M2DENGINEERING & AUTOMATION
DEENPLRUTR
Let’s talk ↗

Privacy policy

Updated: 04 November 2026

1. Controller

Controller within the meaning of the General Data Protection Regulation (GDPR):
M2D GmbH
Am Turm 11, D - 53721 Siegburg, Germany
Email: info@m2d-com.de

2. General information

This website uses no third-party analytics or tracking services, sets no advertising cookies and embeds no social media plugins. We notify ourselves internally about page views as described in section 3a. Personal data is processed only as necessary to operate the website and respond to your enquiries.

3. Hosting and server logs

This website is hosted by Timeweb; the server is located in Amsterdam, the Netherlands (EU). When you access the website, the server automatically records information in log files: IP address, access date and time, requested page, browser type and operating system. This data supports reliable operation and system security (legal basis: Article 6(1)(f) GDPR) and is deleted after 14 daily log rotations.

3a. Internal notification of page views

When you open a page, your browser sends a short message to our server: the page opened, the address of the referring page (referrer) and the website name. The server adds the IP address and browser identifier. From this, our team receives a notification via the messaging service Telegram (provider: Telegram Messenger Inc., a company outside the European Economic Area) with the page, origin, approximate location (country and city), device type (mobile device or computer) and the IP address shortened to its first two blocks. We determine the location with a database on our own server; the IP address is not passed to third parties for this. We notify ourselves at most once per visitor within six hours; for this, a check value derived from the IP address is used in memory. Recognisably automated access (bots) triggers no notification. Nothing is stored on your device and no user profile is created. The purpose is to recognise interest in our services promptly; the legal basis is our legitimate interest (Article 6(1)(f) GDPR). You may object at any time (Article 21 GDPR); if JavaScript is disabled in your browser, no message is sent.

4. Contacting us

If you contact us by email or phone, we process the information you provide (name, contact details and enquiry content) to handle your enquiry (Article 6(1)(b) GDPR for pre-contractual steps, or Article 6(1)(f) GDPR). The data is deleted once it is no longer needed for its purpose and no statutory retention requirements apply.

When you use the callback form, we store your name, phone number, enquiry, the page visited and its language to process your request. The callback service logs the enquiry on the server; routine cleanup removes entries older than 30 days. To limit abuse, a value derived from the IP address is held in memory; requests from the previous hour are considered for rate limiting. The data is not used for advertising.

For internal handling, a notification containing your name, phone number, enquiry, page path and language is sent to the responsible team through Telegram. The provider is Telegram Messenger Inc., a company outside the European Economic Area. Information on Telegram’s processing is available in the Telegram privacy policy. Alternatively, you may contact us directly by email.

4a. AI advisor

On the home page you can describe in a text field which problem you want to solve in your business. Only if you expressly consent (Art. 6(1)(a) GDPR) is your text sent via a server we operate in the Netherlands to Google's Gemini API (Google Ireland Limited or Google LLC; processing in the USA is possible, Google LLC is certified under the EU-US Data Privacy Framework). The language model matches the text to our services, projects and concepts; the result is shown to you directly.

We do not store your text. The service only logs the date, language, length of the input and the number of matches. To limit misuse, a check value derived from the IP address is kept in memory and discarded after one day at the latest. Please do not enter names, customer data or other personal data. Consent applies only to the respective request; without it nothing is sent. If you want to send us the result, use the contact form (section 4).

4b. Live demo of B2B System

The public demo at demo-b2b.5-129-230-155.nip.io runs on a server we operate in the Netherlands. “Demo starten” signs you in with a shared demo account; we do not collect any details about you for this. Whatever you enter in the demo is stored in its database, is visible to other visitors of the demo and is deleted at the nightly reset. The server collects log files as described in section 3 (Art. 6(1)(f) GDPR).

If you use the demo’s AI assistant, your input is transmitted together with the demo data required for it to Google’s Gemini API (Google Ireland Limited or Google LLC; processing in the USA is possible, Google LLC is certified under the EU-US Data Privacy Framework). To limit usage we only count the number of requests. Please do not enter real names, customer data or other personal data in the demo.

4c. Measuring Google ads without cookies

If you reach one of our landing pages through an ad on Google, the page address contains a click ID assigned by Google (for example “gclid”) and possibly campaign details (utm parameters). We do not store anything on your device for this and set no cookies; the details are only attached, within the page, to links, to your request and to the “send by email” button.

If you send a request through such a page or click “send by email” there, we store the click ID with the time, type of action, page address and campaign details, and transmit the click ID, time and type of action to Google Ads to measure the success of our ads. We do not transmit your name, phone number or message to Google. The recipient is Google Ireland Limited; processing by Google LLC in the USA is possible, Google LLC is certified under the EU-US Data Privacy Framework. The legal basis is our legitimate interest in measuring ad performance (Art. 6(1)(f) GDPR). We delete the entries after 90 days. You can object at any time, for example by email to info@m2d-com.de; we will then delete the entry.

Clicks on “send by email” on the landing pages are also reported internally via Telegram (page and, where applicable, that the visit came from an ad, without IP address), as described in section 4.

5. Language selection and robotics check

The language is selected through the page address. The robotics check evaluates your answers in your browser and does not automatically send them to us. Information is transmitted only when you submit a contact enquiry yourself.

6. Fonts

All fonts on this website are hosted locally on the server. Visiting the site does not establish connections to external font services such as Google Fonts.

7. Your rights

  • Access to processed data (Article 15 GDPR)
  • Correction of inaccurate data (Article 16 GDPR)
  • Erasure (Article 17 GDPR) and restriction of processing (Article 18 GDPR)
  • Data portability (Article 20 GDPR)
  • Objection to processing (Article 21 GDPR)
  • Complaint to a data protection supervisory authority (Article 77 GDPR)

8. Encryption

This website uses TLS encryption for security, indicated by “https://” in the address bar.

9. Changes

We reserve the right to update this privacy policy to reflect current legal requirements or changes to our services.