This privacy notice describes how Lab-on-Fiber GmbH processes personal data when you use this website. It was last updated on 4 September 2026.
Who is responsible?
The controller within the meaning of Art. 4(7) GDPR is
Lab-on-Fiber GmbH
Pommernstraße 32
96242 Sonnefeld
Germany
phone: +49 (9562) 40 33 826
e-mail: info@lab-on-fiber.com.
Your rights
You have the following rights concerning your personal data:
- access (Art. 15 GDPR)
- rectification (Art. 16 GDPR)
- erasure (Art. 17 GDPR)
- restriction of processing (Art. 18 GDPR)
- data portability (Art. 20 GDPR)
- objection to processing based on legitimate interests (Art. 21 GDPR)
Where processing is based on consent, you may withdraw that consent at any time with effect for the future. Withdrawal does not affect the lawfulness of processing before the withdrawal. You can change or withdraw website consents via privacy settings in the footer, or by contacting us.
You also have the right to lodge a complaint with a supervisory authority, in particular in the EU member state of your habitual residence, place of work or of the alleged infringement. For our registered office in Bavaria this is the Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), https://www.lda.bayern.de/.
Server logs
When you visit this website, the web server automatically stores data that your browser transmits. This typically includes IP address, date and time of the request, requested URL, HTTP status code, amount of data transferred, referrer URL, browser type and version, and operating system. We need this data to deliver the website, maintain stability and security, and detect abuse. The legal basis is Art. 6(1)(f) GDPR. The web server is operated for us by our hosting provider STRATO AG, Berlin, Germany, as a processor under Art. 28 GDPR. Log files are deleted or anonymised when they are no longer required for these purposes, unless a longer retention is required to investigate security incidents.
Website security
To protect this website against attacks, unauthorised access and automated abuse, we use the security plugin Wordfence, provided by Defiant, Inc., Seattle, Washington, USA. Wordfence inspects incoming requests and stores security-relevant data in our WordPress database on our web server, in particular IP addresses, requested URLs, browser identifiers (user agent) and login attempts. This data is deleted or overwritten automatically once the storage limits configured in the plugin are reached, or earlier where it is no longer needed.
We also take part in the Wordfence Security Network. Where a request is classified as an attack, the associated data — in particular the IP address and the attack pattern — is transmitted to Defiant, Inc. in the USA so that other websites can be protected against the same attack. Defiant in turn supplies us with attack signatures and reputation data for IP addresses.
The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in the security, integrity and availability of this website. Transfers to the USA are based on appropriate safeguards under Art. 46 GDPR (standard contractual clauses agreed with the provider). Further information is available in Defiant’s privacy notice: https://www.wordfence.com/privacy-policy/.
Cookies and privacy settings
This website uses cookies. Cookies are small text files stored on your device. We distinguish between cookies that are required to provide the website and optional cookies that we set only after your consent.
On your first visit we show a privacy dialog. Until you choose, optional services stay blocked. You can accept all services, allow only necessary cookies, or save a custom selection. You can change this later via privacy settings.
We set the following first-party cookie ourselves:
- lof_consent — stores your privacy choices (statistics / external media). Duration: 180 days. Legal basis: Art. 6(1)(c) GDPR in conjunction with § 25(2) TDDDG (necessary to remember and honour your choice).
If you log in to the WordPress administration area, WordPress and our security plugin additionally set authentication cookies. Those cookies are not used for public visitors of this website.
Google Analytics
If you consent to statistics, we use Google Analytics 4 (measurement ID G-DSNR283FWQ) via the ExactMetrics plugin. Google Analytics is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, acts as a sub-processor. Google’s privacy notice: https://policies.google.com/privacy.
Google Analytics helps us understand how the website is used (for example pages viewed, approximate location derived from IP address, device and browser information, and interactions). For this purpose Google typically sets cookies such as _ga and _ga_DSNR283FWQ (usually stored for up to 2 years). Google Analytics 4 does not log or store individual IP addresses: for visitors from the European Union the data is collected via servers located in the EU, and the IP address is used only to derive an approximate location before it is discarded. Google retains the event data collected about your visit for the retention period configured in our Analytics property, which is a maximum of 14 months. The legal basis is your consent, Art. 6(1)(a) GDPR and § 25(1) TDDDG. Without consent the Analytics script is not loaded.
We have not enabled Google Signals, advertising features or demographic and interest reports. Your data is therefore not used to build cross-device advertising profiles.
Data may be transferred to the United States. Google LLC is certified under the EU-US Data Privacy Framework. Further information: https://www.dataprivacyframework.gov/.
You can withdraw consent at any time via privacy settings. You may also use Google’s browser add-on to disable Google Analytics: https://tools.google.com/dlpage/gaoptout.
YouTube
Some pages embed videos hosted by YouTube (Google Ireland Limited / Google LLC). Videos are not loaded until you allow external media. You can do this either in the privacy settings or by using the button that is displayed in place of the video. In both cases your choice applies to all external media on this website and is stored for 180 days; you can change it at any time via privacy settings. Once loading is allowed, we load the video via YouTube’s privacy-enhanced mode (youtube-nocookie.com). Even in that mode, loading the video transfers data to Google (including your IP address) and Google may set cookies. The legal basis is your consent, Art. 6(1)(a) GDPR and § 25(1) TDDDG. Data may be transferred to the USA as described above.
Google Maps
On the contact page we can display an interactive map provided by Google Maps. The map is not loaded until you allow external media, in the same way as described for YouTube above. Loading the map transfers data to Google (including your IP address) and Google may set cookies. The legal basis is your consent, Art. 6(1)(a) GDPR and § 25(1) TDDDG. Data may be transferred to the USA as described above.
Contact form and e-mail
If you contact us via the contact form or by e-mail, we process the data you provide in order to handle your enquiry. The form currently collects name, company (optional), e-mail address, phone number, subject and message. We also process technical data required to deliver the form, which may include your IP address. The legal basis is Art. 6(1)(b) GDPR if the enquiry relates to a contract or pre-contractual steps, otherwise Art. 6(1)(f) GDPR (responding to enquiries). Form submissions are sent to us by e-mail; our e-mail accounts are hosted in Germany by STRATO AG. We delete this data when it is no longer needed for the conversation, unless statutory retention obligations apply.
You are under no legal or contractual obligation to provide us with your data. The fields marked as required — name, e-mail address, phone number and message — are the data we need in order to assess and answer your enquiry; without them we cannot process it. All other fields are optional and have no consequences if left empty. You can of course also contact us by phone or post instead.
Automated decision-making and profiling
We do not use your personal data for automated decision-making, including profiling, within the meaning of Art. 22 GDPR.
Fonts
The fonts used on this website are hosted on our own server. We do not load fonts from Google Fonts or other third-party font services.
Social media plug-ins
We do not embed social media plug-ins (for example Facebook, Instagram or X) on this website.
Recipients and third countries
We do not sell your personal data. We do share data with service providers where this is necessary to operate the website or where you have consented:
- STRATO AG, Berlin, Germany — hosting of the web server and our e-mail accounts, as a processor under Art. 28 GDPR (Art. 6(1)(f) GDPR)
- Defiant, Inc., Seattle, USA — website security (Art. 6(1)(f) GDPR), see “Website security” above
- Google Ireland Limited / Google LLC — Analytics, YouTube and Maps, only after your consent (Art. 6(1)(a) GDPR)
Transfers to the United States are based on the EU-US Data Privacy Framework where the recipient is certified, or on other appropriate safeguards under Art. 46 GDPR.
Changes
We will publish any changes to this privacy notice on this page.