321mannLukas Heizmann

Consulting · Engineering · Process integration

Enquire

Privacy notice

Translation of the German privacy notice

Last updated: October 2026

1. Controller

The controller responsible for processing your personal data (hereinafter: data) is

Technische Dienstleistungen 321mann
Owner: Lukas Heizmann (hereinafter "we")
Herrenhausstraße 16
55291 Saulheim

E-mail: info@321mann.de
Telephone: +49 171 1008094

Further information can be found in the legal notice.

This privacy notice informs you, pursuant to Art. 13 and 14 GDPR, which data we process when you visit our website and when you work with us, for which purposes and on which legal basis this takes place, and which rights are available to you.

Please send questions, complaints or requests for information regarding data protection by e-mail to info@321mann.de or to the above address with the addition "Datenschutz" (data protection). The controller himself is your contact person. We are not legally required to appoint a data protection officer (§ 38 BDSG).

2. General information on our data processing

2.1 Website - hosting and server log files

When you access our website, our system automatically collects data and information from the accessing device. This includes, among other things, the browser type, operating system, IP address, date and time of access, the page accessed, the previously visited website (referrer), as well as similar technical information. This data is processed to deliver the website, for system security and stability, and to avert threats, for example in the event of a cyberattack. We do not carry out any personal evaluation of this data. The legal basis is our legitimate interest in a secure and functional operation of the website (Art. 6(1)(f) GDPR).

The data is deleted as soon as it is no longer required for these purposes. Longer storage only takes place if necessary to clarify a security incident. Since the collection of this data is mandatory for the operation of the website, there is no possibility to object.

Our website is hosted by Lovable Labs Incorporated, 1111b South Governors Avenue, Dover, Delaware 19904, USA. The provider processes the data exclusively on our behalf and in accordance with our instructions on the basis of a data processing agreement pursuant to Art. 28 GDPR. The pages are delivered via a worldwide network of servers (content delivery network) so that they load quickly. In doing so, the data mentioned above may also be processed via servers outside the EU and the EEA (see section 7).

2.2 Optimisation of business processes

We also generally process the data that you transmit to us and that is collected in the context of the processes described below in this privacy notice for the purpose of optimising our business processes, offers and corporate planning. Where possible, we anonymise the data prior to further processing.

In particular, we may process data that we have collected from you in the context of making contact for the purposes of optimising our offers, e.g. in order to adapt our offers and services to the needs of our customers and prospective customers.

The legal basis is our legitimate interest in improving our services (Art. 6(1)(f) GDPR). You may object to this processing at any time.

We process your data for these purposes for as long as is necessary to achieve the purposes.

2.3 Fonts and media

We embed fonts, images and videos from our own server. No connection to the servers of third-party providers (e.g. font or video platforms) is established when you access our pages.

2.4 No registration

Neither registration nor a user account is required to use our website.

2.5 General note on the use of AI

To carry out our internal processes, e.g. for text editing, translation or research, we use AI-based systems in addition to conventional IT systems. We only input personal data and confidential project documents belonging to our customers into such tools if the provider is contractually bound by our instructions and does not use the data to train its models. Automated decision-making that is impermissible under Art. 22 GDPR never takes place. The use of such AI systems is subject to compliance with applicable legal requirements.

3. Processing of customer data

3.1 Making contact, initial discussion and contract processing

On our website, you have the option of contacting us by e-mail or telephone. The e-mail link in the contact area opens your e-mail program with a pre-prepared message. There is no contact form.

We process the data you transmit (e.g. name, company, contact details, information about the component or process, objective, timeframe, request for a non-disclosure agreement) for the purpose of processing your enquiry and preparing an initial discussion or a quotation.

The legal basis is Art. 6(1)(b) GDPR, insofar as your enquiry aims at concluding a contract or is connected with the performance of a contract. In other cases, it is our legitimate interest in responding to enquiries (Art. 6(1)(f) GDPR). The data is deleted as soon as it is no longer required for communication purposes and no statutory retention obligations preclude this. If a contract is entered into, the information under section 3.2 applies.

The provision of your data is not required by law. However, the information mentioned is required for processing your enquiry and for concluding and performing a contract. Without it, we cannot process your enquiry or conclude a contract with you.

Please note: e-mails are generally transmitted unencrypted and may be read by third parties during transmission. Please only send us confidential documents, such as design data or trade secrets, after consultation with us, and preferably on the basis of a non-disclosure agreement. We will agree a suitable transmission method with you for this purpose. Please do not send us any special categories of personal data (Art. 9 GDPR).

For our initial discussion, we use Google Meet (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) or Microsoft Teams (Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland), depending on your choice. Participation is voluntary. The data required for the session (name, e-mail address, technical connection data) is processed. The legal basis is Art. 6(1)(b) GDPR, otherwise Art. 6(1)(f) GDPR. No recording takes place without your consent.

For e-mail and telephony we use Google Workspace with Gmail (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) and Telekom Deutschland GmbH (Landgrabenweg 151, 53227 Bonn). Insofar as service providers process data on our behalf, this is done on the basis of a data processing agreement pursuant to Art. 28 GDPR.

Should invoices remain unpaid despite several reminders, we may transmit data to debt collection companies. In addition, we may process your data in order to enforce our legal claims. The legal basis is our legitimate interest in enforcing legal claims pursuant to Art. 6(1)(f) GDPR.

We store your data for as long as is necessary for the performance of the contract. In addition, we store data within the framework of the statutory retention periods under commercial and tax law (Art. 6(1)(c) GDPR), which can be up to 10 years. Data that is required exclusively for asserting or defending legal claims is stored until the expiry of the statutory limitation periods.

3.2 Project initiation and project handling

If you commission us or request a quotation (e.g. for a Process Check, process consulting, engineering services, or 3D scans and measurements), we process the data required for this. This includes in particular name, position, company, contact details, communication with you, quotation, contract and invoice data, as well as payment information. The processing serves to prepare and perform the contract, invoicing and payment processing, as well as any warranty and complaint cases. The legal basis is Art. 6(1)(b) GDPR. Insofar as you act as a contact person of a company, it is our legitimate interest in performing the contract with that company (Art. 6(1)(f) GDPR).

Data that we do not collect from you directly is generally obtained from your employer or client who has named you as a contact person, or from publicly accessible sources such as company websites. We then process name, position and business contact details.

In the course of projects we receive or generate technical documents such as drawings, CAD and scan data, measurement records, photographs of components or plants, and process descriptions. This data primarily relates to objects and processes and is generally not personal in nature. If it exceptionally contains personal data, for example names of employees in documents or persons in photographs, we process it only for the agreed project purpose. We ensure confidentiality contractually, and on request through a non-disclosure agreement (NDA).

We store your data for as long as is necessary for the performance of the contract. In addition, we store data within the framework of the statutory retention periods under commercial and tax law (Art. 6(1)(c) GDPR, in particular § 147 AO and § 257 HGB), which can be up to ten years. Data that is required exclusively for asserting or defending legal claims is stored until the expiry of the statutory limitation periods (Art. 6(1)(f) GDPR).

For individual services we may involve cooperation partners or subcontractors, e.g. from additive manufacturing, metrology or casting pattern making. We only pass on personal data to them insofar as this is necessary for the agreed purpose (Art. 6(1)(b) or (f) GDPR), and we limit it to your business contact details. If, in individual cases, the data goes beyond this, we will inform you in advance.

4. Web services used

4.1 Cookies and similar technologies

Cookies are small text files that are stored on your device when you visit a website. They contain a unique identifier and make it possible to recognise your browser. Cookies cannot execute programs or transmit viruses.

At present, we do not use cookies on our website and do not store any information on your device (e.g. in local storage). We do not use any analytics, tracking or advertising services. Access to your device within the meaning of § 25 TDDDG does not take place.

Should we use services in the future that set cookies or read information from your device, we will obtain your consent insofar as this is legally required, and we will update this privacy notice accordingly.

4.2 External links

Our website contains links to third-party websites, e.g. to customers and partners (e.g. hack-guss.de, aesub.com, kingofthehammers.com, shining3d.com, cr3d.de, malping.de, eibach.de). The links are simple hyperlinks. No data is transmitted to these sites merely by accessing our pages. Only when you click on a link do you leave our website. The operators of the linked pages are solely responsible for data processing on those pages. Please refer to their privacy notices.

4.3 Social media

We operate a profile on LinkedIn (LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland; privacy notice: https://www.linkedin.com/legal/privacy-policy) and on Instagram (Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland; privacy notice: https://privacycenter.instagram.com/policy). When you access the profile, the operator of the network processes data under its own or joint responsibility. Information on this can be found in its privacy notice. The legal basis for our processing is Art. 6(1)(f) GDPR. No social media plug-ins are embedded on the website itself.

5. References, names and image material

On our website we present projects and references. In doing so, we name persons who work with us or have recommended us, together with their name, position and company, and in some cases show photos, video testimonials or quotes. We publish this information in order to give you an impression of our work and our projects.

The legal basis is the consent of the person concerned (Art. 6(1)(a) GDPR, and additionally § 22 KUG for images). You may revoke your consent at any time with effect for the future by writing to us at the contact details given above. We will then remove the information without delay. The lawfulness of the processing carried out until the revocation remains unaffected. Insofar as we name persons because of their publicly known role (e.g. managing directors or organisers) and this is based on publicly accessible sources, our legitimate interest in a truthful presentation of our references applies (Art. 6(1)(f) GDPR). You may object to this at any time (section 9).

No data is transmitted to third parties merely by accessing the page. The publication on the internet can be accessed worldwide. We cannot rule out that third parties may copy the content or make it findable in search engines.

6. Recipients of the data

We only pass on your data to recipients if this is necessary for the performance of a contract (Art. 6(1)(b) GDPR), if we are legally obliged to do so (Art. 6(1)(c) GDPR), or if this is necessary to safeguard our legitimate interests (Art. 6(1)(f) GDPR). Recipients may include:

  • Tax advisors and accounting service providers
  • Banks and payment service providers for payment processing
  • Cooperation partners and subcontractors in the context of project handling (section 3.2)
  • Authorities, tax authorities, courts, lawyers and auditors, insofar as this is necessary to fulfil legal obligations or to enforce legal claims
  • Insurers for handling possible claims
  • Debt collection companies in the event of unpaid invoices, insofar as this is necessary to enforce our claims (Art. 6(1)(f) GDPR)

To support our operational processes, we also use external service providers, for example for hosting, e-mail, telephony, video conferencing, data backup and IT support. Insofar as these service providers process data on our behalf, this is done on the basis of a data processing agreement pursuant to Art. 28 GDPR. The service providers are bound by our instructions. Processing takes place exclusively within the EU or the EEA, or in compliance with appropriate safeguards within the meaning of Art. 44 et seq. GDPR.

7. Transfer to third countries

Our website is provided via the hosting provider referred to in section 2.1, which also uses servers and service providers outside the EU and the EEA, in particular in the USA. In the process, the server log data referred to in section 2.1 may be transmitted to a third country merely by visiting the website. This takes place on the basis of the EU Standard Contractual Clauses (Art. 46(2)(c) GDPR).

In the course of our cooperation with you, transfers may nevertheless occur, for example when we communicate with customers and partners in third countries (e.g. the USA) or use service providers based or group-affiliated in a third country. Such a transfer always takes place on the basis of appropriate safeguards that ensure an adequate level of data protection. This may be, for example, an adequacy decision of the EU Commission (e.g. the EU-U.S. Data Privacy Framework) or the conclusion of Standard Contractual Clauses (Art. 45, 46 GDPR). Insofar as you yourself contact us from a third country or the transfer is necessary for the performance of a contract with you, it may also be based on Art. 49(1)(b) GDPR. You can obtain a copy of the safeguards on request using the contact details given above.

8. Storage period

We only process your data for as long as is necessary for the stated purposes. The specific periods can be found in the respective sections, in particular section 3. After that, we delete or anonymise the data, unless statutory retention obligations (in particular under commercial and tax law) prevent this. In that case, we restrict the processing and delete the data after the period has expired.

9. Rights of the data subjects

You have the following rights:

  • Right of access: You may request information from us as to whether and which personal data we process concerning you (Art. 15 GDPR).
  • Right to rectification: If data we process about you is incorrect, you may request its correction (Art. 16 GDPR).
  • Right to erasure: If your data is no longer necessary for our purposes or the legal basis ceases to apply, you may request its erasure (Art. 17 GDPR).
  • Right to restriction of processing: Under certain conditions, you may request that we restrict the processing of your data (Art. 18 GDPR).
  • Right to data portability: You may request a copy of your data in a common, machine-readable format, or request that we transmit the data directly to a provider of your choice (Art. 20 GDPR).
  • Right to withdraw consent: You may withdraw any consent given at any time with effect for the future. The lawfulness of the processing carried out until that point remains unaffected (Art. 7(3) GDPR).
  • Automated decisions: We do not make any decisions based solely on automated processing, including profiling, that produce legal effects concerning you (Art. 22 GDPR).
  • Right to lodge a complaint with a supervisory authority: You may lodge a complaint with a data protection supervisory authority regarding our processing of your data (Art. 77 GDPR). The competent authority for us is the Landesbeauftragter für den Datenschutz und die Informationsfreiheit Rheinland-Pfalz, Hintere Bleiche 34, 55116 Mainz, e-mail: poststelle@datenschutz.rlp.de, www.datenschutz.rlp.de. You may also contact the supervisory authority at your place of residence or work.

Right to object: For reasons arising from your particular situation, you have the right to object at any time to the processing of your data that is based on Art. 6(1)(f) GDPR (Art. 21(1) GDPR). If your data is processed for direct marketing purposes, you have the right to object at any time; this also applies to any profiling associated with it (Art. 21(2) GDPR). We will then no longer process your data for these purposes.

To exercise your rights, please contact us using the contact details given in section 1.

10. Data security, changes and version

Our website is delivered via an encrypted connection (HTTPS/TLS). To protect your data, we take appropriate technical and organisational measures against loss, misuse and unauthorised access (Art. 32 GDPR).

We will adapt this privacy notice if our website, our processing activities, or the legal situation change. The version published on this page at any given time applies.

Last updated: October 2026