cetrac.de.

Looking for scaffolding or formwork? Our team advises you free of charge and sends you a quotation including freight to your site.