Privacy
This notice covers this website only. Data processed when applicants book appointments is described by the institution that offers the booking, as the controller of that data.
Draft: replace every highlighted field with your company's details, and have this page reviewed before the site goes live.
Who is responsible
[Company name and legal form][Street and number, postcode and city], Germany
Email: [privacy contact email]
Data protection officer: [name and contact, if one is appointed]
What this website does not do
This website sets no cookies, uses no analytics or tracking, and loads no content from other companies: the fonts and every other file are served from our own server.
Server logs
When you open a page, our server in Germany processes your IP address, the time, the page requested, the response and your browser's identification, so that the page can be delivered and attacks can be detected. The legal basis is our legitimate interest in operating a secure website (Art. 6(1)(f) GDPR). Logs are deleted after [7] days, unless they are needed to investigate a security incident.
When you contact us
When you use the contact form or email us, we process your name, organisation, email address, the offer you choose and your message, only to answer your request and, if you ask for it, to prepare a demo or an offer (Art. 6(1)(b) and (f) GDPR). The form sends your message to our mailbox by email; it is not stored on the website server. To stop abuse, the server counts messages per network address for one hour, in memory only. We delete the correspondence when it is no longer needed, unless commercial or tax law requires us to keep it.
Hosting
The website is hosted by [hosting provider and location in Germany], which processes data on our behalf under a data processing agreement (Art. 28 GDPR).
Your rights
You can ask for access to your data, its correction or erasure, restriction of processing and data portability, and you can object to processing based on legitimate interest (Art. 15 to 21 GDPR). Write to the address above. You can also complain to a data protection supervisory authority, for example the one for [your federal state].