Privacy Policy

1. Controller

2. Hosting

The website is hosted on a server provided by IONOS SE. Technically necessary connection data is processed to deliver content and protect the service. Where the hosting provider acts as a processor, processing is governed by an agreement under Article 28 GDPR.

3. Server logs

When the website is accessed, technical access data may be logged, including the IP address, date and time, requested URL, HTTP method, status code, transferred data volume, referrer and browser/user-agent information. The purposes are technical delivery, troubleshooting and IT security. The legal basis is Article 6(1)(f) GDPR.

Full IP addresses in regular server logs are generally retained for no more than seven days and then deleted. Longer retention is limited to specific security incidents where evidence preservation or legal enforcement requires it. Full IP addresses are not used for long-term statistics.

4. Cookies and local storage

The publicly accessible information pages do not use analytics, marketing or other technically non-essential tracking services. No consent or privacy-settings dialog is used on those pages.

The protected login area may use only a technically necessary session cookie for authentication and access control. Further information is provided in the following section.

5. Login and protected portfolio

Protected online demos may process account, login and session data, including username or email address, secure password hash, session identifier, timestamps, login events and security-related technical data. A technically necessary session cookie is used exclusively for authentication and access control and is not used for analytics or advertising. The legal bases are Article 6(1)(b) and Article 6(1)(f) GDPR.

6. Uploads, processing jobs and results

Online demos may process uploaded files, filenames, job parameters, generated results, status data and technical logs to perform the requested processing. Job and upload data remains stored until removed using the available cleanup function or until no longer required for operation, troubleshooting and security. Do not upload sensitive personal data unless you have an adequate legal basis.

7. External map and 3D content

Some protected map or 3D applications may request base-map data from external providers such as OpenStreetMap or CARTO. This technically transmits the IP address to the provider. Such content is not loaded on the purely public information pages and is requested only when the relevant protected application is deliberately opened.

8. Contact

Information sent by email or telephone is processed to handle the request. The legal basis is Article 6(1)(b) GDPR for contract-related enquiries and otherwise Article 6(1)(f) GDPR. Data is deleted when the matter is completed unless statutory retention duties or legitimate documentation interests apply.

9. Your rights

Subject to the statutory requirements, you have rights of access, rectification, erasure, restriction, data portability and objection. Consent can be withdrawn at any time for the future.

You may lodge a complaint with a data protection authority, in particular:

10. Changes

This policy will be updated when website functions, services or legal requirements change.