Handling your information
Privacy
Information on personal data processing on this website.
Controller
Kevin Jüngel, Softwarehaus Berlin
Kollwitzstr. 76
10435 Berlin
Email: [email protected]
Hosting and delivery
The website and email mailbox are hosted by IONOS SE, Elgendorfer Straße 57, 56410 Montabaur, Germany. Requests involve processing the IP address, time, requested URL, response status, browser information and, where transmitted, the referring page. This enables delivery, troubleshooting and protection of the website. The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is reliable and secure operation.
Technical logs are retained for operation, troubleshooting and detection of abuse. Retention depends on these purposes and the logging procedures of the providers involved. Specific security incidents or legal obligations may require individual records to be kept longer. We do not create our own visitor profiles.
Cloudflare
The website is served through the network of Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA. Web requests, including connection data and submitted content, pass through this network. Cloudflare processes IP addresses and technical traffic information, among other data. This supports delivery and protection against attacks under Article 6(1)(f) GDPR.
Processing outside the EU may take place. Cloudflare states that it relies on its EU-US Data Privacy Framework certification for transfers to the US and, where applicable, on standard contractual clauses for other international transfers. Cloudflare provides details on processing, retention and transfers in its privacy policy.
Cloudflare privacy information
Enquiries and meeting preferences
For enquiries, we process your name, email address and message. Company details, budget, project start, contact preference and preferred times are optional. A phone number is required if you request a callback. We use this information to handle the enquiry and arrange a conversation, not for unsolicited advertising. Without the required contact details, we cannot handle the enquiry or callback.
The legal basis is Article 6(1)(b) GDPR where the enquiry concerns a contract or steps before a contract. Other enquiries are handled under Article 6(1)(f) GDPR based on our interest in responding to business correspondence. Form messages are transmitted to the server using encryption and delivered to us by email through IONOS. The form application does not maintain an additional database of enquiry content.
We retain correspondence for as long as necessary to handle the enquiry, an engagement arising from it or legal claims. Statutory retention obligations remain applicable. Data is deleted afterwards. A preferred time is not a confirmed booking. Teams is not embedded on this website. An agreed meeting takes place through a separate invitation.
Contact form protection
The form uses short-lived security tokens and sending limits. We store a keyed hash of the email address, token hashes and timestamps on the server. The email address and message are not stored in plain text in this rate-limit file. Checks consider sending attempts for one hour and previously used tokens for 30 minutes. Expired entries are removed on the next valid form attempt. The basis is Article 6(1)(f) GDPR to prevent abuse and duplicate delivery.
Cookies and embedded content
The website does not set its own analytics or advertising cookies and does not store form data in your browser’s local storage. Fonts, graphics and scripts are delivered under our domain. No external maps, videos, social media plugins or analytics tools are embedded. Technically necessary browser or security functions of the hosting and protection service serve delivery and protection only. Where access to your device is necessary for this purpose, it is based on section 25(2) TDDDG.
Your rights
Subject to the legal requirements, you have rights of access, rectification, erasure, restriction and data portability. You may object to processing based on legitimate interests for reasons relating to your particular situation. Any consent you have given can be withdrawn at any time with effect for the future. We do not carry out automated decision-making or profiling.
To exercise your rights, contact [email protected]. You may also complain to a data protection supervisory authority, in particular where you normally live, work or where an alleged infringement occurred. In Berlin, this is the Berlin Commissioner for Data Protection and Freedom of Information.