Skip to content Skip to footer
Menu Close
Close
Get in Touch

Privacy Policy

Imprint

Information according to § 5 TMG

Diamics GmbH

Rayskistraße 17, 01219 Dresden
‍
Commercial register: HRB 46482
Register court: Local court Dresden

Represented by Managing Director:
Johannes Konrad Paul

Contact
E-mail: johannes.paul@diamics.com

Editorially responsible
Johannes Konrad Paul

Consumer dispute resolution / universal arbitration board
We are not willing or obliged to participate in dispute resolution proceedings before a consumer arbitration board.

Privacy Policy for diamics.com

(Version: April 2025)

1. Information on the Collection of Personal Data

This Privacy Policy explains how Diamics GmbH (hereinafter referred to as “we” or “Diamics GmbH”) collects, uses, and shares your personal data when you visit our WordPress-powered website https://diamics.com. We aim to comply with our legal obligations, in particular the EU General Data Protection Regulation (GDPR). Personal data means any information relating to an identifiable person, such as name, email address, user behaviour, or any other details you provide to us. Controller according to Art. 4 (7) GDPR is:
Diamics GmbH
Rayskistraße 17
01219 Dresden
Germany
(see our Legal Notice) You can contact our Data Protection Department at any time via contact@diamics.com or by writing to our postal address with the addition “Data Protection Department”. We may employ carefully selected service providers or use your data for specific purposes, all of which are described below. Where relevant, we will also inform you of the storage periods involved.

2. Your Rights

Under the GDPR, you have various rights regarding your personal data processed by us:

  • Right of Access (Art. 15 GDPR)
  • Right to Rectification (Art. 16 GDPR)
  • Right to Erasure (Art. 17 GDPR)
  • Right to Restriction of Processing (Art. 18 GDPR)
  • Right to Data Portability (Art. 20 GDPR)
  • Right to Object (Art. 21 GDPR)
  • Right to Protection from Automated Decisions (Art. 22 GDPR)
  • Right to Withdraw Consent (Art. 7 (3) GDPR)
  • Right to Lodge a Complaint with a supervisory authority (Art. 77 GDPR)

If you wish to exercise any of these rights, please contact us at contact@diamics.com.

3. Processing of Personal Data When Visiting Our Website

When you visit our website for purely informational purposes (i.e. without registering or otherwise providing information), we automatically collect the following data that your browser transmits to our server:

  • IP address
  • Date and time of access
  • Time zone difference to Greenwich Mean Time (GMT)
  • Pages accessed by your system via our website
  • Access status/HTTP status code
  • Amount of data transferred
  • Website from which your system accessed our website
  • Information about browser type, version, and language
  • Operating system
  • Language and version of your browser software

We process this data to display the website, ensure its technical stability, and maintain security. The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in providing a functional and secure online presence). Server logs (e.g. IP addresses) are retained for 14 days before automatic deletion. Legitimate interests include preventing fraud, ensuring network security, and troubleshooting technical errors.

4. Hosting and Website infrastructure

We operate our website using WordPress as a content management system (CMS), with various plugins, themes, and services that may handle personal data as described below.

4.1 Hosting with SiteGround
  • Our website is hosted by SiteGround (SiteGround Spain S.L., Madrid, Spain).
  • SiteGround processes server log files (e.g. your IP address) to ensure stable operation.
  • We rely on Art. 6 (1) (f) GDPR (our legitimate interest in reliable website provision).
  • If data is transferred to a third country, we ensure compliance with GDPR requirements (e.g. Standard Contractual Clauses or an adequacy decision).
  • Data transfers to SiteGround in Spain occur within the EU. If sub-processors outside the EU are involved, safeguards such as Standard Contractual Clauses (SCCs) apply.

For more information, please see SiteGround’s Privacy Policy.

4.2 Use of the Elementor Page Builder
  • We use Elementor (by Elementor Ltd., Israel) to build and style webpages.
  • Elementor may set cookies or similar technologies necessary for displaying elements or additional functions.
  • Data such as IP addresses or browser details may be collected for technical purposes.
  • We rely on Art. 6 (1) (f) GDPR (legitimate interest in providing an appealing and technically sound website). Where additional consent is required (e.g. for certain tracking), Art. 6 (1) (a) GDPR applies.
4.3 ThemeRex Theme from ThemeForest
  • We have purchased and installed a ThemeRex theme from ThemeForest (operated by Envato Pty Ltd).
  • For verifying licensing and/or support, tokens and purchase keys may be sent to Envato.
  • Data may be processed by Envato Pty Ltd in accordance with their privacy policy. We rely on Art. 6 (1) (b) GDPR (contractual necessity) or Art. 6 (1) (f) GDPR (legitimate interest) to confirm valid licences and receive product support.
  • Licence validation is processed under Art. 6(1)(b) GDPR (contractual necessity), while support requests rely on Art. 6(1)(f) GDPR (legitimate interest in maintaining service quality.
  • Please consult the Envato Privacy Policy for more information.

5. Data Security

We implement appropriate technical and organisational measures to protect your personal data from manipulation, loss, destruction, or unauthorised access. These measures are continuously adapted to technological developments. We also employ SSL/HTTPS site-wide encryption to ensure secure data transmission.  We use firewalls (e.g. Wordfence), two-factor authentication (2FA), and regular penetration testing to protect against unauthorised access.

6. Objection or Withdrawal of Consent to Data Processing

If you have given us consent to process your personal data, you may withdraw it at any time with future effect. The legality of any processing carried out before your withdrawal remains unaffected. In cases where we rely on Art. 6 (1) (f) GDPR (legitimate interests), you have the right to object. Please state your reasons for objection so we can assess whether we must either stop processing or continue on compelling legitimate grounds. To object or withdraw consent, please contact us at contact@diamics.com.

7. Storage Period of Your Personal Data

We retain your personal data only as long as necessary to fulfil the purposes for which it was collected, including compliance with legal, tax, or accounting obligations. In determining retention periods, we consider the amount, nature, and sensitivity of the data, as well as any potential risks from unauthorised use or disclosure. In certain cases, we may anonymise your personal data so it can no longer be associated with you. We may then use that data without further notice. Should you have any queries about this, please email contact@diamics.com.

8. Data Processing by Third Parties

We may use external service providers for web operation, data processing, payment processing, or product support. We ensure that these providers:

  • Are carefully selected
  • Process data only on our instructions
  • Undergo regular checks

Where these providers are located outside the European Union, we either rely on an adequacy decision or appropriate safeguards (e.g. Standard Contractual Clauses) consistent with GDPR. Where your explicit consent is required (Art. 6 (1) (a) GDPR), you may withdraw that consent at any time.

9. Use of Cookies

9.1 General

We use cookies—small text files placed on your device—to make our website more user-friendly, efficient, and secure. When you first visit our site, you may choose which (if any) non-essential cookies to allow. You can also reject or adjust cookie settings in your browser, but doing so may result in some website functionality being impaired.

9.2 What Are Cookies?

Cookies typically contain a unique string (ID) that allows your browser to be recognised when you revisit our site. Cookies themselves do not execute programs or transmit malware. Their main purpose is to store and retrieve information to enhance your browsing experience.

  • Technically Necessary Cookies: Required for the correct functioning of our website and cannot be disabled if you wish to use our site.
    • Legal Basis: Art. 6 (1) (f) GDPR (legitimate interest).
  • Technically Optional Cookies: Set only with your prior consent. For example, they allow us to analyse site usage or place interest-based ads.
    • Legal Basis: Art. 6 (1) (a) GDPR (consent).
9.3 Cookie Duration
  • Session Cookies: Temporary and deleted upon closing your browser or ending the session.
  • Persistent Cookies: Stored for a specified duration or until manually removed in your browser.
9.4 Third-Party Cookies

Some embedded services (e.g. analytics or marketing tools) may set their own cookies. Details can be found in the relevant sections of this Privacy Policy or on the websites of these third-party providers.

9.5 Special Feature for Safari

Safari (version 12.1+) implements strict cookie handling that deletes most cookies, including opt-out cookies, after seven days.

10. Online Marketing and Analysis Tools

We may employ third-party tools to optimise user experience and improve our services. These tools are only activated with your consent (Art. 6 (1) (a) GDPR). Where personal data is transferred to third countries, we take steps to ensure an adequate level of protection (e.g. Standard Contractual Clauses, adequacy decision). Examples of such tools include:

  • Google Analytics 4: IP anonymisation and data transfer in compliance with the EU-US Data Privacy Framework or Standard Contractual Clauses. You can install the Google opt-out browser add-on to revoke consent at any time.
  • Google Tag Manager: Helps load additional scripts or tracking pixels.
  • Google Ads / Google Conversion Tracking: We place ads via Google Ads and measure their success via Conversion Tracking.

11. WordPress Plugins and ThemeREX-Specific Processing

We use various WordPress plugins for security, SEO, contact forms, performance, etc. Depending on the plugin, personal data like IP addresses may be collected or processed. Please note each plugin’s specific privacy guideline if relevant. We also 1use a ThemeRex theme purchased from ThemeForest (Envato) for design and layout. For license validation and automatic updates, limited data (e.g. purchase tokens) may be sent to Envato. See Envato Privacy Policy for details. If you contact us for support and create a support ticket (e.g. via Ticksy), the data you provide is processed on that platform. You explicitly consent to such processing when submitting a support request. Ticksy adheres to the EU/US “Privacy Shield” (or subsequent frameworks) and you can read their Privacy Policy for more information.

12. Entering into a Contractual Relationship

If you purchase a paid service or subscription via our website, we collect:

  • Name, email address, billing address, and (where applicable) a separate shipping address
  • Company name and VAT ID (if applicable)
  • Payment information

Legal basis: Art. 6 (1) (b) GDPR (performance of a contract). We retain your data only as long as needed under statutory obligations (e.g. tax, accounting).

13. Use of Payment Service Providers (e.g. Stripe)

We may use Stripe Payments Europe, Limited (SPEL) for secure payment processing:

  • Relevant payment data (e.g. card details, account number) is transferred to Stripe if necessary to complete the transaction.
  • Stripe may process personal data in the USA or other third countries, subject to GDPR-compliant safeguards (Standard Contractual Clauses).
  • Legal basis: Art. 6 (1) (b) GDPR (contractual necessity).
  • Stpie’s sub-processors include AWS (US) and Salesforce (US). Data transfers rely on the EU-US Data Privacy Framework adequacy decision.

14. Customer Relationship Management (CRM)

We use a CRM system (e.g. ActiveCampaign) to manage customer data such as name, email, and company details. The legal basis is either:

  • Art. 6 (1) (b) GDPR (if you have a paid subscription), or
  • Art. 6 (1) (f) GDPR (our legitimate interest in effective customer communication).

15. Contact by Email or Form

If you contact us via email, contact form, or another scheduling/inquiry tool (e.g., Calendly), we process the data you provide (e.g., your name, email address, phone number) to respond to your request:

  • Legal basis: Art. 6 (1) (a) GDPR (consent), where data is provided voluntarily. If your inquiry arises from a contractual situation, Art. 6 (1) (b) GDPR (contract fulfilment) may also apply.
  • We delete or anonymise your data once it is no longer needed, provided no legal obligations prevent this.

16. Contact with Legal Service Providers

If you use our website to contact a solicitor or legal consultant, we forward the information you provide (e.g., name, email, company details) to that legal service provider to facilitate the consultation.

  • Legal basis: Depending on circumstances, Art. 6 (1) (a) (consent), (b) (contractual necessity), or (f) (legitimate interest in providing a complete user experience).

17. Further ThemeRex-Related Information

  1. Cookies: ThemeRex documentation mentions cookies such as
    • cfduid (Cloudflare) for security.
    • PHPSESSID to manage user sessions.
    • wp-auth, wordpress_logged_in_{hash}, wordpress_test_cookie, wp-settings-{UID} for WordPress authentication and configuration.
  3. Third-Party Services:
    • Envato Pty Ltd: For licence validation.
    • Ticksy: Used for support tickets.
    • Cloudflare: As a Content Delivery Network, applying security settings.
  4. Data Retention: Support tickets or comments remain until you request deletion. If you register on our website, your personal information is stored in your user profile which you can view, edit, or delete (except for the username) at any time.
  5. Security Measures: SSL/HTTPS ensures that personal data is encrypted in transit. In the event of a data breach, system administrators promptly take measures to preserve system integrity and notify affected users.
  6. Data Rights: You can request a file of your personal data or ask that we erase data we hold, subject to legal obligations to retain specific information.
  7. Links to Third-Party Websites: We are not responsible for content or data handling on external sites that may be linked from ours. When you click a social media button or link, you do so voluntarily.
  8. Disclosure for Legal Purposes: We may disclose your data if required by law, a government request, or in good faith belief that it is necessary (e.g. for fraud investigations).
  9. Cloudflare’s _cfduid cookie is used under legitimate interest (Art. 6(1)(f) GDPR) for security purposes. Users may block it via browser settings but may experience reduced functionality.
  10. We will notify authorities within 72 hours and affected users without undue delay if a breach poses high risks (Art. 33-34 GDPR)

18. Updates to This Privacy Policy

We reserve the right to amend or update this Privacy Policy to reflect changes in law, technology, or our business operations. The most current version is always available at https://diamics.com. We encourage you to check it regularly. Last update: April 2025 If you have any questions about this Privacy Policy or how we process your personal data, please contact us at:
contact@diamics.com

Picture source on Home page: Chokniti Khongchum, Kaboompics.com, RF._.studio_ found on Pexels