Skip to content

Legal

Privacy policy

We only process personal data where this is necessary to run this website and handle your enquiries. Here you can find out which data that is and what rights you have. This English version is provided for convenience; only the German version is legally binding.

1. Controller

Gashi Holding GmbH
Peter-Sander-Straße 43b
55252 Mainz-Kastel
Germany

Represented by the Managing Director Ardonis Gashi
Email: ag@gashi-holding.com

2. Overview

This website uses technically necessary cookies and similar storage technologies. We only use cookies for statistics and marketing if you have consented beforehand. We do not embed third-party content such as map services, video platforms or external font services. Personal data is processed when you visit the website, for visitor statistics, for enquiries via the contact form and as part of your cookie consent.

3. Hosting and server log files

This website is provided via the website platform Modulify, operated by Azwedo L.L.C. When you visit the website, the provider processes on our behalf the technically necessary data your browser transmits, in particular IP address, date and time of access, the page visited, the previously visited page, and browser and operating system.

This processing is necessary to deliver the website and to ensure its security and stability. The legal basis is Art. 6 (1) (f) GDPR; our legitimate interest lies in the secure and error-free operation of the website. Server log files are deleted automatically by the provider after a limited period.

The website, its database and the uploaded files, including their backups, are run on servers in Frankfurt am Main, Germany. The provider processes this data exclusively on our behalf and according to our instructions within the meaning of Art. 28 GDPR.

4. Cookieless visitor statistics

To understand how our website is used, we use the platform's built-in visitor statistics. They work without cookies and record page views, the referring source, the country, and browser, operating system and device type. No user profiles are created across different websites.

The legal basis is Art. 6 (1) (f) GDPR; our legitimate interest lies in improving our website.

5. Contact form

If you write to us via the contact form, we process your topic, your name, your email address, optionally your company and your message in order to handle and answer your enquiry. The details are stored in this website's database and also delivered to us via the platform's email service.

To prevent misuse, your IP address is briefly processed in memory to limit the number of requests per sender. It is not stored permanently.

The legal basis is Art. 6 (1) (b) GDPR where your enquiry concerns a contract or pre-contractual measures, and otherwise Art. 6 (1) (f) GDPR; our legitimate interest lies in answering your enquiry. We delete the data once your enquiry has been fully dealt with and no statutory retention obligations apply.

6. Contact by email

If you email us, we process the details in your message in order to deal with your request. The legal basis and storage period are the same as for the contact form.

7. Fonts

The fonts used are loaded directly from our website. No connection to servers of Google or other font providers is made when you visit the website.

8. Cookies and consent

Cookies are small text files stored on your device when you visit a website. We treat similar technologies such as your browser's local storage in the same way. We distinguish two groups:

  • Necessary: storage without which the website does not work as intended, in particular storing your cookie choice. The legal basis is § 25 (2) no. 2 TDDDG and Art. 6 (1) (c) and (f) GDPR; our legitimate interest lies in documenting and respecting your decision.
  • Statistics and marketing: cookies with which we analyse the use of the website or measure the impact of advertising. We only use them with your consent (§ 25 (1) TDDDG, Art. 6 (1) (a) GDPR). The corresponding services are not loaded until you consent.

On your first visit, a notice asks you which groups you want to allow. You can allow all, use only the necessary ones or choose individually. We store your choice for twelve months in your browser's local storage; after that we ask again.

You can change or withdraw your consent at any time with effect for the future via the “Cookie settings” link at the bottom of every page. The lawfulness of processing carried out before the withdrawal remains unaffected.

Specifically, we use the following services, each only with your consent to the group named:

  • Google Analytics (statistics): provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics evaluates how visitors use the website, such as pages viewed, time spent and origin. Your IP address is shortened in the process. Cookies: “_ga” and “_ga_*”, stored for up to 2 years.
  • Google Ads conversion tracking (marketing): also provided by Google Ireland Limited. The service measures whether a visit came from one of our ads and led to an enquiry. Cookies: for example “_gcl_au”, stored for up to 90 days.
  • Meta Pixel (marketing): provided by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland. The pixel measures the impact of our advertising on Facebook and Instagram and makes it possible to show visitors of this website relevant ads there. Cookies: for example “_fbp”, stored for up to 90 days.

Google and Meta may also process the data on servers in the USA. Both companies are certified under the EU-US Data Privacy Framework; the transfer is based on the European Commission's adequacy decision (Art. 45 GDPR). For the Meta Pixel, we are joint controllers with Meta (Art. 26 GDPR) as far as the collection and transmission of the data are concerned; the agreement can be found at facebook.com/legal/controller_addendum.

9. Recipients and transfers to third countries

Apart from us, the recipients of your data are the technical service providers named above, who act on our behalf. The website is run in Frankfurt am Main. For the operation of the website itself, we do not transfer any personal data to countries outside the European Union or the European Economic Area.

Where a service you have consented to processes data outside the EU or the EEA, we state this in section 8 together with the legal basis for the transfer.

10. Your rights

Within the statutory framework, you have the right at any time to:

  • access the data we hold about you (Art. 15 GDPR)
  • rectification of inaccurate data (Art. 16 GDPR)
  • erasure of your data (Art. 17 GDPR)
  • restriction of processing (Art. 18 GDPR)
  • data portability (Art. 20 GDPR)
  • withdraw consent given, with effect for the future (Art. 7 (3) GDPR)
  • lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), for example the Hessian Commissioner for Data Protection and Freedom of Information

Right to object: where we process data on the basis of Art. 6 (1) (f) GDPR, you can object to this processing at any time on grounds relating to your particular situation (Art. 21 GDPR).

An informal message is enough to exercise your rights, for example via our contact form.

11. Data security

This website uses an encrypted connection (TLS). You can recognise it by “https://” and the lock icon in your browser's address bar.

12. Changes to this privacy policy

We update this privacy policy whenever the website or the legal requirements change. The version published here applies.

Last updated: November 2026