1. Controller
The controller for data processing on this website is CCSchwarz GmbH. Full contact details are available in the imprint.
2. Accessing the website and server log files
When you access this website, your browser transmits technically necessary data which the hosting provider stores in log files:
- the address requested and the date of the request
- the volume of data transferred and a message confirming successful retrieval
- the browser type and version used
- the operating system and the previously visited page
- a shortened or complete IP address
This processing serves to deliver the page and to ensure technical security, on the basis of our legitimate interest (Art. 6(1)(f) GDPR). Log files are deleted after a short period.
3. Hosting
The website is hosted by HostEurope GmbH, Cologne, Germany. Processing takes place exclusively on servers located in Germany. A data processing agreement pursuant to Art. 28 GDPR is in place with that provider.
4. Audience measurement with Plausible
To understand which content is in demand and how visitors find us, we use Plausible Analytics provided by Plausible Insights OÜ, Tallinn, Estonia. Processing takes place exclusively on servers within the European Union. A data processing agreement pursuant to Art. 28 GDPR is in place with that provider.
Plausible operates without cookies. No data is stored on your device. No profile is created, there is no cross-device recognition and no combination with data from other websites. The following is recorded:
- the page requested and the time of the request
- the previously visited page, where transmitted
- campaign parameters contained in the address requested (
utm_source,utm_medium,utm_campaign,utm_term,utm_content) - clicks on links leading away from this website, for example to the App Store
- downloads of files
- the submission of a form – only the fact that it was submitted is recorded, not the content of your entries
- device type, browser and operating system in broad categories
- the country of origin, approximated from the IP address
Your IP address is not stored. Together with the browser identifier and a randomly generated value that changes daily, it feeds into a hash whose sole purpose is to count several page views within one day as a single visit. Once the random value changes, even that attribution is no longer possible.
The legal basis is our legitimate interest in a data-minimising analysis of reach (Art. 6(1)(f) GDPR). As no information is stored on or read from your device for analytics purposes, consent under Section 25(1) TDDDG is not required and no consent banner is used.
You may object to the measurement at any time (Art. 21 GDPR). There are two
practical ways to do so: any common script or content blocker prevents the
measurement entirely. Alternatively, you can set the value plausible_ignore
to true in your browser’s local storage for this website – the script checks
this flag before every transmission and will then permanently exclude you from
the count. This flag is the only information the script reads from your browser,
and it exists only if you create it yourself.
5. Fonts and embedded content
All fonts are served from our own server. No connection to third-party servers takes place. External content such as maps or videos is not embedded.
6. Contacting us
If you write to us by email or via the contact form, we process your details in order to handle the enquiry and any follow-up questions. The legal basis is Art. 6(1)(b) GDPR for contract-related enquiries and otherwise Art. 6(1)(f) GDPR. The data is deleted once the enquiry has been dealt with conclusively and no statutory retention obligations prevent deletion.
7. Abuse prevention on the contact form
To prevent the form from being used automatically for bulk messaging, we limit the number of submissions. To do so, a shortened, non-reversible hash of your IP address is stored together with a timestamp when you submit the form. These details are deleted automatically after one hour and are combined neither with the content of your enquiry nor with any other data. The legal basis is our legitimate interest in the security and availability of the service (Art. 6(1)(f) GDPR). No external service and no third-party captcha is used.
8. Customer portal
The customer portal is a separate application at its own address. Its own privacy policy applies to its use.
9. Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection to processing based on legitimate interest (Art. 21). You may withdraw consent at any time with effect for the future.
You also have the right to lodge a complaint with a data protection supervisory authority. The competent authority is the State Commissioner for Data Protection and Freedom of Information of Rhineland-Palatinate, Germany.
10. Changes to this policy
We update this privacy policy whenever our data processing or the legal requirements change. The version published on this page applies.