Privacy Policy

Last updated: 19 October 2026

We take the protection of your personal data seriously. This website is deliberately lean: we do not use any analytics or tracking tools, we do not display advertising, we do not load fonts or scripts from third-party servers, and we do not use cookies for marketing purposes. Below we explain which data is nevertheless processed when you visit this website, for what purpose and on what legal basis.

1. Controller

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

Fuel Production Technologies
Owner: Andreas Kloh
Franzheimer Ring 1
85452 Eichenried
Germany

Email: fuelproductiontechnologies@gmail.com

No data protection officer has been appointed, as the legal requirements for doing so are not met. If you have any questions about data protection, please contact us at the email address above.

2. Hosting and delivery of the website via Cloudflare

This website is provided via the Cloudflare Pages service and Cloudflare's content delivery network (CDN). The provider is Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA ("Cloudflare").

Data processed: When you visit our website, Cloudflare processes technically necessary connection data. This includes in particular your IP address, the date and time of access, the requested address (URL), the amount of data transferred, the status code of the request, the address of the previously visited page (referrer, if transmitted) and information about your browser and operating system (user agent).

Purpose: The processing is necessary to deliver the website to you quickly and reliably, to encrypt the connection and to protect the website against attacks, misuse and overload (e.g. DDoS attacks, malicious bots).

Legal basis: Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure, stable and efficient provision of our website.

Data processing agreement: We have concluded a data processing agreement with Cloudflare pursuant to Art. 28 GDPR. Cloudflare processes the data only in accordance with our instructions.

Transfers to third countries: Cloudflare operates a global network of data centres. It therefore cannot be ruled out that data is also processed outside the EU, in particular in the USA. According to its own information, Cloudflare, Inc. is certified under the EU-U.S. Data Privacy Framework. An adequacy decision of the European Commission therefore applies to the USA (Art. 45 GDPR). In addition, the transfer is based on the EU Standard Contractual Clauses (Art. 46(2)(c) GDPR), which form part of the data processing agreement.

Storage period: Connection data is stored only for as long as necessary for the purposes stated and is then deleted. Details on storage by Cloudflare can be found in Cloudflare's privacy policy: https://www.cloudflare.com/privacypolicy/

3. Strictly necessary cookies

To protect our website against automated attacks and malicious bots, Cloudflare may set strictly necessary cookies. These are in particular:

__cf_bm – distinguishes human visitors from automated bots. The cookie expires automatically after 30 minutes of inactivity.
cf_clearance – is set only if you have passed a Cloudflare security check (e.g. a browser check) and stores this result so that the check does not have to be repeated on every page view.

These cookies serve exclusively the security and operation of the website. They are not used for analytics or advertising purposes and are not combined with other data to create a profile.

Legal basis: Storing these cookies on your device is permitted without consent because it is strictly necessary to provide the service you have requested (Section 25(2) No. 2 of the German Telecommunications Digital Services Data Protection Act, TDDDG). The subsequent processing of the data is based on Art. 6(1)(f) GDPR; our legitimate interest is protecting the website against misuse.

You can delete or block cookies in your browser settings at any time. In that case, you may have to pass security checks more often.

4. Fonts

The fonts used on this website are served directly from our own web offering. No connection to third-party servers (such as Google Fonts) is established when the fonts are loaded.

5. Embedded YouTube videos (two-click solution)

On our website we embed videos from our presence on the YouTube platform. For users in the EU, the provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). The parent company is Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Before you click: As long as you do not actively start the video, no connection to YouTube or Google is established. The preview image displayed is loaded from our own web offering.

After you click: Only when you click on the preview image or the play button is the YouTube player loaded and a connection to Google's servers established. In particular, your IP address, information about your browser and device, the address of our page and your interaction with the video are transmitted to Google. We use the so-called privacy-enhanced mode (embedding via youtube-nocookie.com). According to Google, no advertising cookies are set before playback in this mode. Once playback has started, however, Google may store and read cookies or similar technologies (e.g. local storage) on your device, among other things to analyse usage behaviour, build user profiles and personalise content and advertising. These cookies may have a storage period of up to two years. If you are logged in to a Google account, Google may associate the video view with your account. You can prevent this by logging out beforehand.

We have no influence on the nature and scope of the data processing by Google. Further information can be found in Google's privacy policy: https://policies.google.com/privacy

Legal basis: Your consent, which you give by clicking on the video (Art. 6(1)(a) GDPR and Section 25(1) TDDDG). The consent applies only to the respective page view. You can withdraw it at any time with effect for the future by not starting the video again and deleting cookies stored by YouTube in your browser.

Transfers to third countries: It cannot be ruled out that data is transferred to Google LLC in the USA. Google LLC is certified under the EU-U.S. Data Privacy Framework; an adequacy decision of the European Commission therefore applies (Art. 45 GDPR).

We operate our own channel on the YouTube platform (https://www.youtube.com/@FuelProductionTechnologies) in order to inform the public about our company, our technology and our projects and to communicate with interested parties. For users in the EU, the provider of the platform is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google").

Data processing by Google: When you visit our channel, watch, comment on or rate videos, or subscribe to the channel, Google processes personal data. This includes in particular your IP address, information about your browser and device, your usage behaviour on the platform and, if you are logged in to a Google account, your account data. Google processes this data under its own responsibility and regularly also for market research and advertising purposes. Based on your usage behaviour, usage profiles may be created and cookies may be stored on your device, even if you do not have a Google account or are not logged in. These profiles may be used to show you advertising inside and outside YouTube that presumably matches your interests. We have no influence on the nature and scope of this processing.

Our own processing: As the channel operator, we can see the content you leave publicly on our channel (e.g. comments and your public channel name) and can respond to it. In addition, Google provides us with aggregated statistics on the use of our channel (e.g. number of views, watch time, approximate regions of origin). These statistics do not allow us to identify individual persons. The legal basis is our legitimate interest in informing the public about our company and in communicating with interested parties (Art. 6(1)(f) GDPR).

Transfers to third countries: It cannot be ruled out that your data is transferred to and processed by Google LLC in the USA. Google LLC is certified under the EU-U.S. Data Privacy Framework; an adequacy decision of the European Commission therefore applies (Art. 45 GDPR). Nevertheless, enforcing your rights outside the EU may be more difficult.

Your rights and options to object: You can exercise requests for access and other data subject rights most effectively directly with Google, as only Google has full access to the user data. If you need assistance with this, you can contact us at any time. You can restrict personalised advertising in your Google account settings (https://myadcenter.google.com). Further information can be found in Google's privacy policy: https://policies.google.com/privacy

Our website contains simple links, for example to our YouTube channel. These are not embedded content: no data is transmitted to the linked providers when you visit our website. Only when you follow a link are you taken to the respective provider's site, to which its own privacy policy applies.

8. Contact by email

If you contact us by email, we process the data you provide (in particular your email address, your name if provided, and the content of your message) in order to handle and respond to your enquiry.

Legal basis: If your enquiry relates to the conclusion or performance of a contract, the legal basis is Art. 6(1)(b) GDPR. In all other cases, the processing is based on our legitimate interest in responding to enquiries (Art. 6(1)(f) GDPR).

Storage period: We delete your enquiry once it has been fully dealt with and no further storage is required. If the correspondence is subject to statutory retention obligations (e.g. as a commercial or business letter under Section 257 of the German Commercial Code or Section 147 of the German Fiscal Code), we retain it for the legally prescribed period of up to ten years.

Email service: We use the Gmail service for our email communication. For users in the EU, the provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. When you send us an email, your message and the associated data (in particular sender, recipient, subject, content, attachments and time) are stored and processed on Google's servers. Google also processes this data in accordance with its own privacy policy: https://policies.google.com/privacy

It cannot be ruled out that data is transferred to Google LLC in the USA. Google LLC is certified under the EU-U.S. Data Privacy Framework; an adequacy decision of the European Commission therefore applies (Art. 45 GDPR).

If you do not want your message to be processed via Google, you can alternatively contact us by post at the address given in section 1.

9. SSL/TLS encryption

For security reasons, this website uses SSL/TLS encryption. You can recognise an encrypted connection by "https://" in the address bar and the padlock symbol in your browser. This means that the data you transmit to us cannot be read by third parties.

10. Your rights

Within the framework of the statutory provisions, you have the right at any time to:

access the data stored about you (Art. 15 GDPR),
rectification of inaccurate data (Art. 16 GDPR),
erasure of your data (Art. 17 GDPR),
restriction of processing (Art. 18 GDPR),
data portability (Art. 20 GDPR),
withdraw any consent given, with effect for the future (Art. 7(3) GDPR). The lawfulness of processing carried out before the withdrawal remains unaffected.

To exercise your rights, an informal message to the email address given in section 1 is sufficient.

Where we process your data on the basis of our legitimate interest (Art. 6(1)(f) GDPR), you have the right to object to this processing at any time on grounds relating to your particular situation. We will then no longer process your data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

11. Right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint with a data protection supervisory authority about our processing of your personal data (Art. 77 GDPR), in particular in the Member State of your habitual residence, place of work or place of the alleged infringement. The supervisory authority competent for us is:

Bavarian State Office for Data Protection Supervision (Bayerisches Landesamt für Datenschutzaufsicht, BayLDA)
Promenade 18
91522 Ansbach
Germany
https://www.lda.bayern.de

12. No obligation to provide data, no automated decision-making

You are under no statutory or contractual obligation to provide us with personal data. Without the connection data mentioned in section 2, however, the website cannot be delivered for technical reasons. No automated decision-making, including profiling within the meaning of Art. 22 GDPR, takes place.

13. Changes to this privacy policy

We will update this privacy policy whenever the website, the services used or the legal requirements change. The version published on this page applies in each case.

This is a translation of the German privacy policy. In case of discrepancies, the German version shall prevail.