Privacy Policy

I. Name and address of the controller

The entity responsible for the collection, processing, and use of your personal data pursuant to the EU General Data Protection Regulation (hereinafter referred to as "we", "us" or "our") is:

ct2w GmbH
Ober-Ramstädter Weg 1
64354 Reinheim
Germany
E-mail: info@ct2w.de

II. Name and address of the data protection officer

Data protection officer of the controller is:

Joachim Ristow
ct2w GmbH
Ober-Ramstädter Weg 1
64354 Reinheim
Germany
E-mail: joachim.ristow@ct2w.de

Should you have any further questions regarding the processing of your personal data, you can contact our data protection officer.

III. General information on data processing

1. Why we use data

We wish to constantly improve our offers and make them more attractive. The only way for us to optimize the contents of our website to better meet your demands is to identify which sections are most commonly visited and on which the most time is spent. Should you entrust us with your personal information, we shall use such for the technical administration of the website, customer management, product surveys and marketing; however, we shall only do so to the extent that is necessary. The more we understand what you want, the faster you will be able to find the information you are looking for on our website.

2. Information on the collection of personal information

Visiting our website is possible in principle without the transfer of personal data. This, however, requires that only the minimum setting be selected in the cookie window upon your first visit.

Data approved by you for our analysis is generally only recorded anonymously and passed on to analysis services. You can also define the selection of service providers yourself.

In the following, we inform you about the collection of personal data when using our forms on the websites. Personal data is all data that can be related to you personally, e.g., name, address, e-mail addresses, user behavior.

If you request information on our pages, which we only provide to customers and interested parties, or if you wish to take advantage of a personalized consulting service, you will be asked to provide personal information such as name, address or telephone number.

In addition to the information you share with us, we also analyze how you use our services and offers in order to lead you to the information that might interest you more quickly and in order to constantly optimize our service.

3. Legal basis for processing personal information

Art. 6 Para. 1 Item a of the General Data Protection Regulation (GDPR) forms the legal basis for any consent we obtain from relevant persons for the operations involved in processing personal information.

Art. 6 Para. 1 Item b of the GDPR forms the legal basis for the processing of personal information in order to fulfill a contract when the relevant person is one of the contract parties. This includes processing operations necessary to complete measures that precede the contract.

Art. 6 Para. 1 Item c of the GDPR forms the legal basis for the processing of personal information to the extent such is necessary in order to comply with legal obligations to which our company is subject.

Art. 6 Para. 1 Item f of the GDPR forms the legal basis for any processing necessary to ensure a legitimate interest of our company or a third party, as long as such do not outweigh the interests, fundamental rights and fundamental freedoms of the person in question.

4. Data deletion and retention period

The personal information of the relevant person shall be deleted or locked as soon as the purpose for which such was stored is no longer applicable. Storage beyond such is possible if provided by European or national lawmakers in laws or other regulations to which the controller is subject under Union law. Data shall also be locked or deleted once the retention period prescribed in the given norms expires, unless storage of the data is still required in order to conclude or fulfill a contract.

IV. Use of cookies and third-party services

1. Description and scope of data collection

The cookies used in our website are managed by Usercentrics Consent Management. The settings selected by the user can be extended, modified, and/or revoked at any time.

2. Legal basis for the data processing

Legal basis for processing information is our legitimate interest according to Art. 6 Para. 1 Item f of the GDPR. Where applicable we will obtain your consent before placing non-essential cookies.

3. Purpose of the data processing

We use cookies and similar technologies on our website to collect and process certain information about your visit. Cookies are small text files stored on your device that help us recognize your browser and remember certain information.

You can set your preferences regarding cookies via our Usercentrics Consent Management Platform.

V. User registration

1. Description and scope of the data collection

Our Internet site offers users the option to register by providing personal information. During that process, information is entered on an input screen and transmitted to us in encrypted form and stored. Unless stated otherwise in the relevant registration form, the information is not shared with third parties outside our group of companies. The following information is collected during the registration process:

• Form of address (required)
• First name (required)
• Last name (required)
• E-mail (required)
• Company name (required)
• Country (required)

Further personal information may be requested (both under a mandatory and non-mandatory basis) depending on the purpose of the registration.

The user's consent to having this information processed is obtained during the registration process.

2. Legal basis for the data processing

Legal basis for processing information once the user's consent has been obtained is Art. 6 Para. 1 Item a of the GDPR.

3. Purpose of the data processing

User registration is required for the provision of certain content and services on our website, such as:

• Registering for events or career events
• Publication requests (e.g., studies or whitepapers)
• Subscription to marketing newsletters
• Responding to enquiries about the products or services we offer
• Responding to other information requests made by you to us
• Other legally required and permitted uses

VI. Visiting our website

1. Description and scope of the data collection

When you visit our website, we automatically collect certain information about your device and your use of the site. This may include your IP address, browser type, operating system, and the date and time of your visit.

2. Legal basis for the data processing

Legal basis for processing information is our legitimate interest according to Art. 6 Para. 1 Item f of the GDPR.

3. Purpose of the data processing

We process this information to ensure the proper functioning, security, and optimization of our website, and to analyze how visitors use our site.

VII. Rights held by the data subjects

Anytime your personal information is processed you are considered a data subject pursuant to the GDPR, and you have the following rights in connection with the controller:

1. Right of access

You have the right to request information on the scope, origin and recipients of stored information, as well as the purpose of the storage, at no charge to you.

2. Right to correction

You have the right to demand the correction and/or completion in case personal information related to you is incorrect or incomplete. We must make the corrections without delay.

3. Right to deletion

You have the right to request that we delete any personal information related to you without delay should any of the following reasons apply:

• The personal information is no longer required for the purpose it was collected or processed.
• You revoke the consent on which the processing was based and there is no other legal basis for the processing.
• You submit an objection to the processing and no legitimate reasons that have precedence exist.
• The personal information was processed unlawfully.
• The deletion is necessary in order to meet a legal obligation.
• The personal information was collected in relation to information society services offered pursuant to Art. 8 Para. 1 GDPR.

4. Right to data portability

You have the right to obtain the personal information related to you and which you shared with us in a structured, commonly used, and machine-readable format provided that the processing is based on your consent, and the processing is carried out by automated means.

5. Right of objection

You have the right, for reasons arising from your particular situation, to object to the processing of personal information related to you at any time; this includes any profiling based on those provisions.

We will cease processing any personal information related to you unless we can demonstrate compelling legitimate grounds for the processing that outweigh your interests, rights and freedoms or unless the processing serves the enforcement, exercising or defense of legitimate claims.

6. Right to withdraw your consent

Where applicable, you have the right to revoke your consent at any time. Revoking your consent shall not affect the legitimacy of the processing that was carried out with your consent up to the time your consent was revoked.

7. Right to submit complaint to supervisory body

Notwithstanding other administrative or legal remedy, you will generally have the right to submit a complaint to a supervisory body, specifically in the member state of your place of residence, your place of employment or the location of the alleged breach, if you are of the opinion that the processing of the personal information related to you violates the GDPR.

The supervisory body to which the complaint is submitted shall inform the complainant of the status and results of the complaint, including the option of legal remedy pursuant to Art. 78 GDPR.

VIII. Hosting

This website is hosted via Amazon Web Services (AWS). When you access the site, technically necessary data (IP address, timestamp, requested resource) is processed by AWS.

Provider: Amazon Web Services EMEA SARL, 38 Avenue John F. Kennedy, L-1855 Luxembourg. Privacy information: aws.amazon.com/privacy

Legal basis: Legitimate interest (Art. 6 Para. 1 Item f GDPR) in the technically error-free presentation and optimization of our website.

Last update: March 31, 2026.