Draft for preview, updated 17 October 2026. Form submission is being configured and tested. Provider operational-log retention and the final wording of this notice remain to be checked before public launch.
1. Controller
WestExtract Naturstoffextraktionen GmbH
Greenwichstr. 49
66482 Zweibrücken, Germany
Represented by Dr. Aslieh Nookandeh and Paul Baumgärtner
Email: service@westextract.de
Telephone: +49 (0) 6332 4786 250
2. Hosting and technical access data
This website is hosted by ALL-INKL.COM – Neue Medien Münnich, proprietor René Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany. When you visit, your browser transmits technical data such as your IP address, date and time, the requested page or file, HTTP status, transferred data volume, browser information and, where provided, the referring page. The hosting provider processes technical logs for operation, troubleshooting and security.
The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is the reliable and secure operation of our website. Optional access logging is disabled in our hosting control panel. Separate provider operational and security logs, including their retention periods, remain to be clarified. Specific security incidents may require longer retention for investigation.
3. Contact by email or telephone
We use your contact details and message to handle and answer your enquiry. Article 6(1)(b) GDPR applies to enquiries by a natural person concerning a potential or existing contract. Other enquiries and communication with company representatives are based on Article 6(1)(f) GDPR; our legitimate interest is handling business communications.
4. Enquiry form in this preview
When you submit the configured form, your name, email address, message and optional company and application details are sent to our web server over HTTPS. The server sends the enquiry through the authenticated ALL-INKL email service to service@westextract.de. Your email address is used as the reply address. Purposes and legal bases follow section 3; email retention follows section 5.
The form does not save a copy of the message on the web hosting space. Abuse prevention uses a hidden field, signed temporary form identifiers and sending limits. Keyed hashes of IP addresses, counters and expiry times are stored, without full IP addresses or message contents. Protection windows last up to two hours; expired records are removed on the next form request involving a sending check. These measures are based on Article 6(1)(f) GDPR and our legitimate interest in a secure, available contact service.
5. Enquiry retention
We normally delete enquiries that do not result in an order 24 months after their final handling. Necessary contract records are retained according to applicable statutory obligations. Information required to establish, exercise or defend legal claims may be retained longer for that purpose.
6. Recipients and service providers
Access is limited to the people handling your enquiry within our company and, where technically required, our hosting provider and our existing email service provider. Information is disclosed to authorities or other recipients when legally required. The personalised data processing agreement with ALL-INKL is available, dated 8 October 2026.
7. Cookies and local storage
This version does not set its own cookies or store information in Local Storage or Session Storage. Language selection uses ordinary page links.
8. Analytics and embedded content
This version uses no analytics or advertising trackers, social media plugins, externally embedded videos or maps. Images, typography and styles are served from our own hosting space. Such integrations therefore do not initiate transfers to providers outside the European Economic Area.
9. Data security
Form submission is available exclusively over HTTPS. The connection to the outgoing email server is also encrypted. Ordinary email is generally not end-to-end encrypted.
10. Your rights
Subject to the legal conditions, you have rights to access, rectification, erasure, restriction and data portability. You may withdraw consent for future processing using the contact details above. Withdrawal does not affect the lawfulness of earlier processing.
11. Objection
You may object to processing based on legitimate interests for reasons relating to your particular situation. You may object to direct marketing at any time.
12. Complaints
You may lodge a complaint with a data protection supervisory authority, particularly where you live or work or where the alleged infringement occurred. The competent authority for companies in Rhineland-Palatinate is the State Commissioner for Data Protection and Freedom of Information Rhineland-Palatinate: www.datenschutz.rlp.de.
13. Providing data and automated decisions
Contacting us is voluntary. Without the information needed to respond or handle your enquiry, we may be unable to process it. We do not use automated decision-making or profiling for website visits or enquiries.
14. Updates
We update this information when functions or service providers change. This draft reflects the current preview version.