The protection of your personal data is important to us. On this page you can find out which data we process when you visit our website, what we use it for and what rights you have. Personal data is any information that can be used to identify a person, for example name, email address, telephone number or IP address.
Controller and data protection contact
The controller within the meaning of the General Data Protection Regulation (GDPR) is:
MARCH PUMPEN GmbH & Co. KGRathenaustraße 2
35394 Gießen
Germany
Phone: +49 (0) 641 / 68 68 06 – 0
Fax: +49 (0) 641 / 68 68 06 – 60
Email: info@march-pumpen.com
Contact for data protection questions at the company: Thomas Wollmann, email: datenschutz@march-pumpen.com
Further information about the company can be found in the legal notice.
The key points in brief
- We do not use advertising or tracking services, social media plugins or third-party map services.
- This website does not set cookies. That is why there is no cookie banner.
- Audience measurement runs on our own server, without cookies and without storing IP addresses.
- We load fonts, icons and scripts from our own server.
- YouTube videos only load when you click “Load video”.
- We only use the details from the contact forms to process your enquiry.
Legal bases and storage period
We only process personal data if there is a legal basis for doing so. Depending on the purpose, these are:
- your consent, Art. 6(1)(a) GDPR,
- the initiation or performance of a contract, Art. 6(1)(b) GDPR,
- a legal obligation, Art. 6(1)(c) GDPR,
- our legitimate interest, Art. 6(1)(f) GDPR, for example in the secure and trouble-free operation of the website and in processing enquiries.
Where information is stored on or read from your device, section 25 of the German Telecommunications Digital Services Data Protection Act (TDDDG) also applies.
We delete personal data as soon as the purpose of storage no longer applies. Statutory retention obligations, for example under commercial and tax law (section 257 HGB, section 147 AO), remain unaffected.
Hosting and server log files
Our website is operated by a hosting provider acting on our behalf. A data processing agreement under Art. 28 GDPR is in place with the provider.
Each time our website is accessed, the web server automatically records data and stores it in log files:
- IP address of the requesting device
- date and time of the request
- page or file requested, including search terms entered in the site search
- amount of data transferred and HTTP status code
- website from which you came to us (referrer)
- browser type and version as well as operating system
The processing is necessary to deliver the website, ensure its stability and detect attacks. The legal basis is Art. 6(1)(f) GDPR. The log files are deleted or anonymised after seven days at the latest. They are not merged with other data. There is no right to object because the processing is absolutely necessary for the operation of the website.
Cookies and similar technologies
Our website does not set cookies and does not store any information in your browser’s storage (for example local storage) that is not strictly necessary. Consent under section 25 TDDDG is therefore not required.
Audience measurement with WP Statistics
To understand which content interests our visitors, we use the WordPress plugin WP Statistics. It runs entirely on our own server. Data is not passed on to third parties and not merged with other data.
- No cookies are set.
- IP addresses are not stored.
- Only statistical information such as the page viewed, time, referrer, browser type, operating system and device type is evaluated. It cannot be attributed to any person.
The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is to improve the website based on how it is used. You can object to the evaluation at any time (see “Right to object”).
Contact forms
On the Contact page we offer two forms: the “General message” and the “Pump enquiry”. The data we collect depends on the form:
- General message: name, email address, subject, message and, optionally, company, telephone number and department.
- Pump enquiry: company, contact person, telephone number, email address and, optionally, address and the technical details of your pumping task (operating conditions, pumped medium, application and installation site, further information).
Your details are sent by email to the responsible department at MARCH PUMPEN and used there exclusively to process your message or enquiry. We do not store the form data in the website’s database. We obtain your consent before you send the form.
The legal basis is your consent (Art. 6(1)(a) GDPR) and, if your enquiry aims at a contract, the performance of pre-contractual measures (Art. 6(1)(b) GDPR). You can withdraw your consent at any time with effect for the future, for example by email to datenschutz@march-pumpen.com.
We delete your details as soon as your matter has been finally resolved. If the enquiry leads to a contract, we keep the documents in accordance with the statutory retention periods.
To protect the forms from misuse, we process technical data for a short time (see “Spam protection with Altcha”).
Spam protection with Altcha
Our forms are protected against automated access (spam) with the WordPress plugin Altcha. The plugin runs on our own server. When you submit the form, your browser solves a small computing task; no cookies are set, there is no connection to external servers and no data is passed on to third parties.
To prevent misuse, we also store the following:
- an irreversibly encrypted value (hash) of your IP address, which limits the number of submission attempts; it is deleted after 24 hours at the latest,
- event logs of the spam protection with a shortened (anonymised) IP address; they are deleted after seven days.
The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the security of our systems and protection against spam.
Contact by email or telephone
If you contact us by email, telephone or fax, we process your details (for example name, contact details and the content of your message) in order to answer your enquiry. The legal basis is Art. 6(1)(b) GDPR if your enquiry is related to a contract, otherwise Art. 6(1)(f) GDPR. We delete the data as soon as your matter is resolved and no retention obligations apply.
Applications and unsolicited applications
If you apply to us, including unsolicited, we process the data you submit (for example contact details, information about your career and the content of your documents) in order to decide on employment. The legal basis is section 26 of the Federal Data Protection Act (BDSG) and Art. 6(1)(b) GDPR. Application documents are only viewed by the persons involved in the process. After the process has ended, we delete your data after six months unless you expressly agree to longer storage.
Embedded videos (YouTube, two-click solution)
On some pages we embed videos from YouTube. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. We use the more privacy-friendly variant (youtube-nocookie.com) and a two-click solution:
- When you open the page, there is no connection to YouTube. You only see a placeholder with the “Load video” button.
- Only when you click do you load the video. Your IP address is then transmitted to YouTube, and YouTube receives the information about which of our pages you are visiting. In addition, information may be stored on or read from your device. If you are logged in to Google, the request can be attributed to your account.
The legal basis is your consent by clicking “Load video” (Art. 6(1)(a) GDPR, section 25(1) TDDDG). If you do not click, nothing is transmitted. A transfer of data to the USA is based on the European Commission’s adequacy decision on the EU-U.S. Data Privacy Framework. Information on data processing by Google can be found in Google’s privacy policy.
Fonts, icons and other content
Fonts, icons and scripts (for example Barlow) are loaded from our own server. No data is transmitted to external providers in the process. We do not use Google Fonts, Google Maps or social media plugins.
Site search
When you search on our website, your browser sends the search term to our server in order to display results. We do not link the search term to you personally. It only appears in the server log files described above.
External links
Our website contains links to third-party websites. If you follow a link, you leave our website. The respective operator is responsible for data processing on the linked pages.
Recipients of your data
We only pass on your data where this is necessary for the stated purposes or where there is a legal obligation. Recipients are in particular service providers acting on our behalf and bound by instructions: the hosting provider, the email delivery service provider and the agency that looks after the website. Data processing agreements under Art. 28 GDPR are in place with them. Data is only transferred to countries outside the EU and the EEA when YouTube videos are loaded after your click.
Data security
Transmission between your browser and our website is encrypted (TLS/HTTPS). We take technical and organisational measures to protect your data against loss, destruction and unauthorised access. Employees and service providers are obliged to maintain confidentiality and to comply with data protection.
Please note: emails can be read or altered in transit if they are not encrypted. If you want to send sensitive data, please agree a suitable form of encryption with us beforehand. Our email systems use a spam filter that may wrongly reject emails in individual cases.
Your rights
You have the following rights against us as the controller:
- access to the data we process about you (Art. 15 GDPR),
- rectification of inaccurate data (Art. 16 GDPR),
- erasure of your data (Art. 17 GDPR),
- restriction of processing (Art. 18 GDPR),
- transfer of your data in a structured, commonly used and machine-readable format (Art. 20 GDPR),
- withdrawal of consent given, with effect for the future (Art. 7(3) GDPR). The lawfulness of processing carried out until the withdrawal remains unaffected.
To exercise your rights, an informal message to datenschutz@march-pumpen.com or to the address given above is sufficient. There is no automated decision-making, including profiling, under Art. 22 GDPR.
Right to object
Where we process data on the basis of our legitimate interest (Art. 6(1)(f) GDPR), you have the right to object to this processing at any time on grounds relating to your particular situation (Art. 21 GDPR). We will then no longer process the data unless we can demonstrate compelling legitimate grounds that override your interests, or the processing serves the establishment, exercise or defence of legal claims.
Right to lodge a complaint with the supervisory authority
You have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your data infringes the GDPR (Art. 77 GDPR). The authority responsible for us is:
The Hessian Commissioner for Data Protection and Freedom of InformationGustav-Stresemann-Ring 1
65189 Wiesbaden
Phone: +49 (0) 611 / 1408 – 0
Email: poststelle@datenschutz.hessen.de
Internet: datenschutz.hessen.de
Currency and changes to this policy
This privacy policy is current as of October 2026. If our website or the legal requirements change, we will adapt it. The current version can always be found on this page.