Last updated: June 16, 2025
We appreciate your interest in our website https://www.excav.de (referred to as the “Website”). The operator of this website and the controller responsible for the processing of your personal data through this website is excav UG, Christian-Ernst-Straße 32, 91052 Erlangen, Germany, Telephone: +49 (0) 152 2233 2095, Email: kontakt@excav.de
In addition to providing a convenient and efficient user experience, the protection of your personal data is our top priority. Protecting your privacy when processing personal data is an important concern for us, which we take into account in our business processes. We therefore always process personal data collected when you visit our website in accordance with the applicable data protection regulations.
With this Privacy Policy, we inform you about which personal data is collected and stored when you visit our website or use the services offered via the website. You will also receive information about how and on what legal basis your data is used, what rights you have with regard to the use of your data and what contact options are available to you.
In detail, the following personal data is collected:
When you visit our website
You can visit our website without disclosing any information about your identity. However, when you access our website, the browser you use automatically sends information to our website server and temporarily stores it in a log file. This information does not reveal your identity.
The following information is collected without your intervention and stored until it is automatically deleted after six months:
The collection and processing of this data is carried out for the purpose of enabling the use of our website (establishing a connection). This data is stored exclusively for technical reasons and is never assigned to a specific person. Furthermore, the collection of this data serves the purpose of ensuring system security and stability, as well as for the technical administration of the network infrastructure. The legal basis for this is Art. 6 (1) (f) GDPR. Our legitimate interest in data processing lies in ensuring the proper functioning of our website and the communication conducted through it. We do not draw any conclusions about you as a person in this context. We also use cookies on our website.
When using the contact form
For questions of any kind, we offer you the opportunity to contact us via a form provided on the website. The following information is mandatory in order to answer your questions:
In addition, you can optionally provide the following information:
We store this information for a period of up to two years for verification purposes. The purpose of collecting the data provided in the contact form is to identify the inquirer and to be able to answer the inquiry appropriately and via the desired communication channel. This also constitutes our legitimate interest. The legal basis for data processing in this regard is Art. 6 (1) (f) GDPR.
When using your data for commercial purposes
excav generally has a legitimate interest in using the data collected from you (e.g., when entering into a contractual relationship) for informational and promotional purposes. For this purpose, we use your first name, last name, company name (if applicable), and postal address so that we can establish contact at any time in the future. If excav has collected additional personal data for marketing purposes in compliance with legal requirements, this may be stored additionally (e.g., purchased products or services). This enables excav to provide you with information about recommendations and new products that best meet your needs.
The legal basis for this is excav’s legitimate interest in promoting its products and services pursuant to Art. 6 (1) (f) GDPR. You can object to the use of your personal data for the aforementioned advertising purposes at any time with future effect. You can use the excav contact details (postal mail/email/telephone) provided in this privacy policy for this purpose.
Cookies
We use cookies on our website. These are small files that your browser automatically creates and that are stored on your device (PC, laptop, tablet, smartphone, etc.) when you visit our website.
The use of cookies serves, on the one hand, to make using our services more pleasant for you. For example, we use so-called session cookies to recognize that you have already visited individual pages of our website or that you have already logged into your customer account. These are automatically deleted after you leave our site.
If you have given us your consent, we also use temporary cookies for the purpose of user-friendliness, which are stored on your device for a specific period of time. If you visit our website again to use our services, it is automatically recognized that you have already visited us and which entries and settings you have made, so that you do not have to enter them again. The legal basis for storing and reading information on your device is your consent in accordance with Section 25 (1) of the Telemedia Act (TDDDG). The legal basis for the processing of your personal data is your consent pursuant to Art. 6 (1) (a) GDPR. You can revoke your consent at any time in our cookie settings.
We also use cookies to statistically record the use of our website and to evaluate it for the purpose of optimizing our offering for you, as well as to display information specifically tailored to you. These cookies enable us to automatically recognize that you have already visited us when you visit our site again. These cookies are automatically deleted after a defined period of time.
Most browsers automatically accept cookies. However, you can configure your browser so that no cookies are stored on your computer or so that a warning always appears before a new cookie is created. However, completely deactivating cookies may prevent you from using all of our website’s features.
Google Analytics
For the purpose of tailoring our website to meet your needs and continuously optimizing it, we use Google Analytics, a web analysis service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (https://www.google.de/contact/impressum.html). In this context, pseudonymized user profiles are created and cookies are used. The information generated by the cookie about your use of this website, such as:
is transmitted to Google servers, further processed, and stored. This may also involve transmission to Google LLC, based in the USA. This information is used to evaluate website usage. This information may also be transferred to third parties if required by law. Under no circumstances will your IP address be merged with other Google data. IP addresses are anonymized so that assignment is not possible (IP masking).
The transfer of personal data to the USA is based on the Data Privacy Framework (DPF). The legal basis for storing and reading information on your device is your consent in accordance with Section 25 (1) of the Telemedia Act (TDDDG). The legal basis for processing your personal data for a period of two months is your consent pursuant to Art. 6(1)(a) GDPR. You can revoke your consent at any time in our cookie settings.
Demographic characteristics
Google Analytics uses the special “demographic characteristics” feature to create statistics that provide information about the age, gender, and interests of site visitors. This is done by analyzing advertisements and information from third parties. This allows target groups to be identified for marketing activities. However, the collected data cannot be assigned to a specific person and is deleted after two months of storage.
Displaying Videos (YouTube)
In some places on our website, we embed videos provided by third parties. These are videos from the YouTube platform. YouTube is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (https://www.google.de/contact/impressum.html).
The visualization of the video content takes place exclusively using the provider’s “extended data protection mode.” This means that only when you click on the video is a cookie stored on your computer, which YouTube uses to collect data. This may trigger further data collection and processing operations over which we have no control.
If you have a YouTube account and are logged in when YouTube is activated on our website, information related to visiting our website and clicking on videos can be assigned to your YouTube account. If you want to prevent this, you must log out of your YouTube account before using our website and watching the videos.
Further information can be found in Google’s privacy policy at https://www.google.de/intl/de/policies/privacy/.
The integration of YouTube videos is based on the consent you have granted in accordance with Section 25 (1) of the Telemedia Act (TDDDG) and Article 6 (1) (a) of the GDPR. You can revoke your consent at any time in the cookie settings.
If you do not wish to transfer data to YouTube, do not click on the videos embedded on our website.
Use of Google Adwords Conversion Tracking
We use Google Adwords – another service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland – to draw attention to our attractive offers on external websites using advertising materials (so-called Google Adwords). These advertising materials are delivered by Google via so-called “ad servers.” Ad server cookies are used to evaluate performance parameters such as ad impressions, clicks, and conversions. This allows us to determine the success of individual advertising measures in relation to the advertising campaign data. If you access our website via a Google ad, Google Adwords will store a cookie on your PC. These cookies generally expire after 30 days and are not intended to identify you personally. The following analysis values are generally stored for this cookie, with Google also processing the data in the USA:
These cookies enable Google to recognize your internet browser. If a user visits certain pages of an Ads customer’s website and the cookie stored on their computer has not yet expired, Google and the customer can recognize that the user clicked on the ad and was redirected to this page. Each Ads customer is assigned a different cookie. Cookies cannot therefore be tracked across Ads customers’ websites. We do not collect or process any personal data in the aforementioned advertising measures. We only receive statistical evaluations from Google. Based on these evaluations, we can determine which of the advertising measures used are particularly effective. We do not receive any further data from the use of advertising materials; in particular, we cannot identify users based on this information. Your data will be transferred to the USA on the basis of the Data Privacy Framework (DPF). The legal basis for storing and reading information on your device is your consent pursuant to Section 25 (1) of the Telemedia Act (TDDDG). The legal basis for processing your personal data is your consent pursuant to Art. 6 (1) Sentence 1 (a) GDPR. You can revoke your consent at any time in our cookie settings.
Further information and Google’s privacy policy can be found at: https://www.google.de/policies/privacy/.
Google Tag Manager
This website uses Google Tag Manager, a solution provided by Google Ireland Limited (Gordon House, Barrow St, Dublin 4, Ireland). Google Tag Manager enables various codes and services to be managed and easily integrated into the website. Google Tag Manager is a cookieless domain that requires the IP address to be transmitted to Google and triggers other tags that may collect data. Google Tag Manager does not access this data. If the user has deactivated the tracking tags at the domain or cookie level, this deactivation will remain in effect for all tracking tags implemented with Google Tag Manager. Your IP address may also be processed by Google in the USA. The transfer of personal data to the USA is based on the Data Privacy Framework (DPF).
The legal basis for the processing of personal data described here is Art. 6 (1) (f) GDPR.
All personal data you submit, including your payment details, is transmitted using the generally accepted and secure SSL (Secure Socket Layer) standard. SSL is a secure and proven standard that is also used, for example, in online banking.
You can recognize a secure SSL connection by, among other things, the “s” appended to http (i.e., https://…) in your browser’s address bar or the lock symbol at the bottom of your browser.
We also use appropriate technical and organizational security measures to protect your personal data stored with us against destruction, loss, alteration, unauthorized disclosure, or unauthorized access. Our security measures are continuously improved in line with technological developments.
Rights of the Data Subject
As a data subject within the meaning of the GDPR, you are entitled to the rights described below. To assert these rights, please contact us as follows: kontakt@excav.de or in writing to the above-mentioned address of excav UG (limited liability).
Right to Information
You can request information about your personal data that we process in accordance with Art. 15 GDPR.
Right to Rectification
If the information concerning you is no longer correct, you can request rectification in accordance with Art. 16 GDPR. If your data is incomplete, you can request completion.
Right to Restriction of Processing
According to Art. 18 GDPR, you have the right to request restriction of the processing of your personal data.
Right to Erasure
According to Art. 17 GDPR, you can request the erasure of your personal data.
Right to Data Portability
According to Art. 20 GDPR, you have the right to receive the personal data concerning you that you have provided to us in a structured, common, and machine-readable format. Furthermore, within the limits of Art. 20 (1) GDPR, you have the right to have this data transmitted by us to a third party designated by you.
Right of Objection
You may object to the processing of personal data for advertising purposes, including the analysis of customer data for advertising purposes, at any time without giving reasons.
You have the right to object to the processing of personal data concerning you based on Art. 6 (1) (e) or (f) GDPR, in accordance with Art. 21 GDPR, for reasons arising from your particular situation. We will stop processing your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing serves to assert, exercise, or defend legal claims.
Revocation of consent
You also have the right to revoke any consent you have given under data protection law at any time, with future effect. Revoking your consent does not affect the legality of the processing carried out on the basis of your consent until the revocation.
Automated individual decisions or profiling measures
We do not use automated processing procedures to make a decision – including profiling.
Right to lodge a complaint with a supervisory authority
If you believe that the processing of your personal data violates data protection law, you have the right, according to Article 77 (1) GDPR, to lodge a complaint with a data protection supervisory authority of your choice. This includes the data protection supervisory authority responsible for data protection, the Bavarian State Office for Data Protection Supervision (BayLDA), Promenade 27, 91522 Ansbach. You can use the following email address for email communication with the supervisory authority: poststelle@lda.bayern.de
Duration of storage of personal data/deletion of personal data
We generally delete or anonymize your personal data as soon as it is no longer required for the purposes for which we collected or used it in accordance with the above paragraphs, unless the continued storage of your personal data is required due to a legal obligation. Further information on the corresponding deletion periods can be found in the description of each data processing activity.
Disclosure of data to third parties/recipients of data
The personal data we collect and store will never be used for sale, trade, or lending. We will only disclose your data to third parties if we are legally obligated to do so, or to assert, exercise, or defend legal claims, to investigate any unlawful use of our website or services, or for legal prosecution (if there are concrete indications of unlawful or abusive behavior). Data may also be shared if this serves to enforce terms of use or other agreements. We are also legally obligated to provide information to certain public authorities upon request. These include law enforcement authorities, authorities that prosecute administrative offenses subject to fines, and tax authorities. This data is shared based on our legitimate interest in combating misuse, prosecuting criminal offenses, and securing, asserting, and enforcing claims. The legal basis is Art. 6 (1) (f) GDPR.
We rely on contractually affiliated third-party companies and external service providers (“processors”) to offer our products and services. In such cases, personal data is shared with these processors to enable them to process the data further. These processors are carefully selected and regularly reviewed by us to ensure that your privacy is protected. The processors may only use the data for the purposes specified by us and are also contractually obligated by us to treat your data exclusively in accordance with this Privacy Policy and German data protection laws.
In addition to the service providers already mentioned, we use the following processors: For hosting purposes, we use Amazon Cloud Hosting (Amazon Web Services, Inc., 410 Terry Avenue North, Seattle, WA 98109, United States). Data may also be stored in the USA.
Contact / Data Protection Officer
For information about your personal data, to request the correction of inaccurate data, or to request its blocking or deletion, as well as for further questions about the use of your personal data, you can contact our Group Data Protection Officer using the following contact details:
excav UG (limited liability)
Data Protection Officer
Christian-Ernst-Straße 32
91052 Erlangen, Germany
Phone: +49 (0) 152 2233 2095
Email: kontakt@excav.de
Please note that information can only be provided if you provide us with your full first and last name, your current and, if applicable, previous address, your date of birth, and your email address. This information is used solely for verification purposes and thus protects you from unauthorized third parties receiving your personal data. Any offer, transaction, and/or contract numbers we have provided to you are also desirable and helpful, but not necessary, so that we can identify the relevant data more quickly.
Data protection declaration updated: June 2025