Privacy Policy & Terms and Conditions
Privacy policy and general terms and conditions of the Pro Management AG.
Data controller and contact
The controller responsible for processing personal data on this website is Pro Management AG, Mayener Straße 25, 53539 Kelberg, represented by Management Board members Niklas Dorandt and Jochen Kracht. You can contact us at info@pro-ag.de or by phone at +49 2692 268 990-10. Further company information can be found in the Legal notice.
This notice explains which data is processed when you visit the website, submit a request or use optional features. Last updated: 12 November 2026.
Provision of the website and its content
Hosting with Vercel
The website and its server-side functions are provided through Vercel Inc., USA. When the website is accessed, technically necessary connection data is processed, in particular the IP address, requested page or file, time, browser and device information, and technical status and error information. This enables delivery, fault detection and protection against misuse. The legal basis is Article 6(1)(f) GDPR; our legitimate interest is the secure and reliable operation of the website.
Vercel operates a globally distributed infrastructure. Data may also be processed in the USA. The contractual provisions on data processing on our behalf and international transfers are set out in the Vercel Data Processing Agreement. Technical data is processed for delivery and security and, where necessary, to investigate faults or fulfill legal obligations. We do not use it to create personal usage profiles.
Content and images from Sanity
We use Sanity for editorial management. Published content is imported when the website is created; images can be loaded directly via Sanity's Content Delivery Network. In doing so, Sanity receives the connection data necessary for image retrieval, such as IP address, time, file address, and browser information. The provider is Sanity US Inc., USA. Content delivery takes place via globally distributed systems; processing outside the European Economic Area is possible.
This processing is based on Article 6(1)(f) GDPR and our interest in a reliable, fast display of our content. Inquiries submitted through website forms are not stored as editorial content in Sanity. Information on processing, retention and international transfers is provided in the Data Processing Agreement and the Sanity security information.
Locally provided fonts
The font files are delivered along with this website. No retrieval from an external font provider like Google Fonts is required.
Recipients and international transfers
Access to data is granted to the persons responsible for the respective request at Pro Management and the technical service providers described herein, insofar as this is necessary for their tasks. Providers acting on our behalf are contractually obligated to process data on our behalf. The corresponding agreements are part of the respective terms and conditions for Vercel, Sanity, Resend, and Upstash.
For transfers by Vercel, Sanity, Resend and Upstash to countries outside the European Economic Area, the linked data processing agreements provide, in particular, for EU Standard Contractual Clauses. Where a relevant adequacy decision applies, the transfer may be based on it. The specific safeguards are described in the respective agreements; you can also request information from us. A European operating or email sending region does not mean that all data is stored exclusively in Europe.
Storage duration
The decisive factors are the respective processing purpose and the duration required for it. Inquiries are stored for processing, necessary follow-up questions, and, if applicable, the preparation or execution of a contract. If documents are subject to statutory retention obligations or are required for the establishment, exercise, or defense of legal claims, further storage limited to these purposes is possible. If the purposes cease to exist and no corresponding obligations or requirements remain, the data must be deleted.
Any differing technical deadlines, such as those for form submission and spam protection, are explained in the respective function descriptions. Published editorial content remains available until it is modified or removed; cached copies and backups are additionally subject to the deletion and caching procedures of the respective service provider.
Your data protection rights
Subject to the applicable legal conditions, you can request access to your data, rectification, erasure, restriction of processing and data portability. You can withdraw your consent at any time with effect for the future. Previously lawful processing will not be retroactively invalidated by this withdrawal.
Right to object: You can object to processing based on legitimate interests pursuant to Article 6(1)(f) GDPR on grounds relating to your particular situation. You can object to direct marketing at any time.
To exercise your rights, contact info@pro-ag.de. You can also lodge a complaint with a data protection supervisory authority, in particular at your place of residence or work or the location of the alleged infringement. We do not make solely automated decisions through this website that have legal or similarly significant effects on you.
Inquiries and external contact channels
Contact and training requests
When you use a form, we process the contact details you provide and the content of your inquiry. Depending on the form, this may include your name, company, email address, phone number, training or appointment request, and message. Required fields are marked. The form cannot be submitted without this information; alternatively, you can contact us directly by email or phone. A training inquiry does not constitute a binding booking.
We use this data to answer your inquiry, provide the requested content, and coordinate the desired next steps with you. If this involves preparing or fulfilling a contract with you, the legal basis is Article 6(1)(b) GDPR. For other business inquiries, the processing is based on Article 6(1)(f) GDPR and our legitimate interest in processing your message. Confirmation that you have read the privacy policy does not constitute consent to receive advertising or newsletters.
Form submission with Resend
The website transmits requests server-side via the Resend service of Plus Five Five, Inc., USA, to the mailbox info@pro-ag.de. Resend processes the message content, the email addresses used for sending and technical delivery information. The legal basis is that of the relevant inquiry; Resend acts as a data processor.
A European region is configured for email sending. According to Resend, messages and sending logs are nevertheless stored in the USA for 30 days under the plan in use; backups are retained for up to seven additional days. For transfers, the Resend Data Processing Agreement provides for EU Standard Contractual Clauses. Details on storage locations and deletion are available in the Email service privacy information. Further processing in the recipient’s mailbox follows the purposes and retention criteria described above.
Protected request archive and CSV export
Contact, in-house training, open training and download requests are stored in a protected Upstash database in addition to being sent by email. The archive contains the submitted contact and request details, a request ID, the time of receipt and the status of the email notification. It is not publicly accessible. Data is stored on the server to ensure that requests can be processed reliably, even if the email notification temporarily fails. The legal bases described above apply to each request.
Non-binding requests are retained in the archive for 180 days. Seven days before this period expires, a CSV export of the requests scheduled for deletion is automatically emailed to info@pro-ag.de. If the email service does not confirm acceptance of this export, deletion is suspended and sending is retried. Authorised staff can also export requests for a selected period as a CSV file through a protected access point. An export is not a publicly accessible download. The retention and deletion criteria described above continue to apply to exported data in the recipient mailbox. Confirmed booking and contract records are handled separately from the non-binding request archive.
Protection against automated abuse
To protect the forms, we limit the number of requests. For this purpose, the IP address processed during the request is converted server-side into a cryptographically derived identifier that changes hourly. For this check, only the pseudonymous identifier and a counter are stored in the Upstash database in Frankfurt; no plaintext IP address or form content is stored. The counter is automatically deleted after one hour. Further checks take into account the completion time and a form field that is not visible to humans.
The provider is Upstash, Inc., USA. The basis is Article 6(1)(f) GDPR and our interest in reliably providing the forms and preventing spam. The Upstash Data Processing Agreement governs data processing on our behalf and international transfers. The chosen database region does not generally rule out further processing outside the EU by the provider or its subprocessors.
WhatsApp, appointment booking and social networks
References to WhatsApp, Microsoft Bookings, and social networks are external links. This website does not integrate any chat windows, calendars, or social plugins via these links. You will only access the respective provider's service when you click on the link. The provider will then process connection data and the information you enter there according to its own privacy policy. If you subsequently contact us, we will process your message or appointment request for the purposes mentioned above. Alternatively, you can contact us by email or telephone.
Certificate checking with Virtualbadge.io
The checker is provided by Virtualbadge.io. A connection to FutureNext GmbH is established only when you load the checker. Your IP address, browser information and any certificate details you enter are then transmitted to the provider.
By loading the checker, you consent to this external connection. Your permission applies only to this page visit. The general cookie settings do not load the checker.
Closing the checker removes the embedded checker from this page. This cannot undo data transfers that have already taken place.
Browser settings and storage
The website stores your privacy settings under "pro-consent" and your chosen light or dark theme under "pro-theme" in your browser's local storage. These entries contain the respective selections and are not transmitted as analytics events. They remain until you change them or delete the website data in your browser.
Storage enables your chosen display mode and respects your privacy selection. Section 25(2) No. 2 TDDDG applies to these requested functions; where personal data is processed, the basis is Article 6(1)(f) GDPR and our interest in reliably respecting your settings.
The website language is determined by the selected page address. The language versions are loaded directly from this website; no external translation service is used for language selection. Your form entries are not transmitted to a translation provider when you switch languages.
You can view your privacy settings via "Cookie settings" in the footer.
When a protected download is requested, its short-lived access link is stored in the browser’s session storage so that it can be opened on the confirmation page. Access is valid for 15 minutes; the session entry ends with the browser session or is replaced by a new download.
Website language
The website offers German, English, French, Spanish, Italian, Dutch, and Polish. The language texts are permanently stored. Selection is made via the language button and the respective language address; it does not require consent to an external translation service.
Downloads