Privacy policy

You have the right of access to your stored personal data (Art. 15 GDPR), to rectification (Art. 16 GDPR), to erasure (Art. 17 GDPR), to restriction of processing (Art. 18 GDPR) and to data portability (Art. 20 GDPR).

Where processing is based on your consent, you may withdraw it at any time with effect for the future. This does not affect the lawfulness of processing carried out before the withdrawal. For any questions about data protection, you can contact us or our data protection officer.

If you believe that the processing of your data infringes the GDPR, you have the right to lodge a complaint with a supervisory authority. The authority responsible for our company is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (LDI NRW), Postfach 20 04 44, 40102 Düsseldorf, Germany, phone +49 211 38424-0, email poststelle@ldi.nrw.de, www.ldi.nrw.de.

This website is operated on our behalf by our group company Rameckers Anlagen- und Beteiligungs GmbH, Berger Feld 3–5, 41334 Nettetal, Germany, with which we have concluded a data processing agreement pursuant to Art. 28 GDPR. IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany, is engaged as data centre provider (sub-processor). The sending of emails from our contact form (SMTP mail relay) and data backups are also handled via IONOS. Processing takes place exclusively within the European Union or the European Economic Area.

When you access this website, information transmitted by your browser is automatically collected in so-called server log files: browser type and version, operating system, referrer URL, page accessed, time of the server request and IP address. This data is not merged with other data sources. The legal basis is Art. 6 (1) (f) GDPR; our legitimate interest lies in the technically error-free presentation and security of the website. The log files are deleted after 14 days unless they are needed to investigate a specific security incident. Copies in backups are deleted no later than 14 days after the respective backup was created.

If you send us an enquiry via the contact form, we process the information you provide (name, email address, optionally company, message) to handle your enquiry and any follow-up questions. Depending on the topic selected, the enquiry is forwarded by email to our sales team (back office) or to our technical support and stored there. The form data is not stored on the web server itself.

The legal basis is Art. 6 (1) (b) GDPR where your enquiry relates to a contract or pre-contractual measures, and otherwise Art. 6 (1) (f) GDPR (legitimate interest in responding to enquiries). Providing the information is voluntary; without it, however, we cannot process your enquiry.

The data remains with us until the purpose of storage no longer applies (e.g. once your enquiry has been fully dealt with) or you request its erasure. Statutory retention periods, in particular commercial and tax retention periods of 6 and 10 years (Section 257 HGB, Section 147 AO), remain unaffected.

Login to the VulcaRAMix application takes place via our central identity service. In addition to your user ID, the login token contains your role and your company assignment in order to control access to the features and data of your company account. The identity service is operated on our behalf by Rameckers Anlagen- und Beteiligungs GmbH (see "Hosting"). The legal basis is Art. 6 (1) (b) GDPR where you are yourself the contracting party, and otherwise Art. 6 (1) (f) GDPR (legitimate interest in performing the agreement with your company). We delete your user account when the 90-day read-only period after the end of the agreement expires (see "Use of the VulcaRAMix application") or within 30 days after your company has deactivated your account.

To ensure the security of the login process, the identity service records technical log data (including IP address, time and type of request) and logs login events (e.g. successful and failed logins, logouts, password changes), each with user ID, IP address and time. The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in secure operation and in defending against attacks). This log data is deleted after 90 days.

If your company uses the VulcaRAMix simulation software, we process the data of the users in the company account: name, email address, role and company assignment, the compound, product and machine data entered in the application and the simulation results, contract and billing data (booked plan, term, token consumption, billing address) and support requests. In addition, the application logs every login (user ID, role, company, time), sends notifications about completed simulations and records which version of the agreement was accepted and when. The purpose is to provide the application, billing, support, the security of the company account and proof of use in accordance with the agreement. The legal basis is Art. 6 (1) (b) GDPR where you are yourself the contracting party, and otherwise Art. 6 (1) (f) GDPR (legitimate interest in performing the software usage agreement with your company). We also process billing data to comply with statutory retention obligations (Art. 6 (1) (c) GDPR).

The application is operated on our behalf by Rameckers Anlagen- und Beteiligungs GmbH (see "Hosting"). The following storage periods apply:

If your company pays using a payment method offered by Stripe, payments are processed by Stripe Payments Europe, Limited, 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, D02 H210, Ireland ("Stripe"). Name, email address, billing address, payment and transaction data are transmitted to Stripe for this purpose. We do not receive full card details. Stripe processes the data to handle payments on our behalf and, as an independent controller, for its own purposes such as fraud prevention and compliance with legal obligations. During checkout, Stripe may set technically necessary cookies for this purpose (Section 25 (2) No. 2 TDDDG). A transfer to Stripe, LLC in the USA is possible; Stripe, LLC is certified under the EU-US Data Privacy Framework, so the transfer is covered by an adequacy decision of the European Commission (Art. 45 GDPR). The legal basis is Art. 6 (1) (b) or (f) GDPR (legitimate interest in secure and efficient payment processing). Further information: https://stripe.com/privacy. Existing customers may, by agreement, also pay by invoice; in that case no data is transmitted to Stripe.

On our contact page we embed a map from the Google Maps service, operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The map is only loaded after your explicit consent via our cookie banner (category "External content"). After you consent, your browser connects to Google servers; at least your IP address is transmitted and cookies may be set. A transfer to Google LLC in the USA is possible. Google LLC is certified under the EU-US Data Privacy Framework; the transfer is therefore covered by an adequacy decision of the European Commission (Art. 45 GDPR). The legal basis is your consent (Art. 6 (1) (a) GDPR in conjunction with Section 25 (1) TDDDG). For details, please refer to Google's privacy policy: https://policies.google.com/privacy.

If you consent to the "Statistics" category in the cookie banner, we use the open-source web analytics software Matomo to analyse and improve the use of our website. The Matomo instance is operated on our behalf by our group company Rameckers Anlagen- und Beteiligungs GmbH, Berger Feld 3–5, 41334 Nettetal, Germany, on a server of IONOS SE in the European Union. We have concluded a data processing agreement pursuant to Art. 28 GDPR with this company; it processes the data exclusively on our instructions and not for its own purposes. We do not pass the data on to any other third parties.

The following data is processed: your IP address, shortened by two bytes before storage (e.g. 192.168.xxx.xxx), the approximate region derived from it, pages visited and time spent, referrer URL, browser, operating system, device type, screen resolution, language setting, time of access, clicks on external links and the submission of the contact form (without its content). Matomo sets the cookies _pk_id (13 months), _pk_ses (30 minutes) and, where applicable, _pk_ref (6 months). The data is pseudonymised; raw data is deleted after 14 months at the latest.

When the statistics script is loaded and the statistics data is transmitted, your full IP address is briefly recorded in the server log files, as with any server access. These entries are deleted after 14 days (see "Server log files"); only the shortened IP address is used in the statistics themselves.

The legal basis is your consent (Art. 6 (1) (a) GDPR, Section 25 (1) TDDDG). You can withdraw your consent at any time with effect for the future at /rechtliches/cookies; the Matomo cookies are then deleted.

We store technically necessary settings (e.g. language setting, login session) and your cookie consent itself in your browser – not on our servers. No consent is required for technically necessary storage (Section 25 (2) No. 2 TDDDG). We only set statistics cookies (Matomo) and load external content (Google Maps) with your consent (Section 25 (1) TDDDG). Details and the option to change your selection at any time can be found at /rechtliches/cookies.

Unless a specific period is stated above, we delete personal data as soon as the purpose of processing no longer applies, unless statutory retention obligations (e.g. under commercial or tax law) prevent deletion.

No automated decision-making, including profiling, within the meaning of Art. 22 GDPR takes place.

We reserve the right to amend this privacy policy so that it always complies with current legal requirements or to reflect changes to our services. The new privacy policy will then apply to your next visit.

As of: November 2026