Privacy Policy

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

Cofuel GmbH

Heinrich-Brauns-Weg 62

31131 Hildesheim

Deutschland

maillink

2. Categories of Data Processed

In the course of operating this website, we process the following categories of data:

Usage data (e.g. pages visited, access times)
Communication data (e.g. content of contact form submissions)
Metadata (e.g. IP addresses, browser type, operating system)
Master data upon conclusion of a contract (e.g. name, company name, email address)

3. Purposes and Legal Bases of Processing

We process personal data for the following purposes:

Provision and optimisation of this website (Art. 6(1)(f) GDPR — legitimate interest)
Handling of contact enquiries (Art. 6(1)(b) GDPR — initiation of a contract / pre-contractual measures)
Compliance with legal obligations (Art. 6(1)(c) GDPR)

4. Hosting and Technical Infrastructure

4.1 Website Hosting (Webflow)

This website is provided via the platform of Webflow, Inc., 398 11th Street, 2nd Floor, San Francisco, CA 94103, USA (hereinafter "Webflow"). When the website is accessed, Webflow automatically collects log data (so-called server log files), including the IP address, date and time of access, page accessed, volume of data transferred, browser type and operating system. This processing serves the technically secure and stable operation of the website and is carried out on the basis of Art. 6(1)(f) GDPR (legitimate interest in a functional and secure website). The log data is stored only for as long as is necessary for these purposes.

4.2 Domain and Email (Strato)

The domain cofuel.de and our email accounts are operated by Strato AG, Pascalstraße 10, 10587 Berlin, Germany (hereinafter "Strato"). In this context, Strato processes the data arising from the resolution of the domain as well as from the receipt and sending of emails (including sender and recipient addresses as well as the content and metadata of the message). The legal basis is Art. 6(1)(f) GDPR (legitimate interest in the operation of a functional domain and email service) or, in the case of contract-related communication, Art. 6(1)(b) GDPR. A data processing agreement pursuant to Art. 28 GDPR has been concluded with Strato.

5. Contact Form

We provide a contact form on our website. If you submit an enquiry through it, we process the data you enter — name, email address and the content of your enquiry — in order to handle your request and for any follow-up questions. The technical transmission of the form is handled by our website service provider Webflow (see Section 4.1); your enquiry is then delivered to us by email via Strato (see Section 4.2). No disclosure to any other third parties takes place.

The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures) insofar as your enquiry is aimed at concluding a contract, and otherwise Art. 6(1)(f) GDPR (legitimate interest in responding to business enquiries). The data is deleted once your enquiry has been conclusively dealt with and no statutory retention obligations preclude deletion.

6. Cookies

This website uses only technically necessary cookies that are required for the provision and the basic functions of the site (in particular cookies set by the Webflow platform to ensure technical operation and the form functionality). These cookies are set on the basis of Section 25(2) no. 2 TDDDG (the German Telecommunications Digital Services Data Protection Act); as they are strictly necessary for operation, no consent is required for them. The associated processing of personal data is based on Art. 6(1)(f) GDPR.

We do not use any analytics, tracking or marketing cookies, and we do not integrate any web analytics or reach-measurement services. You can configure your browser to reject or delete cookies; individual functions of the website may be impaired as a result.

7. Data Protection Officer

We are not legally required to appoint a data protection officer. For any questions regarding data protection, you can reach us using the contact details provided in Section 1.

8. Automated Decision-Making

No automated decision-making, including profiling, within the meaning of Art. 22 GDPR takes place via this website.

9. No Newsletter

This website does not use any newsletter services. No automated email marketing communication takes place.

10. No User Accounts

This website does not offer registration or user accounts for end users. No passwords or personal profiles are stored.

11. Disclosure of Data to Third Parties

Your personal data is disclosed to third parties only where this is necessary for the performance of a contract, where you have expressly consented, where there is a legal obligation, or where there is a legitimate interest pursuant to Art. 6(1)(f) GDPR. All service providers engaged (website hosting, domain/email) are contractually bound as processors pursuant to Art. 28 GDPR.

12. Your Rights as a Data Subject

You have the following rights with respect to your personal data:

Right of access (Art. 15 GDPR)
Right to rectification (Art. 16 GDPR)
Right to erasure (Art. 17 GDPR)
Right to restriction of processing (Art. 18 GDPR)
Right to data portability (Art. 20 GDPR)
Right to object (Art. 21 GDPR)
Right to withdraw consent given (Art. 7(3) GDPR)

To exercise your rights, please contact us at the address given above. You also have the right to lodge a complaint with a data protection supervisory authority. The competent supervisory authority for Cofuel GmbH is the State Commissioner for Data Protection of Lower Saxony (Landesbeauftragte für den Datenschutz Niedersachsen).

13. Changes to this Privacy Policy

We reserve the right to amend this privacy policy in the event of changes to the legal framework or the services used. The current version is available on this website at all times.

Last updated: July 2026.

Note: This English text is a translation provided for convenience. The legally binding version is the German privacy policy ("Datenschutzerklärung"). In the event of any discrepancy, the German version prevails.