Legal

Privacy Policy

This Privacy Policy informs you about the nature, scope and purposes of the processing of personal data on this website (hereinafter „Website“) in accordance with the General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG) and the German Telecommunications and Digital Services Data Protection Act (TDDDG).

1. Controller

The controller responsible for data processing on this website is:

Raasch & Menneke GmbH
Offroad Manufaktur Hamburg
Lademannbogen 9
22339 Hamburg
Germany

Represented by the Managing Directors Florian Raasch & Grischa Menneke.
Phone: +49 (0)40 40139848
Email: mail@offroad-manufaktur.com

2. General Information and Legal Bases

Protecting your personal data is important to us. We process your data exclusively on the basis of the statutory provisions. Insofar as we obtain your consent for processing operations, Art. 6 Abs. 1 lit. a DSGVO is the legal basis. Where processing is carried out to perform a contract or to take pre-contractual measures, Art. 6 Abs. 1 lit. b DSGVO serves as the basis. We base processing carried out to fulfil legal obligations on Art. 6 Abs. 1 lit. c DSGVO. Otherwise, processing is based on our legitimate interest pursuant to Art. 6 Abs. 1 lit. f DSGVO (e.g. in a secure and functioning web presence).

3. Hosting

This website is hosted with a service provider in Germany (Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen). The personal data collected on this website is stored on the host's servers. It is used to perform our contract with prospective and existing customers (Art. 6 Abs. 1 lit. b DSGVO) and in the interest of a secure, fast and efficient provision (Art. 6 Abs. 1 lit. f DSGVO). A data processing agreement (Art. 28 DSGVO) is in place with the host.

4. Spam Protection with Cloudflare Turnstile

To protect our forms (contact and registration forms) from abusive, automated input (spam, bots), we use the "Turnstile" service from Cloudflare Inc. (101 Townsend St., San Francisco, CA 94107, USA). When you open a page containing a form, a script from Cloudflare is loaded; in the process, technical data (including your IP address, browser and device information, and interaction data) may be transmitted to Cloudflare and processed there to distinguish between human users and automated access. Turnstile works without puzzles visible to you and, according to the provider, sets no cookies for advertising purposes.

The legal basis is our legitimate interest in preventing spam and abuse and in the security and functionality of our forms (Art. 6 Abs. 1 lit. f DSGVO). This may involve a transfer of data to the USA. Cloudflare is certified under the EU-US Data Privacy Framework (DPF); in addition, EU Commission Standard Contractual Clauses (Art. 46 DSGVO) are in place. A data processing agreement is in place with Cloudflare. Further information: cloudflare.com/de-de/privacypolicy/.

5. Server Log Files

When you access this website, information is automatically recorded in what are known as server log files, which your browser transmits. These are:

  • browser type and browser version
  • operating system used
  • referrer URL
  • host name of the accessing computer
  • date and time of the server request
  • IP address

This data is not merged with other data sources. It is collected on the basis of Art. 6 Abs. 1 lit. f DSGVO; we have a legitimate interest in the technically error-free presentation and the security of our website. The data is deleted after a short time, unless it is exceptionally needed for longer to investigate security incidents.

6. Cookies

Our website currently uses only technically necessary cookies or comparable technologies that are required for the operation of the site (e.g. WordPress session cookies as well as a cookie to protect the contact form). These are exempt from consent under § 25 Abs. 2 TDDDG; the processing is based on Art. 6 Abs. 1 lit. f DSGVO. No analysis or tracking cookies are currently in use. You can set your browser so that you are informed about the setting of cookies and only allow cookies on a case-by-case basis.

7. Contact and Registration Forms

On our website we offer a contact form as well as registration forms for our events (driver training, spring outing, spanner day). If you contact us via these, we process the data you provide in order to handle your enquiry or registration. Depending on the form, this may be: name, email address, phone number, registration plate and vehicle model, preferred date, number of participants and your message.

Processing is carried out on the basis of Art. 6 Abs. 1 lit. b DSGVO, insofar as your enquiry relates to the initiation or performance of a contract (e.g. an event registration), otherwise on the basis of our legitimate interest in answering enquiries (Art. 6 Abs. 1 lit. f DSGVO) or your consent (Art. 6 Abs. 1 lit. a DSGVO). The data is deleted once processing is complete, unless statutory retention obligations prevent this. You can withdraw any consent given at any time with effect for the future.

8. Map Display with Google Maps (Consent Required)

To display our location, we use Google Maps on the contact page. The provider is Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland); Google LLC, USA, may also be responsible for the data processing.

The map is not loaded automatically. It is only embedded once you expressly consent by clicking the „Load map“ button (two-click solution). Only then is a connection to Google's servers established and your IP address, as well as possibly further data, transferred to Google, possibly also to the USA. The legal basis is your consent pursuant to Art. 6 Abs. 1 lit. a DSGVO and § 25 Abs. 1 TDDDG. Google is certified under the EU-US Data Privacy Framework; in addition, Standard Contractual Clauses are in place. Your consent is voluntary and can be withdrawn for the future (reload the page without activating the map). Further information: policies.google.com/privacy.

9. Fonts (Locally Hosted)

For a consistent appearance, this website uses the „Roboto“ font. The font files are embedded locally on our server and are delivered exclusively from there. There is no connection to Google's servers or other third parties; no personal data is transmitted to Google for the embedding of the fonts.

10. Vehicle Stock (mobile.de)

On the „Vehicles“ page, we embed the current vehicle stock via a service of mobile.de GmbH (Marktplatz 1, 14532 Europarc Dreilinden, Germany). When this display is loaded, a connection to mobile.de's servers may be established and your IP address transferred. The legal basis is our legitimate interest in presenting our offering (Art. 6 Abs. 1 lit. f DSGVO). You can find further information in mobile.de's privacy policy.

11. Links to Social Networks

On our website, we link to our profiles on Instagram and Facebook (Meta Platforms Ireland Ltd.). These are simple links, not embedded content or plugins. Data is only transferred to the networks once you click one of these links and open the respective platform. The privacy provisions of the respective provider then apply.

12. SSL/TLS Encryption

For security reasons, this website uses SSL/TLS encryption. You can recognise an encrypted connection by the padlock symbol in your browser's address bar and by the fact that the address bar begins with „https://“.

13. Your Rights

Within the scope of the statutory requirements, you have the right at any time to:

  • information about your processed personal data (Art. 15 DSGVO)
  • rectification of inaccurate data (Art. 16 DSGVO)
  • erasure of your data (Art. 17 DSGVO)
  • restriction of processing (Art. 18 DSGVO)
  • objection to processing (Art. 21 DSGVO)
  • data portability (Art. 20 DSGVO)
  • withdrawal of a given consent with effect for the future (Art. 7 Abs. 3 DSGVO)

To exercise your rights, an informal notice to the controller named above is sufficient.

14. Right to Lodge a Complaint with a Supervisory Authority

You have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is: Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit, Ludwig-Erhard-Straße 22, 20459 Hamburg, datenschutz-hamburg.de.

15. Storage Period

Insofar as no more specific storage period is stated in this Privacy Policy, your data remains with us until the purpose of the processing ceases to apply. Where statutory retention periods exist (e.g. under commercial or tax law), the data is deleted once these periods have expired.

16. Currency and Amendment of This Privacy Policy

This Privacy Policy is current as of June 2026. As our website develops or due to changed statutory or official requirements, it may become necessary to adjust it. The current version is available on this page at any time.