Skip to content
DE

Privacy policy

Thank you for your interest in our company. This policy explains which personal data we process when you visit this website, for what purpose and on what legal basis.

In short: This website sets no cookies, uses no analytics or tracking services and loads no third-party content (no external fonts, maps or social media plugins). We only process data when you contact us via a form or by email, and in technically necessary server logs.

1. Controller

Reichenbach Wirkstoffe GmbH
Köppenweg 8, 37574 Einbeck, Germany
Phone: +49 5561 31991-0
Email: faden@reichenbach-wirkstoffe.de

Managing director: Sascha Sänger

2. Data protection officer

Christian Dembsky
Email: dsb@reichenbach-wirkstoffe.de

3. Hosting and server logs

This website runs on a server operated by Contabo GmbH (Munich) in a data centre in Germany.

A reverse proxy (Nginx) in front of the website automatically logs the following data for every request:

  • IP address of the requesting device
  • date and time of access
  • requested address (domain and path) and request method
  • HTTP status code and amount of data transferred
  • referrer URL, if transmitted by your browser
  • browser type and operating system (user agent)

We need this data to deliver the website and to detect and prevent attacks and misuse. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is the secure and stable operation of the website.

Access logs are archived weekly and deleted after five weeks at the latest, error logs after ten weeks at the latest. Logs are only kept longer if a specific security incident requires this for investigation.

The connection to this website is encrypted using TLS.

4. Cookies and tracking

We do not use cookies or comparable technologies (e.g. local storage, pixels, fingerprinting). There is no audience measurement and no profiling. A consent banner is therefore not required.

5. Contact form and email

If you write to us via the contact form or by email, we process the data you provide (name, email address, optionally company and phone number, and your message) to answer your enquiry.

The legal basis is Art. 6(1)(b) GDPR where your enquiry relates to a contract or pre-contractual measures, otherwise Art. 6(1)(f) GDPR (legitimate interest in answering enquiries). Form data is sent to our company by email and is not stored in a database on the web server.

We delete the data once your enquiry has been fully dealt with, unless statutory retention obligations (e.g. for business correspondence under commercial or tax law) apply.

6. Reports on human rights and environmental risks (compliance form)

The form on our compliance page lets you notify us of potential human rights or environmental risks and violations (complaints procedure under Section 8 of the German Supply Chain Due Diligence Act, LkSG). Giving your name is optional. We need your email address in case we have questions.

The legal basis is Art. 6(1)(c) GDPR in conjunction with Section 8 LkSG. Reports are treated confidentially and are only accessible to the persons responsible for handling them. The data is deleted once it is no longer required for processing and documentation [CHECK: define retention period].

7. Whistleblowing system

For reports under the German Whistleblower Protection Act (HinSchG) we operate a separate whistleblowing system (GlobaLeaks) on our own server at whistleblow.reichenbach-wirkstoffe.de. It is also reachable via the Tor network.

Reports are transmitted and stored in encrypted form and can be submitted anonymously. We process the content of your report and any personal details you choose to provide. Only the persons responsible for the internal reporting office have access.

The legal basis is Art. 6(1)(c) GDPR in conjunction with Sections 10 et seq. HinSchG. The documentation of a report is deleted three years after the procedure has been completed (Section 11(5) HinSchG).

8. Job applications

If you apply to us, we process your application documents to carry out the application process (Art. 6(1)(b) GDPR). If no employment relationship results, we delete the documents no later than six months after the process has ended, unless you have consented to longer storage.

9. Links to social networks

Our website links to our profiles on LinkedIn, Instagram and Facebook. These are plain links; no data is transferred to these providers when you visit our website. Only when you click a link do the respective provider’s privacy policies apply.

10. Your rights

You have the right at any time to

  • access the data stored about you (Art. 15 GDPR),
  • rectification of inaccurate data (Art. 16 GDPR),
  • erasure (Art. 17 GDPR),
  • restriction of processing (Art. 18 GDPR),
  • data portability (Art. 20 GDPR),
  • object to processing based on Art. 6(1)(f) GDPR on grounds relating to your particular situation (Art. 21 GDPR).

Please contact us or our data protection officer using the details above.

You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is:

Die Landesbeauftragte für den Datenschutz Niedersachsen
Prinzenstraße 5, 30159 Hannover, Germany
www.lfd.niedersachsen.de

11. Changes

We update this policy when the website or legal requirements change. The version published here applies.

Last updated: November 2026