As of September 7, 2026
The data controller for this website, as defined by the General Data Protection Regulation (GDPR), is:
CASTFAST GmbH
Mombacher Str. 68
55122 Mainz
Germany
Phone: +49 151 6402 72 73
Email: anfrage@castfast.de
Managing Director: Rahul Prasad
Court of Registration: Mainz Local Court, HRB 52209
Please direct any questions regarding data protection and requests to exercise your rights to anfrage@castfast.de or by mail to the address listed above, with the note “Data Protection.” We have not appointed a data protection officer, as the requirements of § 38 BDSG do not apply to us.
Under Article 77 of the GDPR, you have the right to file a complaint with a supervisory authority. The authority with jurisdiction over us is:
The State Commissioner for Data Protection and Freedom of Information in Rhineland-Palatinate
Hintere Bleiche 34
55116 Mainz
www.datenschutz.rlp.de
You have the following rights with respect to your personal data:
You can revoke or change your consent to cookies and similar technologies at any time via the privacy settings on this website. For all other inquiries, please send an informal message to anfrage@castfast.de.
To the extent that we process your data on the basis of a legitimate interest pursuant to Article 6(1)(f) of the GDPR, you have the right to object to such processing at any time for reasons arising from your particular situation. We will then no longer process the data in question unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing is necessary for the establishment, exercise, or defense of legal claims.
If your data is processed for the purpose of direct marketing, you have the right to object at any time without providing a reason. Once you have objected, we will no longer use your data for direct marketing.
Please send any objections to anfrage@castfast.de.
We do not engage in automated decision-making on a case-by-case basis, including profiling, as defined in Article 22 of the GDPR.
This website uses TLS encryption throughout. Please note that data transmission over the Internet—such as when communicating via email—may be subject to security vulnerabilities. It is not possible to completely prevent unauthorized access by third parties.
We host this website on Amazon Web Services. The provider is Amazon Web Services EMEA SARL, 38 Avenue John F. Kennedy, 1855 Luxembourg. The servers are located in the ” eu-central-1 ” region (Frankfurt am Main, Germany). When you visit the website, the server log data listed below is processed on these servers.
Domain management and the redirection from castfast.com to www.castfast.com are handled by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. Your IP address is processed for the duration of the redirection.
The legal basis is Article 6(1)(f) of the GDPR. Our legitimate interest lies in providing this website in a reliable, secure, and high-performance manner. We have entered into data processing agreements with both providers in accordance with Article 28 of the GDPR.
Every time you visit a page, information transmitted by your browser is automatically collected:
This data is technically necessary to deliver the website and to ensure its stability and security. The legal basis is Article 6(1)(f) of the GDPR. This data is not combined with data from other sources. The log files are deleted after 30 days; they are stored for a longer period only if a specific security incident requires it, and then only for the duration of the investigation.
Cookies are small text files that your browser stores on your device. They do no harm and do not contain viruses. Some cookies are automatically deleted at the end of your visit (session cookies), while others remain stored until you delete them or their expiration date passes.
We use cookies and similar technologies that are strictly necessary for the operation of the website without your consent, in accordance with § 25(2)(2) TDDDG; the associated processing of personal data is based on Art. 6(1)(f) GDPR. We use all other cookies—in particular those for statistics and marketing—exclusively with your consent in accordance with Section 25(1) of the TDDDG and Article 6(1)(a) of the GDPR.
You can configure your browser to notify you when cookies are set, to allow cookies only on a case-by-case basis, to block them entirely, or to have them automatically deleted when you close your browser. If cookies are disabled, the functionality of this website may be limited.
To manage the cookies and similar technologies used, as well as the associated consents, we use the Usercentrics Consent Management Platform provided by Usercentrics GmbH, Sendlinger Straße 7, 80331 Munich, Germany. When you visit the website, your consent decision is recorded along with a randomly generated identifier, the time of your visit, information about your browser, and your IP address in order to store and verify your decision beyond the scope of the page visit. The service blocks the features requiring consent until you have given your consent.
The legal basis is Article 6(1)(c) of the GDPR—we are required under Article 7(1) of the GDPR to be able to demonstrate consent—and Article 6(1)(f) of the GDPR. Providing this data is neither contractually required nor necessary for entering into a contract. You are not obligated to provide it; however, without this data, we cannot manage your consents. Proof of consent is stored for three years. For details, please refer to the Usercentrics Privacy Policy.
| Name | Provider | Purpose | Duration | Legal Basis |
|---|---|---|---|---|
| ucData, ucString | CASTFAST (local storage) | Saves your consent decision | persistently | required |
| wp-wpml_current_language | CASTFAST | Saves the selected language | Session | required |
| cf_queryParams | CASTFAST | Stores the page’s call parameters (campaign and click IDs) to associate a request with its source | 2 days | Consent |
| _ga | Distinguishes visitors in Google Analytics | 13 months | Consent | |
| _ga_8BL317XPGZ | Tracks session status in Google Analytics | 13 months | Consent | |
| _gcl_au, _gcl_ls | Attributes conversions to an ad | 3 months | Consent | |
| test_cookie | Google (DoubleClick) | Checks whether your browser accepts cookies | 1 hour | Consent |
| ph_phc_…_posthog | PostHog | Recognizes your device for range measurement | 12 months | Consent |
We collect and process personal data only to the extent necessary for the establishment, substance, or modification of a legal relationship. The legal basis is Article 6(1)(b) of the GDPR, which permits processing for the performance of a contract or the implementation of precontractual measures.
When you contact us via the contact form, we store the information you provide in the form—your name, email address, and message—in order to process your inquiry and in case we have follow-up questions. We use the WPForms plugin to provide the form; the data is stored on our server in Frankfurt and is also sent to us via email. The form contains technical fields for spam prevention that do not require any information from you.
The legal basis is Article 6(1)(b) of the GDPR if your inquiry is aimed at entering into a contract; otherwise, it is Article 6(1)(f) of the GDPR based on our legitimate interest in processing inquiries directed to our company. We delete this data as soon as the inquiry has been fully processed and there is no obligation to retain it, but no later than six months after the last contact. If your inquiry leads to a business relationship, the retention periods under commercial and tax law—six years pursuant to Section 257 of the German Commercial Code (HGB) and ten years pursuant to Section 147 of the German Fiscal Code (AO)—apply.
When you submit a request using our quote calculator, we process the information you provide about the desired component, as well as your contact information, in order to calculate your request, prepare a quote for you, and clarify any questions. The legal basis for this is Article 6(1)(b) of the GDPR (precontractual measures).
We retain inquiries and the associated cost estimates for the duration of the business relationship and beyond, as long as statutory retention requirements apply. We retain inquiries that do not result in an order for a period of two years so that we can refer to the prior history in the event of a new inquiry; the legal basis for this is Article 6(1)(f) of the GDPR. You may object to this retention at any time.
Your information from the calculator is transmitted to our own calculation system at engine.castfast.de. We operate this system ourselves; it also runs on servers in Frankfurt am Main.
We share your inquiry details with foundries and manufacturing partners to the extent necessary to calculate and fulfill your request. The legal basis for this is Article 6(1)(b) of the GDPR.
If you contact us by email or phone, we will process your information in order to handle your inquiry. The legal basis is Article 6(1)(b) of the GDPR for contract-related inquiries; in all other cases, it is Article 6(1)(f) of the GDPR.
We use Microsoft 365 to operate our email accounts and receive your messages. The provider is Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland.
For the technical sending of automated emails from the website—such as confirmation of a form submission—we use the WP Mail SMTP plugin in conjunction with Brevo. The provider is Brevo GmbH, Köpenicker Straße 126, 10179 Berlin, Germany. In this process, your email address, your name, and the content of the message are transmitted to the respective service.
We have entered into data processing agreements with both providers in accordance with Article 28 of the GDPR. To the extent that data is transferred to the United States in this context, the transfer is based on the European Commission’s adequacy decision regarding the EU-U.S. Data Privacy Framework or on standard contractual clauses pursuant to Article 46(2)(c) of the GDPR.
We use the services described in this section only with your consent. Until you have given your consent, they are blocked by our consent management system, and no data is transferred to the providers. The legal basis is § 25(1) of the German Telemedia Act (TDDDG) for storing and retrieving information on your device, and Article 6(1)(a) of the General Data Protection Regulation (GDPR) for the subsequent processing. You can revoke your consent at any time via the privacy settings on this website.
We use Google Tag Manager to integrate the services listed below and manage them in accordance with your consent. The provider for users in the European Economic Area is Google Ireland Limited, Gordon House, 4 Barrow Street, Dublin 4, D04 E5W5, Ireland. Tag Manager itself does not set any cookies and does not collect any personal data; however, when the page loads, your IP address is transmitted to Google.
This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow Street, Dublin 4, D04 E5W5, Ireland. Google Analytics uses cookies and similar technologies to analyze your use of the website. This provides us with information, among other things, about which pages are visited, how long visitors stay, how they found us, as well as their device type and approximate geographic location at the city or region level.
Google Analytics 4 does not store your IP address. Upon receipt, it is used to determine the approximate origin of the request and to prevent abuse, and is then discarded. For requests originating in the European Union, the data is first routed through servers within the EU; however, processing still takes place on Google LLC’s servers in the United States. The legal basis for the transfer is the European Commission’s adequacy decision regarding the EU-U.S. Data Privacy Framework, under which Google LLC is certified, supplemented by standard contractual clauses pursuant to Art. 46(2)(c) of the GDPR.
The event data collected by Google Analytics is automatically deleted after 14 months. We have a data processing agreement with Google in accordance with Article 28 of the GDPR. For more information, please see Google’s Privacy Policy and Google’s explanation of data protection in Analytics.
In addition to revoking your consent via our privacy settings, you can permanently prevent data collection by Google Analytics by installing the browser add-on to disable Google Analytics.
We use the Google Ads advertising program from Google Ireland Limited to promote our services and measure the success of our ads. If you arrive at our website via a Google ad, a cookie is set that is specific to our Ads account and does not allow tracking across the websites of other Ads customers. This allows us to determine the total number of users who clicked on an ad and subsequently performed a specific action on our website—such as submitting an inquiry. We do not receive any information that would allow us to identify you personally.
In addition, we use Conversion Linker, which stores the ad’s click ID in a separate cookie (_gcl_au, valid for three months) so that a subsequent request can be assigned to the correct ad.
If you arrive at our website via an ad or a labeled campaign link, we store the campaign identifiers for the page view (utm_source, utm_medium, utm_campaign) and the click identifier gclid in a separate cookie on your device (cf_queryParams, valid for two days). If you then submit a request on another page, we transmit these identifiers along with your request. This allows us to track which campaign generated the request and report the success of an ad back to Google Ads.
We are responsible for this cookie. No data is shared with third parties, with the exception of the conversion feedback to Google described above.
We use Google’s remarketing feature to show interest-based ads to visitors of our website on other websites within the Google Display Network. To do this, we analyze your behavior on our website and assign you to audience lists. Technically, this involves the use of cookies from the domain doubleclick.net.
If you have given Google your consent to link your web and app browsing history to your Google Account and to use it to personalize ads, Google may perform cross-device remarketing. If you are signed in to Google during your visit, Google will temporarily link your usage data from our website with the information from your Google Account to create cross-device audiences. You can disable personalized ads at any time in Google’s ad settings.
We use PostHog to understand how our website is used and which areas need improvement. The provider is PostHog, Inc., 2261 Market Street #4008, San Francisco, CA 94114, USA. We use the service’s EU instance: Your data is processed and stored on servers in Frankfurt am Main.
PostHog tracks the pages you visit, your clicks, scrolling behavior, and time spent on each page, and uses this data to create a recording of your session that allows us to review the course of your visit as if it were a video.
We have entered into a data processing agreement with PostHog in accordance with Article 28 of the GDPR. To the extent that PostHog, Inc., based in the United States, accesses data, this transfer is based on standard contractual clauses pursuant to Article 46(2)(c) of the GDPR. For details, please refer to PostHog’s Privacy Policy. You may withdraw your consent at any time via the privacy settings on this website.
When you apply for a position with us—usually by email to karriere@castfast.de —we process the data you provide in order to make a decision regarding your application. This includes your contact information, your resume, certificates, and any other information you voluntarily submit to us.
The legal basis is Section 26(1) of the German Federal Data Protection Act (BDSG) in conjunction with Article 88 of the GDPR and Article 6(1)(b) of the GDPR, as the processing is necessary for the decision regarding the establishment of an employment relationship. If you voluntarily provide us with special categories of personal data as defined in Article 9 of the GDPR—such as information regarding a severe disability—we will process this data on the basis of Section 26(3) of the BDSG.
If you are not hired, we will delete your application documents six months after the conclusion of the hiring process. This retention period takes into account our legitimate interest in being able to defend against claims under the General Equal Treatment Act; the legal basis for this is Article 6(1)(f) of the GDPR. If you would like us to retain your documents for a longer period for future job openings, we will add you to our applicant pool following your express consent pursuant to Article 6(1)(a) of the GDPR. If you are hired, we will transfer your data to your personnel file.
We will only share your data if it is necessary to provide our services, if we are required to do so, or if you have given your consent. The recipients are:
| Recipient | Purpose | Headquarters / Location of Processing |
|---|---|---|
| Amazon Web Services EMEA SARL | Website Hosting | Luxembourg / Frankfurt am Main |
| Hetzner Online GmbH | Domain Management, Redirects | Germany |
| Usercentrics GmbH | Consent Management | Germany |
| Microsoft Ireland Operations Ltd. | Email Accounts | Ireland / EU |
| Brevo GmbH | Technical Email Distribution | Germany / EU |
| Google Ireland Limited | Audience Measurement, Advertising | Ireland, USA |
| PostHog, Inc. | Audience measurement, session recording | USA / Data processed in Frankfurt am Main |
| Foundries and Manufacturing Partners | Quotation and Processing of Inquiries | Primarily within the EU |
| Tax Consulting, Auditing, Legal Consulting | Legal obligations, legal enforcement | Germany |
We have entered into contracts with all data processors in accordance with Article 28 of the GDPR. Transfers to the U.S. are based on the European Commission’s adequacy decision regarding the EU-U.S. Data Privacy Framework, provided the recipient is certified under it, and otherwise on standard contractual clauses pursuant to Article 46(2)(c) of the GDPR. You can obtain a copy of the standard contractual clauses upon request at anfrage@castfast.de.
You are not required to provide us with personal data. Merely visiting this website requires only the data that is technically necessary. If you would like to send us an inquiry or receive a quote, we need the information marked as required in the respective forms; without it, we cannot process your inquiry. Consent to the use of data for statistical and marketing purposes is entirely voluntary; the website remains fully functional without it.
We update this Privacy Policy when the legal landscape, our services, or our data processing practices change. The version published on this page is the current one. You can find the date of the most recent update at the beginning of the document.
