Privacy Policy

 *Last updated: August 2026*

Aroma Services ("we", "our", or "us") operates the website https://aroma-services.de. This page informs you of our policies regarding the collection, use, and disclosure of personal data when you use our Service and the choices you have associated with that data.

We operate under the guidelines of the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).

1. Data Controller
The responsible party for data processing on this website is:

**Aroma Services**
Alten-Busecker-Str. 49  
35396 Giessen  
Germany  
Email: info@aroma-services.com  
Phone: +49 179 80 711 80  

2. Collection and Storage of Personal Data
When you visit our website, your browser automatically sends information to our server. This information is temporarily stored in a so-called log file. The following information is collected without your intervention and stored until automatic deletion:
- IP address of the requesting computer
- Date and time of access
- Name and URL of the retrieved file
- Website from which access is made (referrer URL)
- Browser used and, if applicable, the operating system of your computer

We process this data for the purpose of ensuring a smooth connection setup, comfortable use of our website, and evaluating system security and stability based on Art. 6 (1) (f) GDPR.

3. Contact Form and Email Communication
If you send us inquiries via the contact form or email, your details from the inquiry form, including the contact details you provided there, will be stored by us for the purpose of processing the inquiry and in case of follow-up questions. This data processing is based on Art. 6 (1) (b) GDPR if your request is related to the performance of a contract or necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of the inquiries addressed to us (Art. 6 (1) (f) GDPR).

4. GoDaddy Infrastructure and Hosting
Our website is built and hosted using the GoDaddy website builder platform provided by GoDaddy.com LLC. Consequently, GoDaddy processes technical log data and cookie identifiers on our behalf to ensure the availability and security of the website. GoDaddy has implemented data privacy safeguards, including Standard Contractual Clauses (SCCs), to secure data processing transfers outside the European Economic Area.

5. Cookies and Web Analytics
Our website uses cookies. These are small text files that your browser stores on your device. We use necessary cookies to enable basic website functions.

We also use analytical cookies via GoDaddy analytics to understand website traffic patterns. These cookies are only activated if you give your explicit consent via our cookie banner (Art. 6 (1) (a) GDPR). You can revoke your consent at any time by clearing your browser cookies.

6. Your Data Rights
Under the GDPR, you have the following rights regarding your personal data:
- Art. 15 GDPR (Right of Access):** You can request information about your personal data processed by us.
- Art. 16 GDPR (Right to Rectification):** You can request the immediate correction of incorrect or incomplete personal data stored by us.
- Art. 17 GDPR (Right to Erasure):** You can request the deletion of your personal data stored by us under certain conditions.
- Art. 18 GDPR (Right to Restriction of Processing):** You can request the restriction of processing of your personal data.
- Art. 20 GDPR (Right to Data Portability):** You have the right to receive your data in a structured, commonly used, and machine-readable format.
- Art. 21 GDPR (Right to Object):** You have the right to object to data processing based on legitimate interests.
- Art. 7 (3) GDPR (Right to Withdraw Consent):** You can withdraw your consent at any time.

7. Right to Lodge a Complaint with a Supervisory Authority
You have the right to lodge a complaint with a data protection supervisory authority regarding our processing of your personal data. The competent authority for our location is the Hessian Commissioner for Data Protection and Freedom of Information (Der Hessische Beauftragte für Datenschutz und Informationsfreiheit).