Privacy Policy

This privacy policy informs you about the nature, scope and purpose of the processing of personal data on our website and about your rights under the General Data Protection Regulation (GDPR).

1. Controller

Max Holzinger & Co GmbH
Woelkestrasse 4
85301 Schweitenkirchen, Germany
Phone: +49 8444 9284-0
Fax: +49 8444 9284-77
Email: info@max-holzinger.de

A data protection officer is not required by law and has not been appointed.

2. Hosting and server log files

Our website is hosted by ALL-INKL.COM – Neue Medien Münnich, owner René Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany. A data processing agreement pursuant to Art. 28 GDPR has been concluded with the provider.

Each time our website is accessed, the following data is automatically stored in server log files:

• IP address of the requesting device
• date and time of access
• page or file requested
• referrer URL (previously visited page)
• browser and operating system used

The processing is based on Art. 6 (1) (f) GDPR. Our legitimate interest lies in the technically error-free and secure provision of the website. The log files are deleted automatically after a short period unless longer storage is required for evidence purposes (e.g. in the event of attacks). The data is not combined with other data sources.

3. SSL/TLS encryption

For security reasons, this website uses SSL or TLS encryption. You can recognise an encrypted connection by “https://” in the address bar of your browser.

4. Cookies and local storage

We only use technically necessary storage functions; we do not use tracking or analytics cookies.

• CookieConsent (cookie, 12 months): stores your choice in the consent banner (see section 5).
• PHPSESSID (cookie, until the browser is closed): technical session cookie of the web server.
• extern_maps (local storage, only if you select “Always load Google Maps”): stores your consent to load Google Maps automatically.

The legal basis is Section 25 (2) No. 2 TDDDG and Art. 6 (1) (f) GDPR or – for storing your consent – Art. 6 (1) (a) GDPR. You can delete these entries at any time in your browser settings. An up-to-date overview is available on our Cookies page.

5. Consent management with Cookiebot

To obtain and manage consents, we use the Cookiebot service of Usercentrics A/S, Havnegade 39, 1058 Copenhagen, Denmark. When you visit our website, the Cookiebot script is loaded from the provider's servers; in the process your IP address is transmitted. To document your consent, your truncated IP address, date and time, browser information, the URL visited, a randomly generated key and your choice are stored. This data is deleted after twelve months.

The legal basis is Art. 6 (1) (c) GDPR in conjunction with Art. 7 (1) GDPR (obligation to demonstrate consent) and Section 25 (2) No. 2 TDDDG. You can change or withdraw your choice at any time: Change cookie settings.

Further information: https://www.cookiebot.com/en/privacy-policy/

6. Contacting us

If you contact us by email, phone or fax, we process your details (e.g. name, contact details, content of your enquiry) to handle your request. The legal basis is Art. 6 (1) (b) GDPR if your enquiry relates to a contract or pre-contractual measures, otherwise Art. 6 (1) (f) GDPR (legitimate interest in answering enquiries). The data is deleted as soon as it is no longer required and no statutory retention obligations apply.

7. Fonts

The fonts used on this website are hosted locally on our server. No connection to servers of Google or other third parties is established when the page is accessed.

8. Google Maps

To show our location, we embed maps from the Google Maps service. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

The map is only loaded when you click “Load map” (two-click solution). Before that, no data is transmitted to Google. Only when you click is a connection to Google's servers established; in particular your IP address, the page visited and technical browser data are transmitted to Google, and Google may set cookies. It cannot be ruled out that data is transferred to servers of Google LLC in the USA. Google LLC is certified under the EU-US Data Privacy Framework; to that extent, an adequacy decision of the EU Commission exists for the USA.

The legal basis is your consent pursuant to Art. 6 (1) (a) GDPR and Section 25 (1) TDDDG. You can withdraw your consent at any time with effect for the future by reloading the page or – if you selected “Always load Google Maps” – by deleting the site data in your browser.

Further information: https://policies.google.com/privacy

9. Job applications

We process application documents that you send us, e.g. by email, in order to carry out the application process (Art. 6 (1) (b) GDPR, Section 26 BDSG). If no employment relationship is established, the documents are deleted no later than six months after the end of the process, unless legitimate interests (e.g. obligations to provide evidence under the German General Equal Treatment Act, AGG) prevent this.

We only keep speculative applications for future vacancies if you agree to this (Art. 6 (1) (a) GDPR). You can withdraw this consent at any time with effect for the future.

10. Your rights

You have the following rights with regard to your personal data:

• right of access (Art. 15 GDPR)
• right to rectification (Art. 16 GDPR)
• right to erasure (Art. 17 GDPR)
• right to restriction of processing (Art. 18 GDPR)
• right to data portability (Art. 20 GDPR)
• right to withdraw consent with effect for the future (Art. 7 (3) GDPR)

Right to object (Art. 21 GDPR): Where we process data on the basis of Art. 6 (1) (f) GDPR, you may object to the processing at any time on grounds relating to your particular situation.

An informal message to the contact details above is sufficient to exercise your rights.

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is the Bavarian Data Protection Authority (Bayerisches Landesamt für Datenschutzaufsicht, BayLDA), Promenade 18, 91522 Ansbach, Germany, www.lda.bayern.de.

11. Automated decision-making

No automated decision-making, including profiling, takes place.

12. Changes to this privacy policy

Last updated: October 2026. We will update this privacy policy whenever the data processing on our website or the legal requirements change.