Privacy policy

This English version is provided for informational purposes only. The legally binding version is the German original.

1.Privacy at a Glance

General Information

The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data refers to any data with which you can be personally identified. Detailed information on data protection can be found in our privacy policy listed below.

Data Collection on This Website

Who is responsible for data collection on this website?
The data processing on this website is carried out by the website operator. You can find their contact details in the section “Information on the Responsible Entity” in this privacy policy.

How do we collect your data?
Your data is collected when you provide it to us. This may include data that you enter into a contact form.
Other data is collected automatically or after your consent by our IT systems when you visit the website. This primarily includes technical data (e.g. browser, operating system, or time of the page visit). This data is collected automatically as soon as you access our website.

What do we use your data for?
Part of the data is collected to ensure the proper functioning of the website. Other data may be used to analyze user behavior. If contracts can be concluded or initiated via the website, the transmitted data will also be processed for offers, orders, or other business-related inquiries.

What rights do you have regarding your data?
You have the right to obtain information about the origin, recipients, and purpose of your stored personal data at any time and free of charge. You also have the right to request the correction or deletion of your data. If you have given consent to data processing, you may withdraw this consent at any time with effect for the future. Furthermore, you have the right to request the restriction of the processing of your personal data under certain circumstances. You also have the right to lodge a complaint with the competent supervisory authority.

You may contact us at any time regarding this or any other questions about data protection.

Analytics Tools and Third-Party Tools

When visiting this website, your browsing behavior may be statistically evaluated. This is mainly done using so-called analytics programs.

Detailed information on these analytics tools can be found in the privacy policy below.

2.Hosting

We host the content of our website with the following provider:

IONOS

The provider is IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany (hereinafter “IONOS”). When you visit our website, IONOS collects various log files including your IP address. For details, please refer to IONOS’s privacy policy:
https://www.ionos.de/terms-gtc/terms-privacy

The use of IONOS is based on Article 6(1)(f) of the GDPR. We have a legitimate interest in ensuring the reliable presentation of our website. If appropriate consent was obtained, the processing is based solely on Article 6(1)(a) GDPR and § 25(1) of the German Telecommunications-Digital Services Data Protection Act (TDDDG), to the extent that the consent includes the storage of cookies or access to information on the user’s device (e.g. device fingerprinting) as defined in the TDDDG. Consent may be revoked at any time.

Data Processing Agreement
We have concluded a data processing agreement (DPA) with the above-mentioned provider. This is a legally required contract that ensures that the provider processes personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.

Server Log Files

When you visit our website, the web server automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These include:

  • Browser type and version
  • Operating system used
  • Referrer URL
  • Host name of the accessing computer
  • Time of the server request
  • IP address (anonymized)

The storage of this data is based on Article 6(1)(f) GDPR and serves the technical delivery and security of the website.

3.General Information and Mandatory Disclosures

Data Protection

The operators of this website take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with statutory data protection regulations and this privacy policy.

When you use this website, various personal data may be collected. Personal data is any data with which you can be personally identified. This privacy policy explains which data we collect and how we use it. It also explains how and for what purpose this happens.

We would like to point out that data transmission over the Internet (e.g. when communicating by email) may have security gaps. Complete protection of data from access by third parties is not possible.

Information on the Controller

The controller responsible for data processing on this website is:
Jörg Heutmanek IT-Solutions
Jahnstraße 110
64285 Darmstadt
Germany
Telefon: +49 (0) 163 [-] 2353933
E-Mail:

The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data (e.g. names, email addresses, etc.).

Storage Duration

Unless a more specific storage period is stated within this privacy policy, your personal data will remain with us until the purpose for the data processing ceases to apply. If you assert a legitimate request for deletion or revoke your consent to data processing, your data will be deleted, unless we have other legally permissible grounds for storing your personal data (e.g. retention periods under tax or commercial law); in the latter case, deletion will take place after these reasons no longer apply.

Legal Bases for Data Processing

If you have consented to data processing, we process your personal data on the basis of Article 6(1)(a) GDPR or, if special categories of data are processed under Article 9(1) GDPR, on the basis of Article 9(2)(a) GDPR. In the case of explicit consent to the transfer of personal data to third countries, data processing is also based on Article 49(1)(a) GDPR. If you have consented to the storage of cookies or access to information on your end device (e.g. via device fingerprinting), data processing is additionally based on § 25(1) TDDDG. Consent can be revoked at any time.
If your data is required to fulfill a contract or to carry out pre-contractual measures, we process your data based on Article 6(1)(b) GDPR. Furthermore, we process your data if this is necessary to fulfill a legal obligation under Article 6(1)(c) GDPR. Data processing may also be based on our legitimate interest under Article 6(1)(f) GDPR. The specific legal bases applicable in each case are explained in the relevant sections of this privacy policy.

Transfer of Data to Third Countries That Are Not Safe Under Data Protection Law, and Transfers to Non-DPF-Certified U.S. Companies

Among other things, we use tools from companies based in third countries that are not considered secure under EU data protection law, as well as U.S. tools whose providers are not certified under the EU-U.S. Data Privacy Framework (DPF). If these tools are active, your personal data may be transferred to these countries and processed there. We would like to point out that these countries may not guarantee a level of data protection comparable to that of the EU.

We also point out that the United States is generally considered a safe third country. A data transfer to the U.S. is therefore permitted if the recipient is certified under the EU-U.S. Data Privacy Framework (DPF) or provides appropriate additional safeguards. For information on data transfers to third countries, including recipients of such data, please refer to this privacy policy.

Recipients of Personal Data

As part of our business operations, we work with various external parties. In some cases, this also involves the transfer of personal data to these external entities. We only share personal data with external parties if it is necessary for contract performance, if we are legally obligated to do so (e.g. to tax authorities), if we have a legitimate interest under Article 6(1)(f) GDPR in the disclosure, or if another legal basis permits the data transfer. When using processors, we only transfer personal data of our customers on the basis of a valid data processing agreement. In the case of joint processing, a joint processing agreement will be concluded.

Withdrawal of Your Consent to Data Processing

Many data processing operations are only possible with your explicit consent. You can revoke your consent at any time. The legality of the data processing carried out until the revocation remains unaffected.

Right to Object to Data Collection in Special Cases and to Direct Marketing (Art. 21 GDPR)

IF THE DATA PROCESSING IS BASED ON ARTICLE 6(1)(E) OR (F) GDPR, YOU HAVE THE RIGHT TO OBJECT, ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION, AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA; THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS.
THE RESPECTIVE LEGAL BASIS ON WHICH PROCESSING IS BASED CAN BE FOUND IN THIS PRIVACY POLICY.
IF YOU OBJECT, WE WILL NO LONGER PROCESS YOUR AFFECTED PERSONAL DATA UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS OR THE PROCESSING SERVES TO ASSERT, EXERCISE OR DEFEND LEGAL CLAIMS (OBJECTION PURSUANT TO ARTICLE 21(1) GDPR).

IF YOUR PERSONAL DATA IS PROCESSED FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR SUCH MARKETING PURPOSES. THIS ALSO APPLIES TO PROFILING IN CONNECTION WITH SUCH DIRECT MARKETING.
IF YOU OBJECT, YOUR PERSONAL DATA WILL THEN NO LONGER BE USED FOR DIRECT MARKETING PURPOSES (OBJECTION PURSUANT TO ARTICLE 21(2) GDPR).

Right to Lodge a Complaint with the Supervisory Authority

In the event of violations of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, particularly in the Member State of their habitual residence, place of work or the place of the alleged infringement. This right to lodge a complaint is without prejudice to other administrative or judicial remedies.

Right to Data Portability

You have the right to receive data which we process automatically on the basis of your consent or in fulfillment of a contract, delivered to yourself or to a third party in a commonly used, machine-readable format. If you request the direct transfer of the data to another controller, this will only take place if it is technically feasible.

Right to Access, Rectification, and Erasure

Within the scope of the applicable legal provisions, you have the right to access your stored personal data at any time, free of charge, as well as the right to rectification or erasure of this data. You may contact us at any time with regard to this and other questions about personal data.

Right to Restriction of Processing

You have the right to request the restriction of processing of your personal data. You can contact us at any time to request this. The right to restriction applies in the following cases:

  • If you dispute the accuracy of your personal data stored with us, we usually need time to verify this. During the verification period, you have the right to request restriction of processing of your personal data.
  • If the processing of your personal data was/is unlawful, you may request restriction of processing instead of erasure.
  • If we no longer need your personal data but you require it for the exercise, defense, or establishment of legal claims, you have the right to request restriction of processing instead of deletion.
  • If you have objected to processing under Article 21(1) GDPR, a balance must be struck between your interests and ours. As long as it has not yet been determined whose interests prevail, you have the right to request restriction of processing of your personal data.

If you have restricted the processing of your personal data, such data – apart from being stored – may only be processed with your consent or for the establishment, exercise, or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the European Union or a Member State.

SSL or TLS Encryption

For security reasons and to protect the transmission of confidential content, such as orders or inquiries you send to us as the site operator, this site uses SSL or TLS encryption. You can recognize an encrypted connection by the browser’s address line switching from “http://” to “https://” and by the lock icon in your browser line.

When SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

Objection to Promotional Emails

We hereby object to the use of contact data published as part of our legal obligation (Imprint) for the purpose of sending unsolicited advertising and information materials. The operators of this website expressly reserve the right to take legal action in the event of the unsolicited sending of advertising information, for example via spam emails.

Use of Real Cookie Banner

We use the consent management tool “Real Cookie Banner” provided by devowl.io GmbH, Tannet 12, 94539 Grafling, Germany, to obtain the legally required consent for the use of cookies and similar technologies. In this context, your cookie preferences are stored in order to apply them again on future visits. The processing is carried out in accordance with Art. 6(1)(c) GDPR.

For more information, please visit:
https://devowl.io/privacy-policy/

4.Data Collection on This Website

Cookies

Our website uses so-called “cookies.” Cookies are small data packages that do not harm your device. They are either stored temporarily for the duration of a session (session cookies) or permanently (persistent cookies) on your end device. Session cookies are automatically deleted after your visit ends. Persistent cookies remain on your device until you delete them yourself or your web browser automatically removes them.

Cookies may originate from us (first-party cookies) or from third-party companies (so-called third-party cookies). Third-party cookies enable the integration of certain services from third-party companies within websites (e.g. cookies for processing payment services).

Cookies serve various purposes. Many cookies are technically necessary, as certain website functions would not work without them (e.g. shopping cart functions or video display). Other cookies are used to analyze user behavior or for advertising purposes.

Cookies that are required to carry out the electronic communication process, to provide certain functions you have requested (e.g. for the shopping cart function), or to optimize the website (e.g. cookies to measure web traffic) are stored on the basis of Article 6(1)(f) GDPR, unless another legal basis is specified. The website operator has a legitimate interest in storing necessary cookies for the technically error-free and optimized provision of its services. If consent has been requested for the storage of cookies and similar recognition technologies, processing is carried out exclusively on the basis of this consent (Article 6(1)(a) GDPR and § 25(1) TDDDG); consent may be withdrawn at any time.

You can configure your browser to notify you when cookies are set, to allow cookies only in individual cases, to reject cookies for specific cases or in general, and to automatically delete cookies when the browser is closed. Disabling cookies may limit the functionality of this website.

Which cookies and services are used on this website can be found in this privacy policy.

Use of Google Analytics (Website Only)

We use Google Analytics on our website, a web analytics service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland).

Google Analytics uses cookies to help analyze how users use the website. The information generated by the cookie about your use of the website is usually transmitted to and stored on a Google server in the USA.

We have activated IP anonymization. This means your IP address will be shortened by Google within member states of the European Union or in other states that are party to the Agreement on the European Economic Area before being transmitted. Only in exceptional cases is the full IP address sent to a Google server in the USA and shortened there.

Legal basis: The use of Google Analytics takes place only with your consent under Article 6(1)(a) GDPR.

You can revoke your consent at any time via our cookie banner.

Data Processing Agreement: We have concluded a data processing agreement with Google pursuant to Article 28 GDPR.

Data Transfer to Third Countries:
Google LLC is certified under the EU-U.S. Data Privacy Framework (DPF). Data transfers to the USA are additionally safeguarded by the EU Commission’s Standard Contractual Clauses (SCCs).

Opt-out Option:
You can prevent the collection of your data by Google Analytics by installing the following browser plugin:

https://tools.google.com/dlpage/gaoptout?hl=en

Further information can be found in Google’s privacy policy:
https://policies.google.com/privacy

Use of Polylang (Language Selection)

This website uses the Polylang plugin to provide multilingual content. A cookie (pll_language) is set to remember the language selected by the user. This cookie is technically necessary to display the correct language on future visits.

Data Collection in Our Mobile App

Firebase Analytics

Our mobile app uses Firebase Analytics, a service provided by Google Ireland Limited. Firebase Analytics allows us to analyze usage behavior within the app to improve our features.

The following data may be collected:

  • Device information (operating system, device type, app version)
  • In-app interactions (e.g. page views, clicks)
  • Approximate location data
  • Crash data (via Firebase Crashlytics)

We have configured Firebase to anonymize IP addresses and not to collect cross-device data (e.g. via user ID or Google Signals).

Legal basis: The use of Firebase Analytics is based solely on your consent according to Article 6(1)(a) GDPR.
Consent is obtained upon first launching the app and can be withdrawn at any time in the app settings.

Data Processing Agreement: We have entered into a data processing agreement with Google.

Data Transfers:
Firebase may transfer data to countries outside the EU. Google is certified under the EU-U.S. Data Privacy Framework; in addition, the EU Commission’s Standard Contractual Clauses apply.

More information can be found here: https://firebase.google.com/support/privacy

Contact Forms

If you send us inquiries via the contact forms, your details from the forms, including the contact data you provide, will be stored by us for the purpose of processing your inquiry and for follow-up questions. We do not share this data without your consent.

The processing of this data is based on Article 6(1)(b) GDPR, if your inquiry is related to the performance of a contract or is necessary to carry out pre-contractual measures. In all other cases, processing is based on our legitimate interest in the effective handling of inquiries (Article 6(1)(f) GDPR) or on your consent (Article 6(1)(a) GDPR), if requested. Consent can be withdrawn at any time.

The data you enter in the contact form remains with us until you request its deletion, revoke your consent to its storage, or the purpose for data storage no longer applies (e.g. after your inquiry has been fully processed). Mandatory legal provisions – especially retention periods – remain unaffected.

5.Plugins and Tools

Use of Font Awesome

To ensure consistent display of icons and graphical elements, we use the Font Awesome icon library on our website and in our app.

The integration is implemented locally, so no connection is made to third-party servers (e.g. Fonticons, Inc.) when the site is accessed.

As a result, no personal data is transferred to third parties.

Google reCAPTCHA

We use “Google reCAPTCHA” (hereinafter “reCAPTCHA”) on this website. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

reCAPTCHA is used to check whether data entered on this website (e.g. in a contact form) is made by a human or by an automated program. To do this, reCAPTCHA analyzes the behavior of the website visitor based on various characteristics. This analysis begins automatically as soon as the visitor enters the website. reCAPTCHA evaluates various information (e.g. IP address, time spent on the website, or mouse movements made by the user). The data collected during the analysis is forwarded to Google.

The reCAPTCHA analysis runs entirely in the background. Visitors are not notified that an analysis is taking place.

The storage and analysis of the data is based on Article 6(1)(f) GDPR. The website operator has a legitimate interest in protecting its site from abusive automated spying and spam. If consent has been obtained, processing is carried out exclusively on the basis of Article 6(1)(a) GDPR and § 25(1) TDDDG, provided the consent includes the storage of cookies or access to information on the user’s device (e.g. device fingerprinting) as defined by the TDDDG. Consent can be withdrawn at any time.

Further information about Google reCAPTCHA can be found in the Google privacy policy and terms of use at:
https://policies.google.com/privacy?hl=en
https://policies.google.com/terms?hl=en

Google is certified under the EU-U.S. Data Privacy Framework (DPF). The DPF is an agreement between the European Union and the United States designed to ensure compliance with European data protection standards for data processing in the U.S. Every company certified under the DPF is obligated to adhere to these data protection standards.
More information is available from the provider here:
https://www.dataprivacyframework.gov/participant/5780

This English version is provided for informational purposes only. The legally binding version is the German original.

Version: April 2025