Skip to Content
EN DE

Privacy policy

Here we inform you which personal data we process, for what purpose and on what legal basis.

1. Controller

Halova GmbH
Gustav-Wagner-Straße 12
72760 Reutlingen
Email: info@halova.de
Managing directors: Marius Wagner, Moritz Weber

We have not appointed a data protection officer, as there is no legal obligation to do so. If you have any questions about data protection, please contact info@halova.de.

2. Visiting the website and server logs

When you visit our website, our server automatically processes data transmitted by your browser: IP address, date and time, page requested, amount of data transferred, referrer URL, browser and operating system. This data is technically necessary to deliver the website and ensure its security.

The legal basis is Art. 6 (1) (f) GDPR; our legitimate interest lies in the secure and stable operation of the website. The logs are deleted after 15 days at the latest, unless they are needed to investigate a security incident.

Our website and our business software (Odoo) are operated on a server at netcup GmbH, Emmy-Noether-Straße 10, 76131 Karlsruhe. A data processing agreement pursuant to Art. 28 GDPR has been concluded with the provider.

3. Cookies and visitor statistics

We use cookies that are technically necessary to operate the website and the customer portal:

  • session_id – keeps your session and your login, lifetime 7 days
  • frontend_lang – stores your language choice, lifetime 1 year
  • tz – stores your time zone, only for the duration of the session
  • a cookie that stores your choice in the cookie notice

The legal basis is § 25 (2) no. 2 TDDDG and Art. 6 (1) (b) and (f) GDPR.

Visitor statistics of the website system: Odoo records which pages a visitor views, together with the time, country and language. The data is stored exclusively on our own server and is not passed on to third parties. The legal basis is Art. 6 (1) (f) GDPR; our legitimate interest lies in designing our website according to demand. The data is deleted automatically after 60 days without a new visit. You can object to this processing at any time.

We do not use any external analytics or advertising services (such as Google Analytics or Facebook Pixel).

4. Contact form and email

If you contact us via the contact form or by email, we process the details you provide (name, email address, company if given, and your message) to answer your enquiry. Messages from the contact form are sent to us by email. The legal basis is Art. 6 (1) (b) GDPR if your enquiry relates to a contract or pre-contractual measures, otherwise Art. 6 (1) (f) GDPR. We delete the data once your enquiry has been dealt with and there are no retention obligations.

5. Customer portal

As a customer, you can view quotations, orders and invoices in our customer portal, sign quotations online and pay invoices. For this we process your master data, your documents and, when signing, your name and signature. The legal basis is Art. 6 (1) (b) GDPR. Due to retention obligations under commercial and tax law, we store order and invoice data for up to ten years (Art. 6 (1) (c) GDPR in conjunction with § 147 AO and § 257 HGB).

6. Payment

PayPal: If you pay an invoice with PayPal, we pass on the data required to process the payment (in particular name, address, email address, amount) to PayPal (Europe) S.à r.l. et Cie, S.C.A., 22–24 Boulevard Royal, L-2449 Luxembourg. The legal basis is Art. 6 (1) (b) GDPR. Further information can be found in PayPal's privacy policy: https://www.paypal.com/de/legalhub/privacy-full

Bank transfer: Your payment is processed via our bank. We process the details from the transfer (name, IBAN, reference, amount).

7. Fonts

The fonts used on our website are loaded from our own server; no connection is made to Google servers.

8. Your rights

You have the right to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to withdraw any consent given with effect for the future (Art. 7 (3)).

Right to object: Where we process data on the basis of Art. 6 (1) (f) GDPR, you can object at any time on grounds relating to your particular situation (Art. 21 GDPR).

You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is: the State Commissioner for Data Protection and Freedom of Information Baden-Württemberg, Lautenschlagerstraße 20, 70173 Stuttgart.

9. Data security

Data between your browser and our server is transmitted in encrypted form via HTTPS.

Last updated: October 2026