Privacy Policy


Last updated: October 2026


This is a translation of our German privacy policy (Datenschutzerklärung). In case of any discrepancy, the German version shall prevail.



1. Controller and overview


The controller within the meaning of the General Data Protection Regulation (GDPR) is:

Jakob Kraus – Mobilerbootsbau

Wichmannsdorfer Str. 4e

17268 Boitzenburger Land (OT Boitzenburg)

Germany


Phone: +49 (0) 39 889 568 989

Email: office@mobilerbootsbau.de


What this is about:

This policy explains which personal data are processed when you visit www.mobilerbootsbau.de, for what purpose, on what legal basis, and what rights you have. Personal data are any information that can be used to identify you personally, for example your name, email address or IP address.


This website is protected by SSL/TLS encryption (recognisable by “https://” and the padlock symbol in your browser). This means that data you send to us cannot be read by third parties.



2. Hosting, website builder and server log files


Our website is built with the “MyWebsite” website builder of IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany, and is hosted there. IONOS uses the technology of Duda, Inc., 577 College Avenue, Palo Alto, CA 94306, USA, as a sub-processor. Content such as images, fonts and the brochure (PDF) is delivered via Duda servers and via the Amazon CloudFront content delivery network of Amazon Web Services EMEA SARL, 38 Avenue John F. Kennedy, L-1855 Luxembourg, from a data centre in Frankfurt am Main, so that the site loads quickly. The fonts used on this website are loaded from these servers, not from Google.


When you access the website, these providers automatically process technical data transmitted by your browser (server log files): IP address, date and time, page or file requested, referrer (previously visited page), browser type and operating system. The log files are deleted as soon as they are no longer needed for delivering and securing the website.


Purpose and legal basis:

This processing is necessary to deliver the website, to ensure its security and stability, and to fend off attacks. The legal basis is our legitimate interest under Art. 6(1)(f) GDPR.


Data processing agreement:

We have concluded a data processing agreement with IONOS under Art. 28 GDPR; IONOS has also concluded such an agreement with Amazon Web Services. For transfers to the USA, see section 9.


Further information can be found in the privacy notices of IONOS (www.ionos.de) and Duda (https://www.duda.co/legal/privacy).


3. Cookies and consent management


Cookies are small text files stored by your browser; the browser’s storage (local storage, session storage) works in a similar way. Strictly necessary cookies are set by our website builder (IONOS/Duda) to protect forms against misuse, and by Termly to store your choice in the cookie banner. They are set without consent (Section 25(2) no. 2 of the German Telecommunications Digital Services Data Protection Act (TDDDG), Art. 6(1)(f) GDPR) and are deleted after 12 months at the latest.


All other cookies (embedded YouTube videos) are only set with your consent, which you can give or refuse in the cookie banner (Section 25(1) TDDDG, Art. 6(1)(a) GDPR).


Consent management with Termly

For the cookie banner and the management of your consent, we use the service of Termly Inc., 8 The Green, Suite B, Dover, DE 19901, USA. When you access the website, your browser loads the banner from Termly’s servers; in doing so, your IP address, browser data and your consent decision are processed. Termly also blocks embedded content such as YouTube videos until you have given your consent.


The legal basis is our legal obligation to obtain and document consent (Art. 6(1)(c) GDPR in conjunction with Section 25 TDDDG). Your consent decision is stored for as long as we are required to prove it. Termly’s privacy policy: https://termly.io/our-privacy-policy/


Withdrawing or changing your consent:

You can change or withdraw your choice at any time via the “Cookies” link at the bottom of every page. Withdrawal takes effect for the future.



4. Visitor statistics


For visitor statistics, IONOS uses its own tracking pixel (“WebAnalytics”). It tells us how many visitors the website has, which pages are viewed, which pages visitors come from, and which devices and browsers they use. The analysis is aggregated; we do not create profiles of individual persons.


WebAnalytics runs on IONOS systems: your IP address is truncated as soon as it is received, so that only anonymous data are processed (page viewed, referrer, browser, operating system, device type, time, approximate location). WebAnalytics does not set cookies and does not pass data on to third parties.


Storage period:

The anonymous statistical data are stored for 12 months.


The legal basis is your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG), because the tracking pixel reads information from your device when the page is accessed. It is only loaded once you have given your consent in the cookie banner; you can withdraw your consent at any time via the cookie settings. WebAnalytics is operated on our behalf by IONOS (data processing under Art. 28 GDPR).



5. Contacting us: form, email, phone


If you contact us via the contact form, by email or by phone, we process the information you provide in order to answer your enquiry and, where applicable, to prepare a quotation for you.


In the contact form this includes: name, email address, phone number, billing address (optional), boat type and year of build, berth, requested service, your message and – if you use this option – an uploaded file (e.g. a deck plan or drawing). Name, email address and message are mandatory because we cannot otherwise answer your enquiry; all other information is optional. The form data are forwarded via the IONOS/Duda servers (see section 2) to our email mailbox, which is also hosted by IONOS, and stored there for processing. Emails you send us directly are also received there.


Legal basis:

If your enquiry relates to a contract or a quotation, the legal basis is Art. 6(1)(b) GDPR; in all other cases, it is our legitimate interest in answering enquiries (Art. 6(1)(f) GDPR).


Storage period:

If no order is placed, we delete your enquiry and our related correspondence no later than 24 months after your last message. If an order is placed, we keep the documents for as long as required by law (e.g. 6 or 8 years under German commercial and tax law).



6. Job applications


If you apply to us (by email, post or phone), we process your application documents and contact details in order to decide on establishing an employment relationship (pre-contractual measures, Art. 6(1)(b) GDPR).


If no employment relationship is established, we delete your documents six months after the end of the application process. This period serves to defend against possible claims, for example under the German General Equal Treatment Act (AGG) (Art. 6(1)(f) GDPR).



7. Embedded YouTube videos


On some pages of our website, we embed videos from YouTube. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”).


The videos are only loaded once you have given your consent in the cookie banner. After your consent, data are transmitted to Google when a video is loaded and played, in particular your IP address, the page accessed and device information. YouTube stores cookies and similar identifiers in your browser, among other things for statistics, fault detection and advertising purposes. If you are logged in to YouTube or Google, Google can link the visit to your account. Google may also transfer data to Google LLC in the USA (see section 9).


The legal basis is your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG), which you can withdraw at any time via the cookie settings.


Google’s privacy policy: https://policies.google.com/privacy


8. Links to social networks


Our website contains icons linking to our pages on Facebook and Instagram (Meta Platforms Ireland Limited, Merrion Road, Dublin 4, Ireland). These are simple links, not embedded plugins: no data are transmitted to Meta when you visit our website. Only when you click a link are you taken to Facebook or Instagram, where Meta’s privacy policy applies (https://www.facebook.com/privacy/policy).



9. Transfers to third countries


Some of the service providers mentioned are based in the USA or transfer data there: Duda, Inc. (website builder), Termly Inc. (cookie banner) and – after your consent – Google (YouTube). Amazon Web Services delivers content from Frankfurt am Main; in case data reach the USA in the process, IONOS has agreed standard contractual clauses.


For the USA, the European Commission adopted an adequacy decision on 10 July 2023 (EU-U.S. Data Privacy Framework). Transfers to companies certified under this framework are therefore permitted (Art. 45 GDPR). Google is certified; you can check the status at https://www.dataprivacyframework.gov/list. For Duda, IONOS has agreed the European Commission’s standard contractual clauses (Art. 46(2)(c) GDPR); transfers are also based on these clauses where another provider is not certified. You can request a copy from us.



10. Storage period


We store personal data only for as long as necessary for the respective purpose or as required by statutory retention obligations. The specific periods are stated in the individual sections. If you withdraw your consent or object to processing, we delete the data concerned unless a statutory retention obligation applies.



11. Your rights


You have the following rights regarding your personal data at any time:


  • Access to the data we hold about you (Art. 15 GDPR)
  • Rectification of inaccurate data (Art. 16 GDPR)
  • Erasure (Art. 17 GDPR)
  • Restriction of processing (Art. 18 GDPR)
  • Data portability – receiving your data in a common, machine-readable format (Art. 20 GDPR)
  • Withdrawal of consent with effect for the future (Art. 7(3) GDPR); processing carried out before the withdrawal remains lawful


An informal message to office@mobilerbootsbau.de is sufficient.


Right to object under Art. 21 GDPR

Where we process your data on the basis of our legitimate interest (Art. 6(1)(f) GDPR) – this concerns the server log files (section 2), strictly necessary cookies (section 3) and enquiries not related to an order (section 5) – you may object to this processing at any time on grounds relating to your particular situation. We will then no longer process the data unless we can demonstrate compelling legitimate grounds that override your interests, or the processing serves the establishment, exercise or defence of legal claims. You can send your objection informally to office@mobilerbootsbau.de.


Right to lodge a complaint:

You have the right to lodge a complaint with a data protection supervisory authority, in particular in the EU country where you live or work or where the alleged infringement took place (Art. 77 GDPR).