Privacy Notice
TRID GmbH takes the protection of your personal data very seriously and treats your personal information confidentially in accordance with legal data protection regulations and this Privacy Policy. We do not sell your data to third parties.
This policy applies to the website tridgmbh.com and its language variants (DE, EN, UK, RU). The website is hosted on servers in Germany.
Data Controller
The data controller pursuant to the General Data Protection Regulation (GDPR) is:
TRID GmbH
Parkallee 14
14974 Ludwigsfelde
Germany
Authorised Managing Director: Andrey Trukhachev
Phone: +49 3378 2066-0
Email: [email protected]
Commercial Register: Amtsgericht Potsdam, HR B 16752P
VAT ID: DE263484741
Collection of General Data and Information
When you access this website, our web server automatically records information transmitted by your browser: IP address, date and time of access, page requested, referrer URL, browser and operating system.
This data is not merged with other data sources. Processing is based on Art. 6(1)(f) GDPR (legitimate interest in secure and stable operation of the website and defence against attacks). Server log data including the full IP address is automatically deleted after 7 days at the latest; longer retention only occurs on a case-by-case basis in the event of security incidents, until they are finally resolved.
The website is hosted on servers in Germany. No transfer of server log data to third countries occurs.
Cookies and Consent Management
This website uses cookies and similar technologies to store information on the user's device. We distinguish between:
Necessary cookies: technically required for website operation (session management, security, consent state). Set on the basis of Art. 6(1)(f) GDPR and § 25(2) TDDDG (Telekommunikation-Digitale-Dienste-Datenschutz-Gesetz, formerly TTDSG) without consent.
Statistics cookies: enable analysis of website usage (Google Analytics 4). Set only after your explicit consent pursuant to Art. 6(1)(a) GDPR and § 25(1) TDDDG.
Marketing cookies: enable personalised advertising and conversion measurement (Google Ads). Set only after your explicit consent.
We use Google Consent Mode v2 to technically implement your consent decisions. Before consent is granted, no personal data is transmitted to Google. After rejection, Google services send only anonymised, aggregated pings without cookies, IP addresses or advertising identifiers.
You can revoke your consent at any time via the "Cookie Settings" link in the footer. Revocation takes effect at the time of its declaration; the lawfulness of processing carried out before revocation remains unaffected.
Google Tag Manager (Server-Side)
This website uses Google Tag Manager in a server-side variant. Google Tag Manager is a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google").
With server-side tagging, requests are first sent to our own subdomain endpoint tag.tridgmbh.com and processed there before — subject to your consent — being forwarded to Google. This increases data control and enables data minimisation prior to transmission.
Tag Manager itself does not set cookies and does not process personal data. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in efficient and privacy-compliant tag management).
More information: https://policies.google.com/privacy
Google Analytics 4
Subject to your consent, this website uses Google Analytics 4 (GA4), an analytics service provided by Google Ireland Limited.
Purpose: analysis of user behaviour to improve our services (which pages are visited, for how long, which language version, which region).
Processed data: anonymised IP address, device and browser information, referrer, pages visited, dwell time, triggered events (e.g. form submission, contact button click), pseudonymous client ID.
IP anonymisation: GA4 automatically anonymises IP addresses — your full IP is never stored or linked to other data.
Retention period: 14 months, then automatically deleted.
Legal basis: Art. 6(1)(a) GDPR (consent).
Transfer to third countries: Google may transfer data to servers in the United States. Google LLC is certified under the EU-US Data Privacy Framework; the Adequacy Decision of the EU Commission of 10 July 2023 was confirmed by the General Court of the European Union on 3 September 2025 (Case T-553/23, Latombe) and currently remains in force. An appeal before the Court of Justice of the European Union (Case C-703/25 P) is pending. Additionally, Standard Contractual Clauses pursuant to Art. 46(2)(c) GDPR apply as a further safeguard.
Objection: you may prevent GA4 tracking by rejecting consent in the cookie banner or by installing the official browser add-on: https://tools.google.com/dlpage/gaoptout
Google Ads Conversion Tracking
Subject to your consent, this website uses Google Ads Conversion Tracking, a service of Google Ireland Limited.
Purpose: measuring the success of our advertising campaigns (which ad led to a contact or form submission).
Processed data: Google Click Identifier (GCLID), pseudonymous cookie ID, timestamp and type of conversion (e.g. form submission, WhatsApp click, phone call), website language, approximate region.
Retention period: up to 90 days in the Ads account, then aggregated statistics.
Legal basis: Art. 6(1)(a) GDPR (consent).
Transfer to third countries: see section 6.
Enhanced Conversions
To improve the accuracy of our conversion measurement, we use the Google Ads feature "Enhanced Conversions".
How it works: when you submit a form, your email address and, if applicable, phone number are hashed on our server using SHA-256 before transmission to Google. Only the irreversible hash value is transmitted to Google. Google can match this hash against hashes of the same users (who are signed into their Google account) to improve the attribution of your conversion to an advertisement.
Important: Google never receives your email or phone number in plain text. The hash is not reversible. Identification of your person by third parties on the basis of the hash is excluded.
Legal basis: Art. 6(1)(a) GDPR (consent, as part of marketing consent).
Objection: by rejecting marketing cookies in the consent banner or in your Google account: https://myaccount.google.com/data-and-privacy
Google Ads Remarketing
Subject to your consent, we use Google Ads Remarketing to display TRID GmbH ads relevant to you on other websites in the Google advertising network (e.g. YouTube, search results, partner websites).
Processed data: cookie ID, pages visited on tridgmbh.com, interactions (e.g. calculator usage), language.
Retention period: up to 540 days.
Legal basis: Art. 6(1)(a) GDPR (consent).
Objection: via the cookie banner or at https://adssettings.google.com
Contact by Email
If you contact us by email at [email protected] or a staff address, the data you transmit (email address, name, message content) will be stored to answer your questions or to initiate a business relationship.
Legal basis: Art. 6(1)(b) GDPR (initiation of a contract) or Art. 6(1)(f) GDPR (legitimate interest in responding to inquiries).
Retention period: until final processing of your inquiry, at most 3 years after the last contact. If a contract is concluded, statutory retention periods apply (up to 10 years pursuant to § 147 AO).
Contact Form
When you use the contact form on tridgmbh.com, the following data is processed: name, company, email address, phone number, request type, message, timestamp, language used, and, if applicable, marketing attribution (UTM parameters, GCLID) provided marketing consent has been granted.
Transmission: the data is sent via an HTTPS-encrypted channel to our server, validated there, and forwarded by email to [email protected].
Purpose: processing your inquiry, initiation of a contract, if applicable follow-up.
Legal basis: Art. 6(1)(a) GDPR (your consent via the separate checkbox) and Art. 6(1)(b) GDPR (initiation of a contract).
Recipients: only employees of TRID GmbH responsible for customer inquiries. No disclosure to third parties except where legally required.
Retention period: until completion of your inquiry, at most 3 years. In case of contract conclusion: statutory retention periods.
Technical protection measures: IP addresses are stored in pseudonymised form for 24 hours for anti-abuse purposes (rate limiting) and then automatically deleted.
WhatsApp Contact
On the Ukrainian and Russian language versions of our website, we offer a direct contact button to WhatsApp Business.
When you click the WhatsApp button:
you are redirected to wa.me — the official WhatsApp short link service;
we transmit only our phone number and a pre-filled inquiry template — no personal data from you;
further communication takes place entirely within the WhatsApp infrastructure under the privacy policy of WhatsApp Ireland Limited: https://www.whatsapp.com/legal/privacy-policy;
WhatsApp processes personal data (phone number, message content, metadata) outside our sphere of influence.
If you contact us via WhatsApp, we process the data you transmit (phone number, message content, timestamp) for the purpose of handling your inquiry.
Legal basis: Art. 6(1)(b) GDPR (initiation of a contract) and Art. 6(1)(f) GDPR (legitimate interest in efficient customer communication).
Retention period: WhatsApp messages are retained for up to 3 years after the last contact.
Note: if you do not wish for data to be transmitted to WhatsApp / Meta, please contact us by email, phone or contact form.
Transfer to Third Countries
When using Google services (Analytics, Ads, Tag Manager) and Meta services (WhatsApp), personal data may be transferred to servers in the United States.
Legal bases for transfer:
Adequacy Decision pursuant to Art. 45(3) GDPR (EU-US Data Privacy Framework): Google LLC and Meta Platforms are certified under the adequacy decision that entered into force on 10 July 2023 and was confirmed by the General Court on 3 September 2025 (Case T-553/23, Latombe). An appeal before the CJEU (Case C-703/25 P) is pending; should the decision be annulled, we will inform you and adjust the legal basis accordingly.
Standard Contractual Clauses (SCCs) pursuant to Art. 46(2)(c) GDPR as an additional contractual safeguard.
Your explicit consent pursuant to Art. 6(1)(a) GDPR for the setting of the associated cookies (§ 25(1) TDDDG), given via the consent banner.
An entirely equivalent level of data protection to that in the EU cannot be guaranteed for transfers to the US. In particular, there is a possibility of governmental access by US authorities under US surveillance legislation (including FISA 702, EO 12333).
Retention Period
Personal data provided to us via this website is stored only for as long as necessary to fulfil the purpose or as required by statutory retention obligations:
Server logs: 7 days as a rule; on a case-by-case basis in the event of security incidents until resolved
Contact form inquiries: 3 years after last contact (in case of contract conclusion: statutory deadlines up to 10 years)
Analytics data (GA4): 14 months
Ads conversion data: up to 90 days in the account, then aggregated
Remarketing lists: up to 540 days
Email correspondence: 3 years after last contact
WhatsApp messages: 3 years after last contact
Consent records: 3 years (proof obligation)
IP rate-limit hashes: 24 hours
Your Rights
You have the following rights regarding the personal data concerning you under GDPR:
Right of access (Art. 15) — which data we store about you
Right to rectification (Art. 16) — correction of inaccurate data
Right to erasure (Art. 17) — "right to be forgotten"
Right to restriction of processing (Art. 18)
Right to data portability (Art. 20)
Right to object (Art. 21)
Right to withdraw consent (Art. 7(3)) — at any time with effect for the future
To exercise your rights, contact us at [email protected].
You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is:
Die Landesbeauftragte für den Datenschutz und für das Recht auf Akteneinsicht Brandenburg
Stahnsdorfer Damm 77
14532 Kleinmachnow
Germany
https://www.lda.brandenburg.de
Automated Decision-Making
We do not use automated decision-making including profiling within the meaning of Art. 22 GDPR. The delivery of ads controlled by Google Ads serves marketing purposes only and does not make decisions with legal effect for you.
Data Security
We take technical and organisational security measures (Art. 32 GDPR) to protect your data against manipulation, loss and unauthorised access:
HTTPS encryption (TLS 1.3) for the entire website
Hosting on servers in Germany
Regular security updates
Access control with two-factor authentication
Encrypted backups
Rate limiting and anti-abuse protection
Changes to This Privacy Policy
We reserve the right to adjust this Privacy Policy to reflect changes in the legal situation or in our services. The updated Privacy Policy will then apply to your next visit.
Effective date: 27.08.2026