Privacy policy

1. Controller

The controller responsible for data processing on this website is:
TOP Asia Technik GmbH
Lutherstraße 58
07743 Jena
represented by the managing directors Robert Schaller, Erik Schütze
Phone: 03641 9286337 · Email: info@top-asia-technik.com

No data protection officer has been appointed, as there is no legal obligation to do so (Art. 37 GDPR, Section 38 BDSG – German Federal Data Protection Act). If you have any questions about data protection, please use the contact details above.

2. Overview

We process personal data only insofar as this is necessary to operate this website, to answer your enquiries or to initiate and perform contracts. We use no analytics, tracking or advertising tools and do not embed any third-party content (e.g. Google Fonts, maps, videos, social media plugins). Fonts are loaded locally from our own web server; no connection to third-party servers is established.

No automated decision-making, including profiling (Art. 22 GDPR), takes place. You are under no statutory or contractual obligation to provide us with personal data; however, without your contact details we cannot answer an enquiry.

3. Hosting and server log files

This website is hosted by STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany. When you access the website, information transmitted by your browser is automatically recorded in server log files: IP address, date and time of access, page or file accessed, amount of data transferred, referrer (previously visited page), browser type and version, and operating system. This data is not combined with other data sources.

Processing is based on Art. 6(1)(f) GDPR; our legitimate interest lies in providing the website securely, stably and without errors and in defending against attacks. The log files are automatically deleted by the hosting provider after a short period unless they are needed to investigate a security incident.

We have concluded a data processing agreement with STRATO pursuant to Art. 28 GDPR. STRATO processes the data exclusively in accordance with our instructions and in data centres in Germany.

For security reasons, this website uses SSL/TLS encryption. You can recognise an encrypted connection by “https://” and the padlock symbol in your browser’s address bar.

4. Cookies

This website does not set any cookies for visitors for analytics or advertising purposes. Technically necessary cookies are only created when logging in to the administration area (editorial team). A consent request (cookie banner) is therefore not required (Section 25(2) TDDDG – German Telecommunications Digital Services Data Protection Act).

5. Enquiry and contact forms

For our enquiry and contact forms we use the WordPress plugin Contact Form 7. If you write to us via a form, we process the data you enter (e.g. name, company, email address, phone number, information on the part, quantities, dates) as well as uploaded files (e.g. drawings, 3D models) in order to handle your enquiry and prepare a quotation. The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures at your request) or, for general enquiries, Art. 6(1)(f) GDPR (legitimate interest in answering enquiries).

After submitting, you receive an automatic confirmation of receipt at the email address you provided. It contains a summary of your details so that you can keep track of your enquiry. The form data and files are transmitted to us by email and then deleted from the web server.

We store your enquiry in our mailbox for as long as necessary to process it. If no order results, we delete the enquiry and files no later than 12 months after the last contact, unless statutory retention obligations prevent this. If an order results, the retention periods under commercial and tax law apply (see section 6).

To prepare a quotation and for production, we pass drawings and technical information on to selected manufacturing partners, in particular in China as well as in the Czech Republic and the United Kingdom. Before being passed on, drawings and documents are always neutralised: your company name, logo, contact details and names of contact persons are removed. The manufacturing partners are bound to confidentiality; resale of your parts to third parties is contractually excluded.

The GDPR applies directly in the Czech Republic. For the United Kingdom, there is an adequacy decision of the EU Commission (Art. 45 GDPR). There is no adequacy decision for China. Since we neutralise the documents before passing them on, as a rule no personal data is transferred there. Where personal data is nevertheless affected in an individual case (e.g. names in a drawing title block), we base the transfer on Art. 49(1)(b) GDPR, as it is necessary for the implementation of pre-contractual measures at your request or for the performance of the contract, or on EU Commission standard contractual clauses agreed with the partners (Art. 46(2)(c) GDPR).

To protect against spam, the form is secured by technical measures (hidden field, time check); no data is transmitted to third parties in the process. Contact Form 7 itself does not set any cookies and does not transmit any data to the plugin developer.

Requesting documents (downloads): We provide some documents (e.g. checklists, company profile, master data sheet) after you enter your name and email address; the phone number is optional. You choose whether the document is downloaded directly and/or sent by email. Your details are transmitted by email to the responsible member of our staff so that we can track who requested which document and – only if you expressly consent – contact you about your request. The legal basis is Art. 6(1)(b) GDPR (provision of the requested document) or, for contacting you, your consent pursuant to Art. 6(1)(a) GDPR, which you can withdraw at any time with effect for the future. The data is not stored in a website database; we delete the emails no later than 12 months after the last contact unless a business relationship arises. To protect against misuse, your IP address is temporarily stored in encrypted (hashed) form to limit the number of requests and is automatically deleted after one hour at the latest.

6. Contact by email or phone

If you contact us by email or phone, we process your details to handle your request (Art. 6(1)(b) or (f) GDPR). For enquiries that do not result in an order, the 12-month deletion period stated in section 5 applies.

We retain business correspondence on quotations and orders as well as invoices in accordance with the retention obligations under commercial and tax law (Section 257 HGB – German Commercial Code, Section 147 AO – German Fiscal Code; 6 or 8 years depending on the type of document). The legal basis in this respect is Art. 6(1)(c) GDPR.

To process orders, we pass on data only where necessary, e.g. delivery address and contact person to freight forwarders and customs service providers, and accounting data to our tax advisers.

7. Your rights

You have the right of access to the data stored about you (Art. 15 GDPR), to rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21 GDPR). You can withdraw any consent given at any time with effect for the future (Art. 7(3) GDPR). An informal message to info@top-asia-technik.com is sufficient to exercise your rights.

Right to object: Where we process data on the basis of Art. 6(1)(f) GDPR, you may object at any time on grounds relating to your particular situation.

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is the Thüringer Landesbeauftragte für den Datenschutz und die Informationsfreiheit (TLfDI – Thuringian State Commissioner for Data Protection and Freedom of Information), Häßlerstraße 8, 99096 Erfurt, Germany, www.tlfdi.de.

8. Storage period and data security

We store personal data only for as long as is necessary for the respective purpose or as required by statutory retention periods. The data is then deleted or, if deletion is not yet possible due to legal obligations, its processing is restricted.

We take appropriate technical and organisational measures to protect your data against loss, manipulation and unauthorised access, and adapt them to the state of the art.

9. Updates

Last updated: October 2026. We update this privacy policy when the website, our processing activities or the legal situation change. The version published on this page at any given time applies.