Privacy policy

When you open a page, your browser transmits technically necessary data to the server. This includes the IP address, date and time, the requested address, status code, amount of data transferred, referrer and browser identifier. This data is stored in the server log, is used solely for operating the website and defending against attacks, and is not combined with other data.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is the secure and smooth operation of the website. The logs are deleted after seven days at the latest.

We only set a cookie in one case: if you choose a language yourself at the bottom of the page, we store that choice in the cookie “language” with the value “de” or “en”. This way we show you the same language on later visits. The cookie contains nothing else, is not analysed and expires after one year. It is strictly necessary to respect your explicit choice of language. The legal basis is § 25(2) No. 2 TDDDG.

Without a saved choice, the language on your first visit follows the language setting of your browser, which every browser sends anyway. Nothing is stored for this and no IP address is evaluated.

On your first visit we ask you in a window whether we may count page views. You can accept everything, reject everything or choose for yourself in the settings. Both options are equally easy, and without your consent the audience measurement is not loaded at all.

So that we do not ask you again on every visit, we store your choice in your browser's local storage under the name “kroterion-consent”. It only records whether you agreed to statistics and when you decided. This entry never leaves your device and remains until you delete it in your browser. It is strictly necessary for the consent window to work. The legal basis is § 25(2) No. 2 TDDDG.

If you agree, we count page views with Plausible Analytics, which we run ourselves on our own server. No data goes to an analytics company. Plausible works without cookies and stores nothing on your device. It does not recognise you across websites and does not create profiles. Your IP address is not stored. Together with the day and the domain it is converted into a checksum that cannot be reversed and changes daily. We record the page viewed, the referring website, browser, operating system, device type, screen width and the country derived from the IP address.

The legal basis for audience measurement is your consent under Art. 6(1)(a) GDPR and § 25(1) TDDDG. You can withdraw it at any time with effect for the future, via the cookie settings link at the bottom of every page or directly here: Cookie settings. Processing up to the withdrawal remains lawful.

The fonts we use, including Geist, are stored directly on our server and delivered from there. Visiting this website does not open a connection to Google Fonts or any other third party server.

If you use the contact form or the demo form, your details (name, company, email address, phone number, chosen service or demo, industry, preferred time, message, the language of the page and the time of your consent) are transmitted to our server in encrypted form and stored as a request in our self hosted customer inbox Chatwoot. Chatwoot runs on the same rented server as this website. No third parties receive your details.

We process your details to handle the request on the basis of Art. 6(1)(b) GDPR where it concerns the initiation of a contract, and otherwise on the basis of Art. 6(1)(f) GDPR. By ticking the box in the form you additionally consent under Art. 6(1)(a) GDPR. You can withdraw this consent at any time by email. We delete your details as soon as the matter is closed and no statutory retention periods apply. The same applies if you email us directly.

You have the right to access, rectification, erasure, restriction of processing, data portability and objection. A message to the address above is enough. You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Hessian Commissioner for Data Protection and Freedom of Information.

We process some data on the basis of Art. 6(1)(f) GDPR, that is, because of our legitimate interest. This includes the server log and requests that do not concern the initiation of a contract. For audience measurement you do not need to object, withdrawing your consent is enough. You can object to this processing at any time under Art. 21(1) GDPR on grounds relating to your particular situation.

After an objection we no longer process the data concerned, unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims. A message to the address above is enough to object.

The website runs on a rented server. The provider processes the data mentioned above on our behalf on the basis of a data processing agreement under Art. 28 GDPR.