Privacy Policy

This is a translation. In case of discrepancies, the German version shall prevail. Deutsche Fassung

1. Controller

The controller responsible for data processing on this website (uhren-marchel.de) within the meaning of the General Data Protection Regulation (GDPR) is:

Uhren Marchel e.K.
Owner: Janina Marchel
Berner Straße 107
60437 Frankfurt am Main
Germany

Phone: +49 69 870006395
E-mail: impressum [at] uhren-marchel.de
This e-mail address is also the contact for all data protection requests.

No data protection officer has been appointed, as there is no legal obligation to do so (Section 38 BDSG).

2. General information on data processing

uhren-marchel.de is the informational website of Uhren Marchel e.K. It is open to all visitors who would like to find out about our company. Nothing can be purchased via this website, and no prices are shown; there is no customer account and no newsletter. You can send us enquiries via our contact form (see Section 8). We process personal data only insofar as this is necessary for operating the website and handling your enquiries.

3. Hosting

This website is hosted by the following provider:

ALL-INKL.COM – Neue Medien Münnich
Owner: René Münnich
Hauptstraße 68
02742 Friedersdorf
Germany

The hosting provider's servers are located in Germany. The hosting provider processes the data generated when the website is accessed (see Section 4) on our behalf. We have concluded a data processing agreement with it pursuant to Art. 28 GDPR. The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure, fast and reliable provision of our website.

4. Provision of the website and server log files

When you access our website, your browser automatically transmits information to our server. This information is stored in so-called server log files:

• IP address of the requesting device in shortened form (for IPv4 addresses, the last two segments are set to 0, e.g. 11.22.33.44 → 11.22.0.0)
• date and time of access
• page or file accessed and amount of data transferred
• notification of whether the access was successful (HTTP status code)
• previously visited page (referrer URL), if transmitted
• browser type and version as well as operating system (user agent)

The processing is technically necessary to display the website to you and to ensure stability and security (e.g. defence against attacks and error analysis). The legal basis is Art. 6(1)(f) GDPR; our legitimate interest follows from these purposes. This data is not merged with other data sources or analysed for marketing purposes.

Full IP addresses are not stored. The log files are automatically deleted after 30 days. Data whose further retention is necessary for evidentiary purposes (e.g. in the event of a specific attack) is exempt from deletion until the incident has been finally resolved.

5. Fonts (hosted locally)

The fonts used on this website are stored locally on our own server and loaded from there. No connection to servers of Google or other third-party providers is established in this process; to that extent, no data is transmitted to third parties.

6. Cookies and storage of information on your terminal device

This website does not set any cookies and does not use any comparable storage technologies (e.g. local storage).

As no information is stored on or read from your terminal device, no consent under Section 25 TDDDG is required.

We do not use any web analytics services, social media plugins or advertising or tracking tools.

7. SSL/TLS encryption

For security reasons and to protect the transmission of content, this website uses SSL/TLS encryption. You can recognise an encrypted connection by "https://" in the address bar and by the padlock symbol in your browser bar. When encryption is activated, the data you transmit to us cannot be read by third parties.

8. Contact form, e-mail and telephone

On our website you can write to us using a contact form. In doing so, we process your name, your e-mail address and your message; mandatory fields are marked as such. The information is used solely to handle and answer your enquiry.

The form is processed by our own PHP script on the server of our hosting provider ALL-INKL.COM in Germany. The script sends your information as an e-mail, using the PHP function mail() via ALL-INKL.COM, to an internal company mailbox that is also hosted at ALL-INKL.COM. The sender address of this e-mail is noreply [at] uhren-marchel.de; the e-mail address you provide is entered as the reply address (Reply-To) so that we can reply to you directly. The form data is not stored in a database, and the content of your message is not logged. No external services are integrated, no cookies are set and no data is stored in your browser's local storage.

To protect against spam and abuse, we use the following measures:

• a check field that is invisible to humans ("honeypot") and is generally only filled in by automated programs;
• a simple arithmetic question that is generated and checked on our own server (no third-party captcha service);
• a minimum completion time of about 4 seconds: for this purpose, the form contains a signed timestamp that is checked on our server when the form is submitted; no cookie is used for this;
• a limit of a few messages per IP address per hour: for this purpose, your IP address itself is not stored, only a SHA-256 hash value of it formed with a secret random value ("salt"), in a protected directory on the server that is not publicly accessible. This hash value is deleted after one hour at the latest.

Beyond this, no personal data is stored for these measures. The legal basis for these protective measures is Art. 6(1)(f) GDPR; our legitimate interest lies in protecting our website and our mailbox against spam and abuse.

The following information applies to enquiries via the contact form, by e-mail or by telephone.

If you contact us by e-mail or telephone, we process the information you provide (e.g. name, e-mail address, telephone number, content of your enquiry) as well as the date and time of contact in order to handle your enquiry.

If your enquiry relates to a contract or to the implementation of pre-contractual measures, the legal basis is Art. 6(1)(b) GDPR. In all other cases, the processing is based on Art. 6(1)(f) GDPR; our legitimate interest lies in the effective handling of enquiries addressed to us.

Your data will be deleted as soon as the purpose of storage no longer applies, i.e. usually after your enquiry has been conclusively dealt with, unless statutory retention obligations (in particular under Section 257 of the German Commercial Code (HGB) and Section 147 of the German Fiscal Code (AO): up to six years for commercial and business letters and up to ten years for accounting-relevant documents) prevent this.

E-mails to us are processed in Germany via the servers of our e-mail provider ALL-INKL.COM – Neue Medien Münnich, Owner: René Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany. ALL-INKL.COM acts as our processor; a data processing agreement pursuant to Art. 28 GDPR is in place.

9. Use of the AI telephone assistant "Victoria Business"

Calls to our telephone number +49 69 870006395 are answered by our AI-based virtual telephone assistant "Victoria Business". At the beginning of each call, we inform you that you are speaking with a virtual telephone assistant, that your information is processed automatically and that you can find the privacy information on our website. The assistant speaks German and, on request, English. It records your name, where applicable your company, and your concern, answers general questions and can transfer your call to our team. A language model is used for this, which processes your spoken statements in real time and outputs the answers as speech.

Transfer to our team: Monday to Friday from 10 a.m. to 3 p.m. (except on public holidays in Hesse), the assistant can transfer your call to an internal extension of our cloud telephone system at easybell. The staff member first hears an automatically generated voice announcement (text-to-speech) stating who is calling and why, and then decides whether to accept the call. If the call is not accepted, you return to the assistant, which notes your concern. The conversation with our team is not recorded.

The following data is processed:

• your telephone number (if transmitted) and the number called
• date, time and duration of the call
• your statements in the conversation with the assistant
• your information, in particular name and concern, and where applicable company, callback number, e-mail address, customer or dealer number and product
• status of the call (e.g. "transferred")

Your call is not recorded as an audio recording, and no transcripts are stored. Every call is logged on our server (telephone number, short summary, concern and status; call log). Only if the call was not taken by our team is a summary additionally sent by e-mail to our mailbox. Please do not provide the assistant with any payment data (e.g. credit card or bank account details) or health data.

If your enquiry concerns a contract or pre-contractual measures, the legal basis is Art. 6(1)(b) GDPR; otherwise Art. 6(1)(f) GDPR. Our legitimate interest lies in reliable telephone availability, including outside our business hours, in the efficient recording and handling of your enquiry and in putting you through to the responsible contact person.

Where the processing is based on Art. 6(1)(f) GDPR, you have the right to object at any time on grounds relating to your particular situation (Art. 21 GDPR). You may object to the processing at any time, including directly during the call, by saying "Widerspruch" (German for "objection"). Only the time and cost of the call will then be stored, without call content, name or telephone number, and no e-mail will be sent. You may also end the call at any time and send us your request by e-mail to impressum [at] uhren-marchel.de instead.

For speech processing, we use SpaceX Super Intelligence LLC (formerly X.AI LLC), 1450 Page Mill Road, Palo Alto, CA 94304, USA ("xAI"), as a processor. For this purpose, the call content is processed on xAI servers in the USA; xAI uses further sub-processors for this, most of which are also based in the USA. The transfer is based on standard contractual clauses of the EU Commission (Art. 46(2)(c) GDPR), which form part of the data processing agreement with xAI, as well as on supplementary safeguards. You can request a copy of the standard contractual clauses from us. The "Zero Data Retention" option is activated for our account; call content is therefore not stored by xAI after processing and is not used to train AI models.

The call log is stored on a server of Hetzner Online GmbH, Industriestraße 25, 91710 Gunzenhausen, in Germany; Hetzner acts as our processor. The summary is transmitted to an e-mail mailbox at our e-mail provider ALL-INKL.COM – Neue Medien Münnich (see section 8) in Germany, which also acts as a processor. The telephone connection is established via our telecommunications provider easybell GmbH, Brückenstraße 5a, 10179 Berlin; easybell processes the connection data under its own responsibility as a telecommunications provider. Transfers to our extensions are also made via easybell's cloud telephone system.

No automated decision-making, including profiling, within the meaning of Art. 22 GDPR takes place; our team decides on your request (see Section 11).

The call log and the e-mail summary are automatically deleted 90 days after the call. For technical reasons, the data may be contained in the server's daily backup copies for up to 7 additional days. They are then overwritten as the backups are rotated. If your request is incorporated into an existing case, the retention period is governed by the statutory retention periods applicable to that case.

10. Transfers to third countries

Personal data is transferred to countries outside the European Union or the European Economic Area only in connection with the AI telephone assistant (Section 9), to xAI in the USA, on the basis of standard contractual clauses (Art. 46(2)(c) GDPR). Otherwise, your data is processed exclusively in the EU or the EEA; the servers of our website hosting provider and e-mail provider ALL-INKL.COM are located in Germany.

11. No automated decision-making

No automated decision-making, including profiling, within the meaning of Art. 22 GDPR takes place. The AI telephone assistant "Victoria Business" also merely records and summarises requests; it does not make any decisions that produce legal effects concerning you or similarly significantly affect you.

12. Your rights

For data protection requests and to exercise your rights, please contact us by e-mail at impressum [at] uhren-marchel.de.

With regard to the personal data concerning you, you have the following rights vis-à-vis us:

• Access (Art. 15 GDPR): You can request information as to whether and which personal data we process about you.
• Rectification (Art. 16 GDPR): You can request the rectification of inaccurate data or the completion of incomplete data.
• Erasure (Art. 17 GDPR): You can request the erasure of your data, provided that no statutory retention obligations or other reasons prevent this.
• Restriction of processing (Art. 18 GDPR): You can request the restriction of processing under the statutory conditions.
• Data portability (Art. 20 GDPR): You can request that we transmit to you, in a structured, commonly used and machine-readable format, data that you have provided to us and that we process by automated means on the basis of consent or a contract.
• Withdrawal of consent (Art. 7(3) GDPR): Where processing is based on your consent, you can withdraw it at any time with effect for the future. The lawfulness of the processing carried out until the withdrawal remains unaffected.
• Objection (Art. 21 GDPR): see the following notice.

To exercise your rights, an informal message to the contact details stated in Section 1 is sufficient.

13. Right to lodge a complaint with a supervisory authority

Without prejudice to any other remedies, you have the right under Art. 77 GDPR to lodge a complaint with a data protection supervisory authority, in particular in the Member State of your habitual residence, your place of work or the place of the alleged infringement. The supervisory authority responsible for us is:

Der Hessische Beauftragte für Datenschutz und Informationsfreiheit (Hessian Commissioner for Data Protection and Freedom of Information)
Wilhelmstraße 7, 65185 Wiesbaden
Postal address: Postfach 3163, 65021 Wiesbaden
Phone: +49 611 1408-0
E-mail: poststelle [at] datenschutz.hessen.de
Website: https://datenschutz.hessen.de

14. Retention period

Unless a more specific retention period is stated in this privacy policy, we store your personal data only for as long as is necessary for the respective purpose and then delete it, unless statutory retention obligations apply. In that case, the processing is restricted until the retention period expires, and the data is deleted thereafter.

15. Obligation to provide data

You are under no statutory or contractual obligation to provide us with personal data. However, the website cannot be displayed without the technical data mentioned in Section 4, and we cannot handle your enquiry without information about it.

16. Current version and amendments to this privacy policy

We will amend this privacy policy if the website, our data processing or the legal situation changes. The version published here at any given time applies.

Last updated: November 2026