SADEN GmbH

Effective: 21 August 2026

​

This Privacy Policy explains how SADEN GmbH processes personal data when you visit this website, contact us or use the appointment scheduling function. Personal data means any information relating to an identified or identifiable natural person.

​

1. Controller

 

The controller responsible for the processing of personal data on this website is:

​

Company: SADEN GmbH

Address: Amalienstraße 75, 76133 Karlsruhe, Germany

Phone: +49 721 46710101

Email: info@saden.de

Managing Director: Dr.-Ing. Patrick Neuenfeldt

​

2. General information on data processing

 

2.1 How we collect personal data

We collect personal data when it is technically generated during your visit to the website, when you communicate it to us by email or telephone, or when you enter it into the appointment scheduling service. Technical data may include your IP address, browser and device information, operating system, referring page, pages accessed, date and time of access, and security or diagnostic information.

​

2.2 Purposes and legal bases

We process personal data only where a legal basis permits us to do so. Depending on the processing activity, the legal basis may be Article 6(1)(a) GDPR for processing based on consent, Article 6(1)(b) GDPR for the performance of a contract or pre-contractual measures, Article 6(1)(c) GDPR for compliance with a legal obligation, or Article 6(1)(f) GDPR for processing based on our legitimate interests. Where information is stored on or accessed from your device, we additionally comply with Section 25 of the German Telecommunications Digital Services Data Protection Act (TDDDG).

​

3. Hosting and website platform: Wix

 

This website is created and hosted using the Wix website platform. The provider is:

Provider: Wix.com Ltd.

Address: 5 Yunitsman St., Tel Aviv, Israel

 

When you access this website, Wix processes technical data required to deliver, secure and maintain the website. This may include IP addresses, browser and device information, requested content, referrer information, timestamps, server log data and security events. Wix processes website visitor data on our behalf as a processor under the applicable data processing arrangements.

​

The processing of technically necessary data is based on Article 6(1)(f) GDPR. Our legitimate interests are the secure, reliable and efficient provision of the website, the prevention of misuse, and the detection and resolution of technical problems. Storage of or access to information on your device that is strictly necessary to provide the website is based on Section 25(2) no. 2 TDDDG.

​

Wix.com Ltd. is established in Israel. The European Commission has recognised Israel as providing an adequate level of protection for personal data. Where Wix transfers data to other third countries, including the United States, Wix states that it uses recognised transfer mechanisms such as the EU–U.S. Data Privacy Framework, adequacy decisions and the European Commission's Standard Contractual Clauses, as applicable.

​

Further information: Wix Privacy Policy

​

4. Consent management: Usercentrics for Wix

 

We use Usercentrics for Wix to obtain, manage and document your decisions regarding cookies and similar technologies. The recipient and processor of consent data is:

​

Provider: Usercentrics GmbH

Address: Sendlinger Straße 7, 80331 Munich, Germany

​

Consent data may include the date and time of your visit, your consent or refusal, the individual settings selected, device information and the identifier required to retrieve your consent settings. Local storage is used to retain your decision and make it available on subsequent visits.

​

The processing is carried out to comply with our legal obligations to obtain and demonstrate valid consent. The legal basis is Article 6(1)(c) GDPR in conjunction with Article 7(1) GDPR. The technically necessary storage of the consent decision on your device is based on Section 25(2) no. 2 TDDDG. Consent data is stored for one year and is processed within the European Union according to Usercentrics.

​

Further information: Usercentrics Privacy Policy

​

5. Cookies and similar technologies

 

This website may use cookies, local storage and similar technologies. These technologies may store information on your device or access information already stored there.

​

Strictly necessary technologies are used where they are required to provide the website, maintain security, remember privacy settings or deliver a function expressly requested by you. Their use is based on Section 25(2) no. 2 TDDDG and, where personal data is processed, on Article 6(1)(f) GDPR or Article 6(1)(c) GDPR. Our legitimate interest is the secure and functional operation of the website.

​

Optional technologies, including technologies for analytics, personalisation or marketing, are used only after you have given consent. Their use is based on Section 25(1) TDDDG and Article 6(1)(a) GDPR. You may refuse optional technologies without affecting the essential functionality of the website.

​

You may withdraw or change your consent at any time with effect for the future by opening the privacy settings available on the website. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

​

6. Contact by email or telephone

 

If you contact us by email or telephone, we process the information you provide in order to respond to your inquiry and handle any follow-up communication. This may include your name, contact details, company, the content of your inquiry and any information or documents you voluntarily provide.

​

Where your inquiry concerns a contract or pre-contractual measures, processing is based on Article 6(1)(b) GDPR. In other cases, processing is based on Article 6(1)(f) GDPR. Our legitimate interest is the efficient and appropriate handling of inquiries addressed to us. Where processing is required to comply with legal obligations, Article 6(1)(c) GDPR applies.

​

We delete inquiry data once the matter has been conclusively resolved, unless continued storage is required for contractual documentation, the establishment, exercise or defence of legal claims, or statutory retention obligations. Business correspondence may therefore be retained for the applicable statutory retention period.

​

7. Appointment scheduling with Calendly

 

We offer an embedded appointment scheduling function provided by Calendly. The provider is:

​

Provider: Calendly, LLC

Address: 115 E Main St., Ste A1B, Buford, GA 30518, USA

​

When you open a page containing the embedded Calendly scheduling interface, a connection to Calendly is established so that the interface can be displayed. Calendly may receive technical data such as your IP address, browser and device information, the page accessed, date and time, referrer information, time zone and security or diagnostic data. Calendly provides its own cookie controls within the embedded interface.

​

If you schedule an appointment, Calendly processes the information you enter, which may include your name, email address, company, selected appointment time, time zone, meeting details and any additional information you provide. We process this data to arrange, confirm and conduct the requested appointment.

​

The processing of booking information is based on Article 6(1)(b) GDPR where the appointment relates to pre-contractual measures or an existing contractual relationship. The initial provision of the scheduling interface and processing for secure and efficient appointment organisation may also be based on Article 6(1)(f) GDPR. Our legitimate interest is to offer a convenient and reliable appointment scheduling process.

​

To the extent Calendly uses non-essential cookies, local storage, analytics, personalisation or marketing technologies, those technologies may be used only on the basis of your consent pursuant to Article 6(1)(a) GDPR and Section 25(1) TDDDG. You can manage the relevant settings through Calendly's cookie controls.

​

Calendly generally acts as our processor for the personal data entered for appointment scheduling under its Data Processing Addendum. Calendly is based in the United States. Calendly states that it relies on the EU–U.S. Data Privacy Framework and the European Commission's Standard Contractual Clauses for applicable transfers of personal data from the European Economic Area to the United States or other third countries.

​

Appointment data is retained for as long as necessary to arrange and conduct the meeting, document related business communication and manage any resulting contractual relationship. It is deleted when those purposes no longer apply, unless statutory retention obligations or the establishment, exercise or defence of legal claims require longer storage.

​

Further information: Calendly Privacy Notice

​

8. LinkedIn external link

 

This website contains a link to the SADEN GmbH company profile on LinkedIn. The link is a standard external link. We do not use a LinkedIn plugin or embed LinkedIn content on this website. No connection to LinkedIn is established merely because you visit our website through this link.

​

If you click the LinkedIn link, you leave our website and LinkedIn processes personal data under its own responsibility. For users in the European Economic Area, the provider is LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland. The data processed by LinkedIn may include your IP address, device and browser information, account information and information about your interaction with LinkedIn.

​

Further information: LinkedIn Privacy Policy

​

9. Recipients and service providers

 

We disclose personal data only where this is necessary for the purposes described in this Privacy Policy, where a legal obligation requires disclosure, where you have consented, or where disclosure is otherwise permitted by law. Recipients may include hosting, website, consent management, appointment scheduling, email, telecommunications, IT support, legal, tax and accounting service providers, as well as public authorities where required by law.

​

Where service providers process personal data on our behalf, they act under a data processing agreement in accordance with Article 28 GDPR. We do not sell personal data.

​​

10. International data transfers

 

Some service providers or their subprocessors may process personal data outside the European Union or the European Economic Area. Personal data is transferred to a third country only where the requirements of Chapter V GDPR are met. Depending on the recipient and destination, the transfer may be based on an adequacy decision of the European Commission, the EU–U.S. Data Privacy Framework, the European Commission's Standard Contractual Clauses, or another legally recognised transfer mechanism. Information on the relevant mechanisms is also available in the provider-specific sections above.

​

11. General retention principles

 

Unless a more specific retention period is stated in this Privacy Policy, we retain personal data only for as long as necessary for the purpose for which it was collected. We subsequently delete or anonymise the data unless continued storage is required by law, needed for contractual documentation, or necessary for the establishment, exercise or defence of legal claims.

​

Where processing is based on consent, data is deleted when consent is withdrawn and no other legal basis permits continued processing. Where you validly object to processing based on legitimate interests, we stop the processing unless compelling legitimate grounds override your interests, rights and freedoms or the processing is required for legal claims.

​

12. Data security

 

This website uses encrypted transmission via HTTPS/TLS. We and our service providers apply appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. No method of internet transmission or electronic storage can, however, guarantee absolute security.

​

13. Your rights

 

Subject to the applicable statutory conditions, you have the following rights regarding your personal data:

​

• the right of access under Article 15 GDPR;

• the right to rectification under Article 16 GDPR;

• the right to erasure under Article 17 GDPR;

• the right to restriction of processing under Article 18 GDPR;

• the right to data portability under Article 20 GDPR;

• the right to object under Article 21 GDPR;

• the right to withdraw consent at any time under Article 7(3) GDPR; and

• the right to lodge a complaint with a data protection supervisory authority under Article 77 GDPR.

​

14. Right to object

 

If we process your personal data on the basis of Article 6(1)(f) GDPR, you have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data.

 

We will then stop the processing unless we demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or unless the processing is required for the establishment, exercise or defence of legal claims. If personal data is processed for direct marketing, you may object to that processing at any time without giving reasons.

​

15. Withdrawal of consent

 

Where processing is based on your consent, you may withdraw that consent at any time with effect for the future. The withdrawal does not affect the lawfulness of processing carried out before withdrawal. Cookie and technology preferences can be changed through the privacy settings available on the website. You may also contact us using the details stated in Section 1.

​

16. Right to lodge a complaint

 

You have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data infringes the GDPR. You may contact the supervisory authority responsible for your place of residence, place of work or the place of the alleged infringement. The supervisory authority generally responsible for private companies established in Baden-Württemberg is:

​

Authority: The State Commissioner for Data Protection and Freedom of Information Baden-Württemberg (LfDI BW)

Address: Heilbronner Straße 35, 70191 Stuttgart, Germany

Postal address: P.O. Box 10 29 32, 70025 Stuttgart, Germany

Phone: +49 711 615541-0

Email: poststelle@lfdi.bwl.de

​

Complaints and further information: LfDI Baden-Württemberg

​

17. Provision of personal data and automated decision-making

 

You are not legally required to provide personal data merely to visit this website. Certain technical data is, however, required to deliver the website. If you contact us or schedule an appointment, the information marked as required is necessary to process your inquiry or booking. Without that information, we may be unable to respond or arrange the appointment. Optional information is provided voluntarily.

​

We do not use the personal data described in this Privacy Policy for decision-making based solely on automated processing that produces legal effects concerning you or similarly significantly affects you within the meaning of Article 22 GDPR.

​

18. Changes to this Privacy Policy

 

We may update this Privacy Policy if our website, the services we use, our data processing practices or the applicable legal requirements change. The version published on this website at the time of your visit applies.

​

Effective: 21 August 2026