Data Protection

defacto realations places a high priority on the protection of personal data and sensitive information. Simply satisfying statutory requirements is not enough for defacto realations. Particularly high security is obtained only through regular expert consulting and critical controls. For this reason, defacto realations relies on an externally certified data protection officer. Compliance with data protection guidelines is reviewed in a neutral manner that is not blinded by routine. In addition to statutory requirements, an information security management system was established that examines every aspect of information handling and which documents technical and organizational measures. In order for the data protection guidelines to be put into practice by all of our staff, workshops on special topics - for instance on safe use of mobile terminals - take place in addition to regular training. defacto realations had its implementation of such technical measures as well as the management system for ensuring its high security standard certified in accordance with the international standard ISO/IEC 27001. Constant review of all important processes results in a constantly high level of information security which, in turn, forms the basis for technical data security for all of the systems employed. This high quality is confirmed by regular audits that are performed again and again by external agencies on behalf of our partners and customers and which contribute to constant improvement. At this point we would like to inform you about the data we collect, the purpose for which we do this and how you can exercise control over your data at any time.

1. Responsible Party

The responsible party for processing data within the meaning of the law: defacto realations GmbH Am Pestalozziring 1-2 91058 Erlangen Germany T: +49 (0)9131 9712-0 E-mail:

2. Data Categories, Purpose and Legal Basis of Processing

You can, of course, visit our website without providing any personal information. You can access the data protection declaration via the link at the bottom of each page. Personal data are individual details about the personal or factual circumstances of a specific or identifiable natural person. We use your personal data collected within the scope of visiting our website only for operation and optimization of our website. For this purpose the IP address, various technical data about the terminal device (e.g. operating system, browser used) and data about the use of our website are recorded. We do not store this data beyond the statutory retention periods or fulfillment of the purpose. Processing this data is necessary in order to ensure operation of the website. If you do not agree with such processing, then we cannot make our online offer available to you. We perform statistical evaluations of this information in order to make use of our website even more pleasant for all visitors. We do not link this information to any personal data which we may store. The data accrued during use of the website will be deleted after 14 months at the latest. However, the storage of data may be extended in individual cases for the assertion of legal claims, for defense against possible legal claims or due to legal obligations. We strictly adhere to the requirements of the EU General Data Protection Regulation in all data processing procedures, i.e. data collection, storage and use. Personal data that you entrust to us will never be sold, rented or passed on to third parties for marketing purposes. The processing of personal data for the purpose of operating the website as well as network and information security is based on Article 6 Paragraphs 1 b) and f) of the General Data Protection Regulation [GDPR]. It allows the processing of personal data where this is necessary for the performance of a contract to which the data subject is a party or for the implementation of pre-contractual measures taken at the request of the data subjects and where the processing is necessary in order to safeguard the legitimate interests of the data controller or a third party, unless the interests or fundamental rights and freedoms of the data subject which require the protection of personal data prevail. In accordance with Article 13 Paragraph 2 e) there is no legal or contractual obligation on your part to make data available within the scope of use of our website. However, it is not possible to operate the website without processing your data.

3. Recipient of the Data

Your data will not be disclosed to third parties unless there is a legal obligation to transmit the data. This processing is carried out on the basis of Article 6 (1) c) of the General Data Protection Regulation [GDPR] and in conjunction with the respective order or legal obligation to which we are subject in individual cases. Article 6(1)(c) GDPR authorizes the processing of personal data where processing is required in order to fulfill a legal obligation to which the controller is subject. Categories of recipients of the data are public authorities in the event of a legal obligation and contractors who process the data collected online on our behalf. The contractors involved are: Google Inc., MyFonts.

4. Contact Form

When you fill out the contact form you provide us with personal data. We may collect the following types of information: Name and title, e-mail address, telephone number, company. We use this information only to respond to your specific inquiry or request and to provide you with information. We use a recognized encryption method in order to protect your data when they are transmitted to us.

Consent to the processing of personal data for contact purposes

I consent to having the party responsible in accordance with Clause 1 process my following personal data: Name and address data, telephone number, and e-mail address. The aforementioned personal data shall be processed by the responsible party exclusively for the following purposes: Sending of concrete postal, telephone or e-mail information related to the contact inquiry. Personal data will not be passed on (transmitted) to third parties. This does not apply to transfers to service providers who process the personal data on behalf of the party responsible, in accordance with the latter's instructions and not for their own purposes, and who the party responsible integrates into the latter's advertising measures (e.g. advertising agencies and shipping services). Consent to the processing of personal data and provision of the above data is voluntary. Failure to give consent shall have no effect on the conclusion and performance of a contract or any other adverse consequences. Consent may be revoked at any time with effect for the future. A simple declaration (such as an e-mail) without providing reasons to the party responsible shall suffice for revocation. Revocation of consent will not have any negative consequences and in particular no impact on an existing contractual relationship. The legality of the processing of personal data on the basis of consent up to the time of revocation remains unaffected. I give my explicit consent to the party responsible to contact me by telephone.

5. Use of Google Analytics

This website uses Google Analytics, a Web analysis service of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). Google Analytics uses "cookies", which are text files placed on your computer to help the website analyze how you use the site. However, due to the activation of IP anonymization on these websites, your IP address will previously be shortened by Google within Member States of the European Union or in other signatory states to the Agreement on the European Economic Area. To learn more about how Google uses this information, please visit: You can also prevent Google from collecting the data generated by the cookie and related to your use of the website (including your IP address) and from processing this data by Google (revocation) by downloading and installing the browser plug-in available under the following link:

6. Employment of Google Remarketing

This website uses the remarketing function of Google Inc. The function serves to present interest-based advertisements to website visitors within the Google advertising network. A "cookie" is stored in the visitor's browser that makes it possible to recognize the visitor when he or she visits websites that belong to Google's advertising network. These pages may present advertisements related to content previously accessed by visitors to websites that use Google's remarketing feature. According to its own statements, Google does not collect any personal data in this process. However, if you do not wish to use Google's remarketing function, then you can always deactivate it by making the appropriate settings at Alternatively, you can disable the use of cookies for interest-based advertising through the Advertising Network Initiative by following the instructions at

7. Cookies

We use two types of cookies on our website: session cookies and permanent cookies. In order for you to decide whether you allow us to do so, we would like to briefly explain the purpose of these cookies. Cookies are short snippets of text that we store on your computer. Cookies do not execute commands on your computer, so they do not pose a security risk. Session cookies store certain information while you are browsing our website and are not permanently stored, but rather are deleted when you leave our website. We also store a permanent cookie on your PC. This cookie only contains the information that you have already visited our website. This information is very valuable for the design of our offer and our advertising material. You can determine the handling of cookies in your browser yourself; you can even reject cookies completely or configure your browser so that cookies are regularly deleted. You will find sufficient information on the Internet.

8. Your Rights Regarding the Processing of Your Personal Data

If the relevant legal prerequisites are given, you are entitled to the following rights under the EU General Data Protection Regulation with regard to the processing of your personal data. You may assert the individual rights directly vis-à-vis the specified responsible party in this data protection declaration. All you need to do is to contact us simply and informally (for example via e-mail or post).

a. Right of Access, Article 15 GDPR

You have the right to obtain confirmation from us as to whether personal data related to you are being processed by us. If this is the case, then you also have the right to obtain information with regard to such data processing as well as a copy of the data processed.

b. Right to Rectification, Article 16 GDPR

You have the right to request correction of inaccurate data or to have incomplete data completed.

c. Right to Erasure, Article 17 GDPR

You have the right to request the deletion of personal data and, if such personal data have been made public, to inform other responsible parties about the request for deletion.

d. Right to Restriction of Processing, Article 18 GDPR

You have the right to request the restriction of data processing.

e. Right to object, Article 21 GDPR

You have the right to object to the processing of your personal data at any time. You can see the cases of processing in which this applies in Clause 2 of this data protection information. No specific form for objection is required and may be submitted to the party responsible.

f. Right to Withdraw, Article 7 Paragraph 3 GDPR

You have the right to withdraw your consent to the processing of your personal data at any time. The processing of your personal data up to the time of withdrawal of your consent remains unaffected. No specific form for withdrawal is required and may be submitted to the party responsible.

g. Right to Data Portability, Article 20 GDPR

You have the right to receive your personal data in a structured, commonly used and machine-readable format and to request the transfer of this data to another controller.

h. Questions or Complaints, Article 77 GDPR Y

ou have the right to lodge a complaint with a supervisory authority if you believe that the data processing infringes your rights and/or the GDPR.

A list of data protection officers and their contact details can be found at the following link:


We encourage all parents and guardians to instruct their children in the safe and responsible handling of personal data on the Internet. Children should not transmit any personal data to the website without the consent of their parents or guardian. We assure you that we do not deliberately collect personal data from children or use them in any manner whatsoever or disclose such to third parties without authorization.

Final Remark

Your trust is very important to us and we thank you for it. We hope that this brief statement has provided you a positive impression of the subject of data protection. As a precaution, we would like to point out that this data protection declaration may change and we ask you to review on a regular basis.

If you have any questions, please do not hesitate to contact our external data protection officer:

David Gabel

Webergasse 5

92431 Neunburg v. W. Germany



*Required field

* Spam protection: Please solve this short calculation task:

Please feel free to contact us. Send us an e-mail or give us a call:
Erlangen business location
Erlangen business location
Munich business location
Cologne business location
Erlangen business location
Am Pestalozziring 1-2
91058 Erlangen
T: +49 9131-9712-0
Munich business location
Leopoldstraße 53
80802 München
T: +49 9131-9712-0
Cologne business location
Schanzenstraße 6-20
51063 Köln
T: +49 9131-9712-0