Privacy policy
As of: 21. Oktober 2026
Translation for information only. The German version is legally binding.
01Controller
The controller within the meaning of the GDPR is Clemens Schmid, Sole proprietorship, Mahlgasse 2, 88339 Bad Waldsee, Germany, e-mail: anfrage@mechstock.com.
02Hosting
The website is operated by Contabo GmbH, Aschauer Straße 32a, 81549 München, Deutschland, in a data centre in the European Union (France). When pages are accessed, the server processes technically necessary connection data (IP address, date and time, requested address, browser identifier) in order to deliver the pages. The legal basis is our legitimate interest in secure and stable operation, Art. 6(1)(f) GDPR. A data processing agreement pursuant to Art. 28 GDPR has been or will be concluded with the hosting provider.
03Server log files
We do not keep access logs for analysis purposes. Technically required server error logs may be stored briefly to fix faults. To protect the enquiry form against misuse, the IP address is held exclusively in memory for a maximum of one hour and is not stored.
04Reach measurement (first-party analytics)
To design our website according to needs, we use the self-hosted software Umami on our own server to record pseudonymous usage data: page viewed (path), referrer, language, device class (e.g. desktop/mobile) and – on product pages – part number, brand and series as event data. No cookies are set, no persistent identifiers are stored in the browser and no data is passed to third parties (no Google Analytics, no advertising pixels). The IP address is not stored in full. The legal basis is our legitimate interest in reach analysis and improving our offer, Art. 6(1)(f) GDPR (Art. 6 Abs. 1 lit. f DSGVO). Storage period: raw data is generally deleted or aggregated after 24 months at most. You can object to the processing at any time (Art. 21 GDPR); an informal message to the e-mail address above is sufficient. Fonts and graphics are delivered from our own server; there is no connection to Google Fonts or other font services.
05Enquiry form
When you request a price via the form, we process company, name, e-mail address, optionally phone number, item, condition, quantity and your message. The purpose is to process your enquiry and prepare a quotation. The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures). The enquiry is stored on our server and delivered to us by e-mail.
06E-mail delivery via Spacemail
To receive and send e-mails – including the internal notification of your enquiry and an automatic confirmation of receipt to you – we use the e-mail service Spacemail (Spaceship, Inc.), 4600 East Washington Street, Suite 300, Phoenix, AZ 85034, USA. The enquiry data mentioned above is transmitted to the service. As the provider is based in the USA, data may be transferred to a third country; this is done on the basis of appropriate safeguards (EU standard contractual clauses pursuant to Art. 46(2)(c) GDPR within the provider's data processing agreement). The legal basis is Art. 6(1)(b) GDPR and our legitimate interest in reliable delivery, Art. 6(1)(f) GDPR. Further information: privacy notice of Spacemail.
07Disclosure to suppliers
If a supplier or partner is involved in your quotation or delivery (e.g. drop shipping), we only pass on the data required for this, such as the delivery address. The legal basis is Art. 6(1)(b) GDPR.
08Storage period
We delete enquiries once they have been processed, at the latest after twelve months if no contract is concluded. If a contract is concluded, we retain the data in accordance with the statutory retention periods (in particular under the German Commercial Code (HGB) and Fiscal Code (AO)).
09Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on Art. 6(1)(f) GDPR (Art. 21). You also have the right to lodge a complaint with a data protection supervisory authority.
10Obligation to provide data
We cannot process your enquiry without company, name and e-mail address. There is no legal obligation to provide this information.