Last updated: November 2026
1. Controller
The controller responsible for data processing on this website is Vielhauer GmbH, Siemensstraße 11a, 51381 Leverkusen, Germany, represented by its managing directors Julian Vielhauer and Jasper von Flotow. IsoTec is a brand of Vielhauer GmbH. Phone: +49 2236 322450, e-mail: info@isotec.bio. You can also contact us at this address with any questions about data protection.
2. Principles and legal bases
We only process personal data where this is necessary to operate this website, to answer your enquiries and to prepare or perform business relationships, or where you have given your consent. The legal bases are Art. 6(1)(a) GDPR (consent), (b) (contract and pre-contractual measures), (c) (legal obligation) and (f) (legitimate interests). Storing information on your device or accessing it is additionally governed by Section 25 of the German Telecommunications Digital Services Data Protection Act (TDDDG): access that is not technically necessary only takes place with your consent (Section 25(1) TDDDG); technically necessary access takes place without consent (Section 25(2) no. 2 TDDDG).
3. Hosting and server log files
This website is hosted by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany, on servers in Germany. Each time a page is accessed, the server automatically processes data transmitted by your browser: IP address, date and time of access, page accessed, previously visited page (referrer), browser type and operating system. This is technically necessary to deliver the website and to ensure its security and stability (Art. 6(1)(f) GDPR). The log files are only stored for as long as necessary for these purposes and are then deleted. IONOS processes the data on our behalf under a data processing agreement pursuant to Art. 28 GDPR.
4. Encryption
This website is delivered exclusively via an encrypted HTTPS connection (TLS), so that data you send to us cannot be read by third parties.
5. Contact form and quote requests
If you contact us by e-mail, phone or via one of our forms, we process your details in order to answer your enquiry. The legal basis is Art. 6(1)(b) GDPR if your enquiry relates to a contract, and otherwise our legitimate interest in answering business enquiries (Art. 6(1)(f) GDPR).
Contact form: We transfer your name, company, e-mail address, phone number, country, subject and message to our customer relationship management system Freshsales and additionally send them by e-mail to our mailbox. Freshsales is a service of Freshworks Inc., 2950 S. Delaware Street, Suite 201, San Mateo, CA 94403, USA. We have concluded a data processing agreement with Freshworks pursuant to Art. 28 GDPR. Data may also be processed in third countries such as the USA; this is based on the safeguards pursuant to Art. 46 GDPR agreed in the data processing agreement.
Quote requests: Via the “Request a Quote” form you send us your name, e-mail address, the products you are interested in and your message, together with the page from which you opened the form. We send these details by e-mail to our mailbox; they are not stored in the database of this website.
We operate our e-mail mailboxes with Microsoft 365 from Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland, under a data processing agreement pursuant to Art. 28 GDPR. To protect against spam, we check submissions automatically on our own server, for example using an invisible control field and the time of submission; no data is passed on to other third parties for this. We delete your details once your enquiry has been dealt with, unless statutory retention obligations (e.g. for business letters under commercial and tax law) apply or your enquiry leads to a business relationship.
6. Cookies and consent management
We use the plugin Complianz to manage your consents. It runs on our own server; no data is transmitted to its developer. On your first visit we ask whether you agree to statistics services and external media. We store your choice in cookies (e.g. cmplz_*) so that we can take it into account on later visits and demonstrate your consent (Art. 6(1)(c) in conjunction with Art. 7(1) GDPR; Section 25(2) no. 2 TDDDG).
Without your consent we only use technically necessary cookies. You can withdraw or change your consent at any time with effect for the future:
7. Google Analytics (only with your consent)
If you consent to the “Statistics” category, we use Google Analytics 4, a web analytics service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Without your consent, Google Analytics is not loaded and no data is transferred to Google.
Google Analytics helps us understand how our website is used so that we can improve our content and offering. In particular, pages viewed, time spent, the origin of the visit (e.g. search engine), approximate location (country, region, city) and information about device, browser and screen resolution are processed. For this purpose the cookies _ga and _ga_* are set with a lifetime of up to two years. According to Google, Google Analytics 4 does not log or store IP addresses. We have not activated Google signals or advertising features. The retention period for user- and event-level data in Google Analytics is set to a maximum of 14 months.
It cannot be ruled out that data is transferred to Google LLC in the USA. Google LLC is certified under the EU-US Data Privacy Framework, for which the European Commission adopted an adequacy decision on 10 July 2023. We have concluded a data processing agreement with Google.
The legal basis is your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG). You can withdraw it at any time with effect for the future: Further information: Google Privacy Policy.
8. Vimeo videos (only with your consent)
On some pages we embed videos from the Vimeo service, provided by Vimeo.com, Inc., 330 West 34th Street, 10th Floor, New York, NY 10001, USA. A video is only loaded once you consent to the “External media” category, for example via the button in the video placeholder; before that, no connection to Vimeo is established. After that, Vimeo receives technical data such as your IP address, information about your browser and device and the page visited, and may use cookies or similar technologies on your device. Vimeo is certified under the EU-US Data Privacy Framework. The legal basis is your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG), which you can withdraw at any time. Further information: Vimeo Privacy Policy.
9. Google Maps (only with your consent)
On some pages we embed maps from Google Maps, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. A map is only loaded once you consent to the “External media” category; before that, no connection to Google is established. After that, Google receives technical data such as your IP address and may set cookies. Data may be transferred to Google LLC in the USA; Google LLC is certified under the EU-US Data Privacy Framework. The legal basis is your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG).
10. Fonts
All fonts on this website are hosted locally on our server. When you access our pages, no connection is established to servers of Google or other font providers.
11. Links to other websites
Our pages contain links to other websites, for example to the imprint of Vielhauer GmbH. Data is only transferred to the respective provider when you click such a link. Their privacy policy then applies.
12. Storage period
Unless a more specific period is stated in this policy, we only store personal data for as long as is necessary for the respective purpose or required by statutory retention periods (in particular six or ten years under Section 257 of the German Commercial Code and Section 147 of the German Fiscal Code). The data is then deleted or its processing restricted.
13. Your rights
You have the right to access the data we hold about you (Art. 15 GDPR), to rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). You can withdraw consent at any time with effect for the future (Art. 7(3) GDPR). To do so, simply contact info@isotec.bio.
Right to object (Art. 21 GDPR): Where we process data on the basis of legitimate interests (Art. 6(1)(f) GDPR), you may object to this processing at any time on grounds relating to your particular situation. We will then no longer process the data unless we can demonstrate compelling legitimate grounds that override your interests, or the processing serves the establishment, exercise or defence of legal claims.
You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (LDI NRW), Kavalleriestraße 2–4, 40213 Düsseldorf, Germany, poststelle@ldi.nrw.de.
14. Further information
You are not obliged to provide us with personal data. However, without the mandatory details in the forms we cannot process your enquiry there. There is no automated decision-making, including profiling, within the meaning of Art. 22 GDPR. We update this privacy policy when our website or the legal requirements change. The version published here applies.