Privacy Policy

1. Data Controller

The controller responsible for processing your personal data on this website is:

Phone: +49 (0) 7026 66 21
Email: contact@nonwoven365.com
Website: nonwoven365.com

No Data Protection Officer has been appointed. Please direct all data protection inquiries to the contact details above; they are handled by the management.

2. Summary — What This Website Does (and Does Not) Do

This website is deliberately minimal in its data handling:

• No advertising, no tracking across sites: we do not use Google Analytics, Google Tag Manager, Facebook Pixel, LinkedIn Insight Tag, advertising networks, retargeting or profiling of any kind.
• No analytics: we do not measure visitor behaviour. No analytics service is used, and no analytics script is loaded.
• No cookies: this website sets no cookies at all. The only browser storage used is a single localStorage entry recording that you have seen our privacy notice, so that we do not show it again.
• All fonts and scripts self-hosted: Google Fonts and similar third-party libraries are served from our own domain — no requests leave to Google, Cloudflare or other third parties when you load a page.
• Personal data is only processed when you actively send us an inquiry via the contact form or email.

3. Personal Data We Collect and Our Legal Basis

3.1 Contact Form

When you submit an inquiry via our contact form, we process the following data:

• Name
• Company name (optional)
• Email address
• Phone number (optional)
• Your message

Purpose: To respond to your inquiry and, where applicable, to initiate or perform a contract or pre-contractual measures at your request.

Legal basis: Art. 6(1)(b) GDPR — processing is necessary for the performance of a contract or in order to take steps prior to entering into a contract; for inquiries that do not lead to a contract, Art. 6(1)(f) GDPR — our legitimate interest in answering business inquiries.

Is providing this data required? No. Sending us an inquiry is entirely voluntary and neither required by law nor by contract. Name and email address are the only mandatory fields, because without them we cannot reply; company and phone number are optional. If you prefer not to use the form, you are welcome to contact us by telephone or post instead. Not providing the data has no consequence other than that we cannot answer you.

Recipient: Submissions are transmitted via Netlify Forms to our hosting provider Netlify Inc., San Francisco, USA. See Section 5 for details on this transfer.

Retention: Submissions are deleted after 12 months from receipt, unless an ongoing business relationship requires longer retention (in which case statutory commercial retention periods of up to 10 years under §147 AO / §257 HGB may apply).

3.2 Email Contact

If you contact us directly by email (e.g. at contact@nonwoven365.com), the information you provide will be stored in our email system in order to process your inquiry and for follow-up communication.

Legal basis: Art. 6(1)(b) GDPR (pre-contractual / contractual) or Art. 6(1)(f) GDPR (legitimate interest in business communication).

3.3 Server and Access Logs

When you visit this website, our hosting provider (Netlify) automatically records access log data, including:

• IP address (anonymised or truncated by Netlify edge)
• Browser type and version (User-Agent string)
• Date and time of the request
• Pages requested and HTTP status codes
• Referrer URL (if your browser sends one)

Purpose: Ensuring website stability, security, abuse prevention, and diagnosing technical errors.

Legal basis: Art. 6(1)(f) GDPR — our legitimate interest in operating a secure and reliable website.

Retention: Access logs are held by Netlify under Netlify's own retention policy; we have no influence over that period and do not use these logs for tracking or profiling.

4. Cookies and Browser Storage

This website sets no cookies. The only browser-side storage used is a single localStorage entry:

This entry never leaves your device, contains no identifier and permits no recognition of you. Under §25 (2) no. 2 TTDSG it is exempt from consent, because it is strictly necessary to deliver the service you requested.

Why there is no consent banner with accept and reject buttons: a consent banner is required only where storage or access is used that is not strictly necessary — typically for analytics, marketing or personalisation. We use none of these. Asking you to consent to processing that does not take place would be misleading, so instead we display a short notice informing you of exactly this. You can call it up again at any time via Privacy notice in the footer, or directly here:

Reset and show the notice again

Using either option deletes the stored record of your acknowledgement, so you are returned to the state before any decision was made.

Should we introduce a service requiring consent in future, we will obtain your prior opt-in through a consent banner offering acceptance and rejection with equal prominence, and will update this policy accordingly.

You may configure your browser to block cookies and storage in general. This will not affect any functionality of this website.

5. Third-Party Data Processors

We engage the following processors. Each is bound by a data processing agreement under Art. 28 GDPR that forms part of the respective provider's standard terms and applies automatically on acceptance of those terms; where data is transferred outside the EEA, the EU Standard Contractual Clauses adopted under Commission Implementing Decision (EU) 2021/914 apply. A separate signed document does not exist and, under this mechanism, is not required.

No processors other than those named above receive personal data from us. When you merely load a page, no data is transmitted to Google, Meta (Facebook), LinkedIn, Cloudflare, OpenStreetMap or any advertising provider. External links — for example to LinkedIn or partner websites — transmit data to those providers only if you actively click them.

Retention periods

• Server log files: held by our hosting provider under its own retention policy and deleted automatically; we do not store copies.
• Contact form submissions and email correspondence: retained for as long as necessary to handle your inquiry and any business relationship arising from it. Where commercial or tax retention obligations apply — in particular under §147 AO and §257 HGB — the data is retained for the statutory period (6 or 10 years) and deleted thereafter.
• Privacy notice record: held in your own browser until you clear it. We keep no server-side copy.

Automated decision-making

We do not use automated decision-making or profiling within the meaning of Art. 22 (1) and (4) GDPR.

AI crawlers and language models

The public content of this website may be retrieved by crawlers operated by providers of AI systems — among others OpenAI, Anthropic, Google, Perplexity, Apple and Meta. We permit this deliberately via our robots.txt, so that our technical information remains findable in AI-assisted search.

Only content that is publicly accessible anyway is affected: product information, technical specifications and business contact details of our representatives. Contact form submissions, email correspondence and log files are never accessible to these crawlers. We have no influence over how the respective providers subsequently process retrieved content.

6. Your Rights Under the GDPR

As a data subject, you have the following rights with respect to your personal data:

• Art. 15 — Right of access: You may request confirmation of whether we process personal data about you, and obtain a copy of that data.
• Art. 16 — Right to rectification: You may request correction of inaccurate or incomplete personal data.
• Art. 17 — Right to erasure ("right to be forgotten"): You may request deletion of your personal data where no overriding legal basis for continued processing exists.
• Art. 18 — Right to restriction of processing: You may request that we restrict processing of your data in certain circumstances (e.g. while a dispute is resolved).
• Art. 20 — Right to data portability: Where processing is based on consent or a contract and carried out by automated means, you may request your data in a structured, commonly used, machine-readable format.
• Art. 21 — Right to object: Where processing is based on legitimate interests (Art. 6(1)(f) GDPR), you have the right to object at any time on grounds relating to your particular situation.
• Art. 7(3) — Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at contact@nonwoven365.com. We will respond within one month as required by Art. 12 GDPR.

Right to Lodge a Complaint (Art. 77 GDPR)

You have the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data infringes the GDPR. The supervisory authority competent for Phoenix Non Woven GmbH & Co. KG is:

7. Data Security

This website is served exclusively over HTTPS (TLS encryption) and uses HTTP Strict Transport Security (HSTS). We implement appropriate technical and organisational measures in accordance with Art. 32 GDPR to protect your personal data against unauthorised access, loss, or disclosure. Our processor Netlify is contractually obliged to maintain equivalent standards.

8. Contact for Data Protection Inquiries

For all questions, requests, or concerns relating to the processing of your personal data, please contact:

Phoenix Non Woven GmbH & Co. KG
Adolf-Scheufelen-Str. 33, 73252 Lenningen, Germany
Email: contact@nonwoven365.com
Phone: +49 (0) 7026 66 21

9. Changes to This Privacy Policy

We may update this privacy policy from time to time to reflect changes in our practices, technology, or legal requirements. The current version is always available at https://nonwoven365.com/privacy/. Material changes will be indicated by an updated "last updated" date.

Last updated: September 2026