Privacy policy

1. Controller

Mandana PV UG (haftungsbeschränkt)
represented by Anja Pauli
Mittenheimer Str. 10a, 85764 Oberschleißheim, Germany
Email: kontakt@mandana-pv.de
Phone: +49 176 2205 3002

2. Principles

We only process personal data where this is necessary to provide this website, to answer your requests or to meet legal obligations. This website does not use cookies, analytics or tracking services, or advertising services. Fonts are loaded from our own server; no data is passed to third parties in the process.

3. Hosting and server log files

This website runs on a server operated by Contabo GmbH, Aschauer Straße 32a, 81549 Munich, Germany. Each time a page is requested, the server automatically stores information sent by your browser:

• IP address
• date and time of access
• the page requested and the amount of data transferred
• browser and operating system used
• the page visited before (referrer)

We need this data to deliver the website and keep it secure. The legal basis is Art. 6(1)(f) GDPR. The log files are deleted as soon as they are no longer needed for these purposes. We have a data processing agreement with the provider.

4. Cloudflare

To protect the website against attacks and deliver it quickly, we use Cloudflare, provided by Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. All requests to this website pass through Cloudflare servers. Cloudflare processes in particular your IP address and technical connection data. The legal basis is our legitimate interest in operating the website securely and reliably (Art. 6(1)(f) GDPR).

Cloudflare is certified under the EU-US Data Privacy Framework, so an adequacy decision of the European Commission covers the transfer to the USA (Art. 45 GDPR). More information: Cloudflare privacy policy.

5. Contact form

If you write to us using the contact form, we process the data you enter (company, name, email address, optionally your phone number and sector, and your message) to handle your request. The legal basis is Art. 6(1)(b) GDPR where your request relates to a contract, and otherwise Art. 6(1)(f) GDPR.

Our server sends the form message over an encrypted connection to our own email mailbox. This mailbox is hosted by our email provider Titan, provided through Hostinger International Ltd., 61 Lordou Vironos Street, 6023 Larnaca, Cyprus. No other services are involved in delivering it.

6. Contact by email, phone or WhatsApp

If you contact us by email or phone, we process your details to handle your request (Art. 6(1)(b) or (f) GDPR).

If you write to us on WhatsApp, your messages and phone number are also processed by WhatsApp Ireland Limited, Merrion Road, Dublin 4, Ireland. Please only use this channel if you agree to this; you can always reach us by email or phone instead.

7. How long we keep data

We only keep your data for as long as needed to handle your request. We delete requests once the matter is fully settled, unless statutory retention periods apply.

8. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20), and the right to object to processing based on Art. 6(1)(f) GDPR (Art. 21). You can withdraw any consent you have given at any time with effect for the future. To do so, simply contact kontakt@mandana-pv.de.

You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Bavarian State Office for Data Protection Supervision (BayLDA), Promenade 18, 91522 Ansbach, Germany.

9. Updates

Last updated: November 2026. We update this privacy policy when the website or the legal requirements change.