Privacy policy

1. Controller

The controller responsible for the processing of personal data on this website is:

2. General information on the processing of personal data

We process personal data only to the extent necessary to provide a functional website, our content and services, or where you submit data to us as part of an enquiry. Personal data means any information relating to an identified or identifiable natural person.

Depending on the operation, the legal bases are Art. 6(1)(b) GDPR (pre-contractual measures and processing of enquiries) and Art. 6(1)(f) GDPR (legitimate interest in the secure and stable operation of the website).

3. Hosting

This website is hosted by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. When the website is accessed, the hosting provider processes the technically necessary connection data on our behalf (see section 4).

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the reliable and secure provision of the website. Processing by the hosting provider takes place within the framework of data processing on our behalf pursuant to Art. 28 GDPR.

4. Server log files

Each time this website is accessed, the server automatically records information transmitted by your browser in so-called server log files. This typically includes IP address, date and time of access, page accessed, referrer URL, browser used and operating system.

The processing serves to ensure the technical operation, stability and security of the website (Art. 6(1)(f) GDPR). The log files are not merged with other data sources and are automatically deleted after a short period.

5. Contact and enquiry forms (Formspree)

For the contact and enquiry forms on this website (e.g. on the “Contact” page and on our topic and service pages on EPDs and recycling claims, in all language versions) we use the service Formspree by Formspree, Inc., USA. When you submit a form, your details are transmitted to Formspree and forwarded from there by email to our office (sekretariat@brandsandvalues.com).

Depending on the form, we process: name, company, business email address, optionally telephone number, topic or message as well as form-specific information (e.g. on products, existing EPDs or your starting point). To allocate the enquiry, we additionally transmit the page from which you submitted the form, an internal designation of the form, the language version of the website, the referrer URL and, where applicable, campaign parameters (UTM) from the link that brought you to us. For technical reasons, your IP address is also transmitted to Formspree on submission. To protect against automated entries, each form contains a control field that is invisible to you.

The legal basis is Art. 6(1)(b) GDPR insofar as your enquiry is aimed at concluding or initiating a contract (e.g. requests for quotes), and otherwise Art. 6(1)(f) GDPR on the basis of our legitimate interest in responding to general enquiries.

Formspree processes the data on our behalf (Art. 28 GDPR). The provider’s servers are located in the USA; the transfer to this third country is based on the European Commission’s standard contractual clauses (Art. 46(2)(c) GDPR). Further information: https://formspree.io/legal/privacy-policy/

We use your details solely to process your enquiry and delete them as soon as they are no longer required for this purpose and no statutory retention obligations apply. Submitting a form does not sign you up to a newsletter.

Requesting the EPD Study 2026: Via the form on the EPD study page you can request the study free of charge as a PDF. For this purpose we process your name, company, business email address and, optionally, your area of interest, likewise via Formspree. Your request is forwarded to us by email; you then receive the download link to the study by email. The legal basis is Art. 6(1)(b) GDPR (provision of the study you requested). We use your details solely to send you the study and to answer any follow-up questions, and delete them as soon as they are no longer required for this purpose. Requesting the study does not sign you up to a newsletter.

6. Appointment booking via Microsoft Bookings

On our contact page we link to an external appointment booking service (Microsoft Bookings, Microsoft Ireland Operations Ltd.). No data is transmitted to Microsoft merely by visiting our website. Only when you click the link and use the external service does Microsoft process the data you enter there in accordance with the privacy information applicable there.

7. Fonts

The fonts used on this website (Archivo Variable, Source Serif 4) are served locally from our server. No connection is established to Google Fonts or other external font providers.

8. Cookies, analytics and tracking

This website currently does not use any analytics, marketing or tracking cookies and does not use any web analytics services. No content from video or map services is embedded.

9. Your rights

With regard to the personal data concerning you, you have the following rights towards us: right of access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR), data portability (Art. 20 GDPR) and objection to processing (Art. 21 GDPR). To exercise your rights, an informal message to the contact details given in section 1 is sufficient.

10. Right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is the State Commissioner for Data Protection and Freedom of Information of the Free Hanseatic City of Bremen (Landesbeauftragte für Datenschutz und Informationsfreiheit der Freien Hansestadt Bremen).