As of: July 2026
The controller within the meaning of the General Data Protection Regulation (GDPR) and other data protection provisions is:
Track Concepts B.V.
Keizersgracht 520
1017 EK Amsterdam
Netherlands
KVK: 94281537
Director: R. van der Berg
Email: [email protected]
The appointment of a data protection officer is not required under Art. 37 GDPR, because as a rule fewer than 20 people in our company are constantly engaged in the automated processing of personal data. For data protection questions you can contact the email address given above at any time.
When you access our website, the browser used on your device automatically sends the following information to our website server, where it is stored temporarily in what are known as server log files:
The data mentioned is processed for the following purposes: ensuring a smooth connection to the website, ensuring comfortable use of our website, evaluating system security and stability, and for further administrative purposes.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest). Our legitimate interest arises from the purposes of data collection listed above, in particular the security and stability of our website.
Retention period: The data is deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. Where data is collected to provide the website, this is the case when the session in question has ended. Server log files are deleted automatically after 7 days at the latest.
When you send us inquiries via the contact form, your details from the inquiry form, including the contact data you provide there, are stored with us for the purpose of processing the inquiry and in case of follow-up questions. The following data is collected:
We do not pass this data on without your consent.
Legal basis: Art. 6(1)(b) GDPR (performance of pre-contractual measures taken at the request of the data subject). To the extent that your inquiry does not relate to the conclusion of a contract, the legal basis is Art. 6(1)(f) GDPR (legitimate interest in handling inquiries addressed to us effectively).
Retention period: The data you enter in the contact form remains with us until you ask us to delete it, withdraw your consent to storage, or the purpose for storing the data ceases to apply. Mandatory statutory provisions — in particular retention periods — remain unaffected.
Our website uses exclusively technically necessary cookies. These are small text files that your browser creates automatically and that are stored on your device when you visit our website.
Technically necessary cookies are exempt from the consent requirement under Section 25(2) TTDSG (the German act on data protection in telecommunications and digital services), because they are strictly necessary for the operation of the website. These cookies cannot be disabled.
We use no tracking cookies, analytics cookies or advertising cookies without your prior express consent. Where applicable, such consent is obtained via our cookie consent banner.
Legal basis for technically necessary cookies: Section 25(2) TTDSG in conjunction with Art. 6(1)(f) GDPR.
Legal basis for optional cookies: Art. 6(1)(a) GDPR (consent).
Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter “Google”).
Purpose: We use Google Ads conversion tracking to measure the effectiveness of our advertising campaigns. When you click an ad served by Google, a conversion tracking cookie is stored on your device. These cookies expire after 30 days and are not used for personal identification.
If you visit certain pages of our website and the cookie has not yet expired, Google and we can recognise that you clicked the ad and were forwarded to this page. Each Google Ads customer receives a different cookie. The information obtained via conversion cookies is used to compile conversion statistics for Ads customers who have opted for conversion tracking.
Legal basis: Art. 6(1)(a) GDPR (consent). The conversion tracking cookie is only set if you have given your consent via our cookie consent banner. You may withdraw your consent at any time with effect for the future.
Data transfer to third countries: Google may transfer collected data to the USA. The transfer takes place on the basis of the EU-US Data Privacy Framework (DPF). Further information can be found in Google's privacy policy: https://policies.google.com/privacy.
If a payment obligation exists after conclusion of the contract, we use an external payment service provider to process payments. Your payment data (e.g. credit card number, bank details) is transmitted directly to the payment service provider and processed there.
We ourselves do not store complete credit card or bank details on our servers at any time. From the payment service provider we receive only confirmation of the success or failure of the payment and, where applicable, a transaction ID for reconciliation.
Legal basis: Art. 6(1)(b) GDPR (performance of a contract). Processing of payment data is necessary to perform the contract concluded between you and us.
Our company has its registered office in the Netherlands, a Member State of the European Union. We do not transfer personal data to a third country outside the European Economic Area. Insofar as a transfer to a third country takes place in connection with the services mentioned above (e.g. Google Fonts), it is based on an adequacy decision of the European Commission under Art. 45 GDPR or on EU Standard Contractual Clauses under Art. 46(2)(c) GDPR.
Protective measures: Insofar as personal data is transferred to recipients in third countries not covered by the DPF adequacy decision, we ensure through appropriate safeguards that the rights of the data subjects are adequately protected. To this end we conclude EU Standard Contractual Clauses under Art. 46(2)(c) GDPR.
In exceptional cases, the transfer may be based on your express consent under Art. 49(1)(a) GDPR. In that case you will be informed of the possible risks before the transfer.
You have the following rights in relation to the controller regarding your personal data:
To exercise your rights, please contact us by email at: [email protected]. We will handle your request without delay, and within one month at the latest.
Without prejudice to any other administrative or judicial remedy, you have the right under Art. 77 GDPR to lodge a complaint with a data protection supervisory authority if you consider that the processing of your personal data infringes the GDPR.
You can exercise this right with a supervisory authority in the Member State of your residence, your place of work or the place of the alleged infringement. A list of the data protection supervisory authorities in Germany can be found at: https://www.bfdi.bund.de.
We reserve the right to adapt this privacy policy to bring it into line with changes in the law or with changes to the service or to data processing. This applies, however, only with regard to statements about data processing. Where consents are required or parts of the privacy policy contain provisions governing the contractual relationship with users, changes are made only with the users' agreement.
The version in force at any time is always available on this page. Please check the content of our privacy policy regularly.
As of: July 2026