Data Protection

Data protection information of tohacon GmbH

With this data protection declaration, we inform you about which personal data we collect within the framework of your use of our homepage, which can be accessed at, and for what purpose the data and any personal data collected for order processing are used. You can access and print this information at any time at

Responsible person/contact


Responsible body in the sense of the data protection laws is:

tohacon GmbH

represented by the managing director Carsten Halle

Bergweg 82

71134 Aidlingen


If you have any questions or suggestions regarding data protection, you are welcome to contact us by e-mail at

Subject of data protection


Subject of data protection are personal data. According to Art. 4 No. 1 DSGVO, this is all information relating to an identified or identifiable natural person; identifiable is a natural person who can be identified directly or indirectly, in particular by assignment to an identification such as a name, an identification number, location data, an online identification or to one or more special characteristics that express the physical, physiological, genetic, psychological, economic, cultural or social identity of this natural person.

Collection and use of your data


web server log files

We automatically collect and store information in so-called server log files. This also includes information that your browser transmits to us. These are:

  • browser type/ browser version
  • operating system used
  • Referrer URL
  • host name of the accessing computer
  • Time of the server request

This data cannot be assigned to specific persons, in particular because the IP addresses have been made anonymous. These data are not combined with other data sources. This data is only accessed if there are reasonable indications for suspecting attacks on our infrastructure or for troubleshooting purposes. In this case we also reserve the right to temporarily deactivate the anonymization of IP addresses.

We collect this data on the basis of our legitimate interest in the secure and error-free operation of our server infrastructure, the prevention of abuse and the prosecution of criminal offences, whereby we have come to the conclusion that your rights and interests in the protection of your personal data do not outweigh (Art. 6 Para. 1 lit. f DSGVO).

Provision of the desired goods, work or services

When you order goods, work or services from us, we use the personal data you provide on the order form or the relevant contract or order form (usually the following information or part of it: Your name, your (e-mail) address, your telephone number, name and address of your company, your job title or role as well as details of the goods, work or service ordered) exclusively for processing your order or for providing the desired goods, work or services. This may include carrying out the necessary steps prior to signing the contract, answering your related questions, providing shipping and billing information, and processing or providing customer feedback and support including sending price lists and checklists, offers, planning suggestions and non-marketing newsletters. In addition, we communicate by post, e-mail and telephone with customers who purchase our products and services when it comes to processing and handling customer requests. The legal basis for this is Art. 6 para. 1 lit. b DSGVO.

Data disclosure


We treat your data confidentially and therefore do not pass it on to third parties. Our servers are located in Germany and are operated by 1and1 on our behalf. In this way we ensure that your data does not leave the sphere of influence of the EU DSGVO.

A disclosure, however, takes place, if it is necessary for the clarification of an illegal use of our services or for the prosecution, in particular the enforcement of contractual agreements made with you. If there are concrete indications of illegal or abusive behavior, personal data will be forwarded to the law enforcement authorities and, if necessary, to the law firm representing us. In such cases, this data will be disclosed on the basis of our legitimate interest in asserting our contractual claims, in combating abuse and in prosecuting criminal offences if, in weighing up the interests to be carried out, we have come to the conclusion that your rights and interests in the protection of your personal data do not prevail (Art. 6 para. 1 lit. f DSGVO).

In addition, we are legally obliged to provide information to certain public authorities (e.g. law enforcement authorities and tax authorities) upon request. In these cases, this data is passed on for the fulfilment of legal obligations to which we are subject (Art. 6 Para. 1 lit. c DSGVO).

In addition, any logistics service providers and subcontractors employed by us receive the personal data required for the execution of your order in order to fulfil the contract to which you are a contracting party or to carry out pre-contractual measures which you may request (Art. 6 para. 1 lit. b DSGVO).



We use so-called cookies to make our website more user-friendly, effective and secure. Cookies are small text files that are stored on your computer and saved by your browser. Some of these cookies can also remain stored on your computer beyond the period of use of our offer, for example to enable you to access the site more quickly the next time you visit.

Specifically, we use the following cookies:

We need session cookies to enable internal functionalities. They are automatically deleted at the end of your visit.

You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general and activate the automatic deletion of cookies when closing the browser. When cookies are deactivated, the functionality of this website may be limited.

All our cookies cannot identify you as a person. We use the cookies on the basis of our legitimate interest in a demand-oriented design, whereby we have come to the conclusion that your rights and interests in the protection of your personal data do not outweigh (Art. 6 Para. 1 lit. f DSGVO).

Changes of purpose


We process your personal data exclusively for the purposes stated in this data protection declaration. Any deviation from these purposes will only occur if permitted by law or if you have consented to the changed purpose of data processing. If we process your data for purposes other than those for which we originally collected the data, we will inform you of these new purposes before further processing and provide you with all relevant information.

Deleting your data


As soon as the storage of your personal data is no longer necessary for the purposes for which we have collected it, we delete or make your personal data anonymous. If we have only collected your personal data as part of a request for prices and offers, we will delete it six months after sending you the information on the prices or submitting an offer. If we have collected and stored your personal data in connection with a contract for the delivery of our products or the provision of work or services, we delete the data, provided that it is not required longer for criminal prosecution or to secure, assert or enforce legal claims, three months after expiry of the guarantee, which is 15 years for purchase contracts for our modules or 3 months after expiry of the guarantee for other products, which is usually two years. Insofar as we are subject to statutory retention periods, e.g. under commercial law or tax law, data required for the fulfilment of these obligations will be blocked instead of deleted ("restriction of processing").

Your rights


Everyone has the right to information (Art. 15 DSGVO), the right to correction (Art. 16 DSGVO), the right to cancellation (Art. 17 DSGVO), the right to limitation of processing (Art. 18 DSGVO), the right to opposition (Art. 21 DSGVO) and the right to data transferability (Art. 20 DSGVO). The restrictions according to §34 and §35 BDSG apply to the right to information and the right of cancellation. In addition, there is a right of appeal to a competent data protection supervisory authority (Art. 77 DSGVO in conjunction with §19 BDSG).

Right to information

You have the right to receive information from us at any time about the personal data we have processed concerning you. You can submit an application by post or e-mail to the above address.

Right to correct inaccurate data

If the personal data we collect about you is inaccurate, you have the right to request that such data be corrected. You can submit an application by post or e-mail to the above address.

Right to cancellation

Under the conditions described in Art. 17 DSGVO, you have the right to request the deletion of your personal data. This applies in particular if the purposes for which the data were collected or processed are no longer necessary or if the data were collected or processed unlawfully. You can submit an application by post or e-mail to the above address.

Right to limitation of processing

You have the right to request us to restrict the processing of your personal data. This right exists in particular if the accuracy of personal data is disputed or if you request limited processing instead of deletion (for example, because you need the data to assert, exercise or defend legal claims). You can submit an application by post or e-mail to the above address.

Right of objection

You have the right to object to the processing of your personal data at any time for reasons arising from your particular situation. In this case, we will immediately stop processing your personal data, unless we can provide evidence of compelling reasons worthy of protection for the processing. These grounds must outweigh your interests, rights and freedoms or have their origin in the assertion, exercise or defense of legal claims.

Right to data transferability

You can ask us to hand over the personal data concerning you in a common, machine-readable format. You can submit an application by post or e-mail to the above address.

Right of appeal

They have the right to contact the competent supervisory authority in the event of complaints. The supervisory authority responsible for us is:

State Commissioner for Data Protection and Freedom of Information Baden-Württemberg

(Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg)

Königstr. 10 a

70173 Stuttgart Germany

Changes to this Privacy Policy

The current version of this data protection declaration is always available at

Last updated: May 25, 2018

tohacon S.L. Parc Cientific C/ Catedrático A. Escardino, 9 46980 Paterna (Valencia) Tel: +34 681 389 641 Mail: