Legal information
Privacy policy
How personal data is processed when you use this website.
Last updated: 28 September 2026
1. Controller
Shilux 24 GmbH, Ludwig-Erhard-Straße 18, 20459 Hamburg, Deutschland
E-Mail: info@shilux24.de
2. General information
We process personal data only where this is necessary to provide a functional website, respond to enquiries or use services to which you have consented. The relevant legal bases are Art. 6(1)(a), (b), (c) and (f) GDPR.
3. Hosting and server log files
When the website is accessed, the hosting provider may process IP address, date and time, requested file, referrer, browser information and operating system in server log files. Processing serves secure and stable operation and is based on Art. 6(1)(f) GDPR. Technical service providers are engaged under data-processing agreements where required.
4. WordPress
The website is operated with WordPress. WordPress and locally installed plugins process data required for page delivery, administration and security. Administrative access is restricted. Updates, access controls and data minimisation are used to protect the system.
5. Contact enquiries
If you contact us by email or via a form, we process your details to handle and answer the enquiry. The legal basis is Art. 6(1)(b) GDPR for pre-contractual or contractual matters and otherwise Art. 6(1)(f) GDPR. We delete enquiry data when it is no longer required and no statutory retention duty applies.
6. Cookies and consent management
Technically necessary cookies may be used on the basis of § 25(2) TDDDG and Art. 6(1)(f) GDPR. Optional cookies and comparable technologies are activated only after consent pursuant to § 25(1) TDDDG and Art. 6(1)(a) GDPR. Consent can be withdrawn at any time with effect for the future via the cookie settings.
7. Google Analytics 4
With your consent, we use Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The service helps us understand how the website is used. In particular, device and browser information, approximate location, interactions, referrer and an online identifier may be processed. IP addresses are not logged or stored in full by Google Analytics. Google may also process data in the USA. Google relies, where applicable, on the EU-US Data Privacy Framework and standard contractual clauses. The legal basis is your consent under Art. 6(1)(a) GDPR and § 25(1) TDDDG. Data is deleted according to the retention period configured in Google Analytics; aggregated reports may be retained for longer.
8. SEO tools
SEO plugins may be used to optimise titles, descriptions, structured data and indexing. Purely local content analysis does not require visitor profiles. If an SEO tool connects to an external service and processes personal data, it is activated only where a legal basis exists and, where necessary, after consent.
9. Recipients and third-country transfers
Data is shared only with service providers necessary for operation, communication and analytics, or where required by law. Transfers outside the EU/EEA take place only on the basis of an adequacy decision, suitable safeguards such as standard contractual clauses, or another legal basis under Chapter V GDPR.
10. Your rights
You have the right to access, rectification, erasure, restriction, data portability and to object within the statutory requirements. You may withdraw consent at any time with effect for the future. You also have the right to lodge a complaint with a data protection supervisory authority.
11. Updates
We update this privacy policy when services, technologies or legal requirements change.