Data protection information
1. Controller and contact
CliFar GmbH, Josef Str. 37, D-78166 Donaueschingen, Germany, is responsible for the processing described here. Contact info@clifar.de or +49 (0)771 9294 7404 for privacy questions and requests.
2. Hosting and technical logs
The website is hosted by IONOS. Technical access and security records can include the requested resource, date and time, response status, transmitted data volume, browser information and IP-related data. IONOS describes anonymisation of visitor IP addresses in its hosting logs. Processing supports secure and reliable operation on the basis of Article 6(1)(f) GDPR. Our application also uses keyed rate-limit records to help prevent abusive form submissions and sign-in attempts; these records do not contain enquiry text. Rate-limit records older than 30 days are removed during routine cleanup. Hosting log retention follows the applicable hosting service and configuration. Further information: https://www.ionos.de/hilfe/datenschutz/datenverarbeitung-durch-ihr-ionos-produktes/ionos-webhosting/
3. Enquiries, quotations and portal-access requests
We process the information you send us, such as your name, company, telephone number, email address, subject and message. Quotations can additionally require origin, destination, transport mode, package count, dimensions, weight and Incoterms. Portal-access requests are sent to our team for individual review; submitting a request does not create an account automatically. We use this information to respond, prepare or perform a contract and administer the request, based on Article 6(1)(b) GDPR or, for business contacts and general enquiries, Article 6(1)(f) GDPR. Website enquiries are forwarded to the responsible business mailbox and are not stored as enquiry records in the website database. Email providers and, where necessary to perform your requested service, transport, customs or logistics partners may receive relevant details. Correspondence is retained for the time needed to handle the matter and fulfil applicable retention obligations. Required fields are identified in the forms; without the necessary information we may be unable to process the request.
4. Newsletter and Mailchimp
Newsletter registration is voluntary and based on your consent under Article 6(1)(a) GDPR. Registration is sent to Mailchimp, operated by The Rocket Science Group LLC, an Intuit company in the United States. We submit your email address, language and available signup information; Mailchimp records subscription and confirmation information. A confirmation email is used to verify the signup before newsletters are sent. Existing subscriptions are not replaced by a new pending signup. You can unsubscribe using the link in each newsletter or contact info@clifar.de. Withdrawal applies for the future and does not affect earlier lawful processing. Subscription data is retained while the subscription is active; necessary consent records and suppression information may be retained to demonstrate compliance and respect an unsubscribe request. The website integration does not enable campaign open/click tracking. Mailchimp's processing and international-transfer safeguards are described at https://mailchimp.com/legal/privacy/ and https://mailchimp.com/legal/data-processing-addendum/
5. Cookies, local storage and administrator access
Necessary session cookies support form security and administrator sign-in. A language cookie remembers the selected language. Local browser storage records optional-technology choices, their time and notice version, and can remember a newsletter dismissal. These preferences are not linked to your name or email in the website database. Necessary storage is used under Section 25(2) TDDDG, with personal-data processing based on Article 6(1)(b) or (f) GDPR as appropriate. Analytics and external media require a separate choice; their storage/access is based on Section 25(1) TDDDG and personal-data processing on Article 6(1)(a) GDPR. Continuing to browse does not give consent. You can change your choices through Cookie settings in the footer. Administrators' credentials, encrypted authenticator secrets, hashed recovery codes and account information are stored to protect and operate the administration area.
6. Google Analytics, Tag Manager, Maps and external links
Google analytics or tag scripts load only when configured and after analytics consent. Google Maps loads only after external-media consent. Google services can receive technical and usage information, including IP-related data, device details and the requested page. Google Ireland Limited and other Google group companies may process data outside the EEA, including in the United States; applicable transfer safeguards and service details are available at https://policies.google.com/privacy and https://business.safety.google/adsprocessorterms/ . External websites and social networks process data under their own notices when you follow a link. Optional services can be declined without preventing use of the general website.
7. Your rights and complaints
Subject to the applicable legal requirements, you have rights of access, rectification, erasure, restriction, portability and objection, as well as the right to withdraw consent. Requests do not have to be made exclusively by post or fax. Contact us using the details above. You may complain to a supervisory authority, including the Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg: https://www.baden-wuerttemberg.datenschutz.de/beschwerde/ . Data is deleted when no longer needed, unless a legal duty or another valid basis requires continued retention. We do not use this website to make automated individual decisions with legal or similarly significant effects.
8. Security and updates
We use HTTPS and access controls to protect transmitted and stored information. No method of transmission provides absolute security. Please ask us for an appropriate secure channel before sending particularly confidential material. We update this notice when website functions or processing change. Status: 15 October 2026.
