Thursen GmbH

Über dem Hagen 39

57392 Schmallenberg

Represented by the managing director: Dr. Thorsten Löhl

Phone: +49 2972 3672619

A data protection officer has not been appointed; the requirements of § 38 para. 1 BDSG are not met.

This website is purely informational. It does not contain forms, no registration, and no ordering or payment function. Automated decision-making including profiling in the sense of Art. 22 GDPR does not take place.

The website is operated on the Odoo Online platform. The provider is

> Odoo S.A.

> Chaussée de Namur 40

> 1367 Grand-Rosière, Belgium

When accessing the website, the server automatically collects the data that your browser transmits and stores it in log files:

- IP address of the requesting device

- Date and time of access

- Name and URL of the retrieved resource

- Amount of data transferred and HTTP status code

- Referrer URL

- Browser type, browser version, and operating system

This data is technically necessary for the operation of the website. They are not merged with other data sources.

**Purpose:** Delivery of the website, ensuring stability and operational safety, clarification and prevention of abusive access.

**Legal basis:** Art. 6 para. 1 lit. f GDPR. The legitimate interest lies in the technically error-free operation and security of the website.

**Storage duration:** The log files will be deleted as soon as their storage is no longer necessary for the stated purpose. If data is needed for the clarification or prevention of a security-related incident, it will be retained until the incident is fully resolved. The technical design of the logging is the responsibility of the platform operator.

**Server location:** European Union.

A contract for data processing exists with Odoo S.A. according to Art. 28 GDPR. Odoo processes the data solely according to our instructions.

### 4. Cookies and similar technologies

**Technically required cookies**

| Cookie | Purpose | Duration |

|---|---|---|

| `session_id` | Session management, language setting | End of the browser session |

| Cookie consent | saves your selection in the cookie notice | until deletion by you in the browser |

These cookies are absolutely necessary for providing the service you have explicitly requested; storage is done according to § 25 para. 2 no. 2 TDDDG without consent. The legal basis for subsequent processing is Art. 6 para. 1 lit. f GDPR.

**Consent-required services**

| Service | Provider | Cookies | Processing |

|---|---|---|---|

| Google Fonts | Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland | none | Establishing a connection to the provider's servers for displaying the fonts; during this, your IP address is transmitted. More details in section 5 |

| Google Analytics | Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland | `_ga`, `_ga_*` — Duration up to 2 years | Measurement of reach and analysis of user behavior. More details in section 6 |

The storage of consent-required cookies and access to information on your device occurs solely on the basis of your consent according to § 25 Abs. 1 TDDDG in conjunction with Art. 6 Abs. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future via the cookie settings. The legality of the processing carried out until the revocation remains unaffected.

You can set your browser to reject cookies or delete them when closing the browser. The functionality of the website may be limited as a result.

This website incorporates fonts from Google Fonts. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. When accessing a page, a connection to the provider's servers is established; during this, your IP address is transmitted and may be transferred to the United States.

**Legal basis:** Art. 6 Abs. 1 lit. a GDPR in conjunction with § 25 Abs. 1 TDDDG. Consent is obtained through the cookie notice and can be revoked at any time.

**Transfer to third countries:** The transfer to the United States is based on Art. 45 Abs. 1 GDPR in conjunction with the adequacy decision of the European Commission regarding the EU-US Data Privacy Framework.

This website uses the web analytics service Google Analytics. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics uses cookies and similar recognition technologies that allow an analysis of your use of this website. In particular, the pages accessed, the time and duration of the visit, referrer URL, approximate location, device used, operating system and browser, as well as your IP address, are collected. The collected data is transmitted to Google and may also be processed by Google for its own purposes. If you are logged into a Google account during your visit, Google can associate the data with your account.

**Purpose:** Evaluation of the use of this website for needs-based design and improvement of the services.

**Legal basis:** Art. 6 para. 1 lit. a GDPR in conjunction with § 25 para. 1 TDDDG. Consent is obtained through the cookie notice and can be revoked at any time with effect for the future. Without your consent, no data collection takes place.

**Storage duration:** User-related data will be deleted after the expiration of the retention period set in the account, at most after 14 months. The duration of the cookies used is specified in section 4.

**Transfer to third countries:** A transfer to the United States may take place. It is based on Art. 45 para. 1 GDPR in conjunction with the adequacy decision of the European Commission on the EU-US Data Privacy Framework.

**Order processing:** There is a contract with Google for order processing according to Art. 28 GDPR.

If you contact us via email or phone, we will process your information — name, contact details, and content of your message — solely for the purpose of addressing your concern.

**Legal basis:** Art. 6 para. 1 lit. f GDPR. The legitimate interest lies in responding to inquiries directed to us. No contracts are concluded or initiated via this website.

**Storage duration:** until the final processing of your concern, unless there are commercial or tax law retention periods to the contrary.

No transfer to third parties takes place; this does not affect the processing by the processor named below.

**Email Service**

The email inboxes of the domain thursen.com are operated by the

> STRATO AG

> Otto-Ostrowski-Straße 7

> 10249 Berlin

We would like to point out that the transmission of emails may occur unencrypted and has security vulnerabilities. Complete protection against third-party access is not possible via this transmission method.

This website uses TLS encryption. You can recognize an encrypted connection by the prefix `https://` in the address bar and the lock symbol in your browser.

This website contains a link to an external profile on LinkedIn. It is a simple link; plugins, buttons, or embedded content from third parties are not loaded. Data transmission only occurs when you actively click the link. The operator of the target page is responsible for processing there.

You have the right to request from us

- information about the data processed concerning you (Art. 15 GDPR)

- correction of inaccurate data (Art. 16 GDPR)

- deletion (Art. 17 GDPR)

- restriction of processing (Art. 18 GDPR)

- data portability (Art. 20 GDPR)

- withdrawal of consent given with effect for the future (Art. 7 para. 3 GDPR)

To exercise these rights, a simple notification to the contact details mentioned in section 1 is sufficient.

**Right to Object under Art. 21 GDPR**

You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you, which is based on Art. 6 para. 1 lit. f GDPR. We will no longer process the affected data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing is necessary for the establishment, exercise, or defense of legal claims.

You have the right to lodge a complaint with a data protection supervisory authority, particularly in the member state of your habitual residence, your workplace, or the place of the alleged infringement. The authority responsible for us is:

> State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia

> Kavalleriestraße 2–4

> 40213 Düsseldorf

The use of the contact data published in the imprint for sending unsolicited advertising is hereby opposed.

This privacy policy is current as of 14.08.2026. Changes to the website or the legal situation may require an adjustment.