Privacy policy
This policy applies to the website at [domain]. The application at app.[domain] has [its own privacy notice]. Translation of the German Datenschutzerklärung. [Authoritative language version: to be decided in the legal review]
Draft, legal review required before publication. Details in square brackets are still missing.
1. Controller
[Name of the company or the providers][Street and house number]
[Postcode and city]
Germany
Email: [kontakt@domain]
Phone: [Phone number]
[Details of the data protection officer, if one has been appointed]
2. The essentials in brief
- This website is static. It sets no cookies, stores nothing in your browser and runs no script.
- No tracking, no analytics services, no advertising.
- No content from third parties: fonts, images and style sheets come from our own server.
- No contact form. If you would like to write to us, please use email.
3. Hosting
The website runs on a server of IONOS SE, [address according to the data processing agreement], in a data centre in Germany (Frankfurt am Main). IONOS processes the data on our behalf according to Art. 28 GDPR. [Confirm conclusion of the data processing agreement with IONOS]
4. Server access logs
With every request, the web server processes technically necessary data. It writes part of it to a log:
- IP address of the requesting device
- Date and time
- Request method and status code of the response
- Response time and amount of data transferred
The requested address, the browser (user agent) and the previously visited page (referrer) are not logged.
- Purpose
- Delivering the website, secure operation, for example defending against attacks, and troubleshooting.
- Legal basis
- Art. 6 (1) (f) GDPR. Our legitimate interest is the secure and stable operation of the website.
- Storage period
- 30 days, after which the entries are deleted automatically.
- Recipients
- IONOS as processor. We do not pass the data on to third parties unless we are legally obliged to do so.
The website can only be reached encrypted via HTTPS.
5. Contact by email
If you write to us by email, for example via the link “Book a demo”, we process your email address, your name and the content of your message in order to answer your enquiry and arrange a demo.
- Legal basis
- Art. 6 (1) (b) GDPR where your enquiry aims at a contract, otherwise Art. 6 (1) (f) GDPR. Our legitimate interest is answering your enquiry.
- Storage period
- [Storage period for email enquiries, for example until the enquiry has been dealt with, then statutory retention periods]
- Recipients
- [Email provider with registered office and data processing agreement]
6. Links to other websites
This website links to the quality reports at the Federal Joint Committee (www.g-ba.de) and to the application at app.[domain]. You only leave this website when you follow such a link. Your browser does not transmit which of our pages you are coming from. The linked websites have their own privacy notices.
7. Your rights
You have the following rights with regard to personal data concerning you:
- Access (Art. 15 GDPR)
- Rectification (Art. 16 GDPR)
- Erasure (Art. 17 GDPR)
- Restriction of processing (Art. 18 GDPR)
- Data portability (Art. 20 GDPR)
- Objection to processing (Art. 21 GDPR)
Right to object: Where we process data on the basis of Art. 6 (1) (f) GDPR, you may object to this processing at any time on grounds relating to your particular situation.
An email to [kontakt@domain] is enough for any request.
8. Right to lodge a complaint
You have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), in particular in the member state of your habitual residence, your place of work or the place of the alleged infringement. The authority responsible for us is [supervisory authority at the company's registered office].
9. Obligation to provide data and automated decisions
You are not obliged to provide us with data. Without the technical data from section 4, however, the server cannot deliver the website. There is no automated decision-making, including profiling.
Last updated: [Date]