Privacy policy

1. Controller

The controller for the processing of personal data on this campaign site is Seifert electronic GmbH, Egerstraße 3, 58256 Ennepetal, Germany, phone +49 (0) 2333 79 060, email [datenschutz@seifert-electronic.de].

[Data protection officer: name and contact, if appointed.]

2. What this is about

This site belongs to the Christmas campaign “The Coolest Advent Calendar in the Industry” from 1 to 24 December 2026. We process only the data needed for participation, winner notification and answering information requests. No advertising cookies are set and no external analytics or advertising services are embedded.

3. Which data we process and why

• Participation with a calendar ticket number: your ticket number and the topics chosen per door with a timestamp. Purpose: running the prize draw and evaluating which technologies interest our customers. Legal basis: Art. 6 (1) (b) GDPR (participation) and Art. 6 (1) (f) GDPR (legitimate interest in evaluating the campaign).
• Registration without a calendar: email address, company, optional phone number, language, timestamp and the assigned ticket number. Purpose: participation, confirmation email with your ticket number, winner notification. Legal basis: Art. 6 (1) (b) GDPR.
• Information request (“Yes, send me info”): email address, chosen topic, door and ticket number. Purpose: a personal answer from our sales team. Legal basis: Art. 6 (1) (a) GDPR (consent, revocable at any time) and (b) GDPR (pre-contractual measure).
• Claiming a prize: the “Claim your prize” button opens your own email client with a prepared message to our sales team; only what you send yourself is transmitted.
• Technical data: when the site is accessed, our hosting provider processes IP address, time, page and browser type in server logs (Art. 6 (1) (f) GDPR, secure operation). To fend off automated requests, the IP address is additionally counted for a few minutes in the campaign site’s memory.

4. Storage in your browser

The campaign site remembers your ticket number and language in your browser’s local storage so you do not have to enter the number every day. This data does not leave your device and can be deleted at any time via your browser settings. Fonts and images are served from our own server; no connection to font providers is made.

5. Recipients and processors

We use the following service providers, which process data on our behalf and according to our instructions:

• Brooqy [address]: concept, technical operation and support of the campaign site (data processing agreement).
• Vercel Inc., USA: hosting of the campaign site; server functions run in Frankfurt am Main. Transfers to the USA are safeguarded by the EU-US Data Privacy Framework and standard contractual clauses. [Please confirm.]
• Supabase Inc.: database for participations, registrations and requests, operated in Frankfurt am Main (EU).
• Microsoft 365: sending of confirmation and notification emails from a Seifert mailbox. [Please confirm.]
• Google Workspace: spreadsheet with registrations and requests for handling by our sales team, in a Seifert account. [Please confirm.]
• n8n: automation of the confirmation emails and the spreadsheet. [Add operator and location.]

6. Retention

We keep participation and registration data until the campaign is completed and prizes have been handed over, at the latest until 31 January 2027, after which it is deleted. [Please confirm.] Our sales team continues to handle information requests for as long as a business relationship is being initiated or until you object. Server logs are deleted after 30 days at the latest.

7. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection to processing based on legitimate interests (Art. 21). You may withdraw consent at any time with effect for the future. Please contact the address given above.

You also have the right to lodge a complaint with a data protection supervisory authority, for example the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen.

8. Obligation to provide data, automated decisions

Providing your data is voluntary. However, registration without a calendar is not possible without an email address and company. No automated decision-making within the meaning of Art. 22 GDPR takes place. The German version of this policy is binding.