Privacy notice

Last updated: 23 September 2026

1. Controller and privacy contact

The controller responsible for the processing described below is:

Please use the email address above for privacy enquiries and to exercise your rights.

2. Scope

This notice covers visits to our website and enquiries by email or telephone. The necessary information and agreements for processing in customer systems as part of our IT services are provided separately.

3. Hosting and technical access data

We use DomainFactory's “Webhosting Starter” product with the cPanel management interface to host this website. The provider is Domainfactory GmbH, c/o WeWork, Neuturmstr. 5, 80331 Munich, Germany.

Website access involves processing connection data required to provide the site. This includes IP address, requested domain and resource, request time, browser identifier (user agent) and HTTP status code. Depending on server configuration, the referring page (referrer) may also be transmitted. Our hosting provider receives this data.

The purposes are delivering the website, maintaining stability and detecting and preventing abuse and attacks. The legal basis is Article 6(1)(f) GDPR. Our legitimate interests are secure and reliable operation of our website and troubleshooting.

Logs are retained only as long as needed for troubleshooting and operational security. Specific security incidents may require separate retention of relevant data for investigation and legal claims.

The cPanel environment provides technical access and error logs. Retention is determined by the period needed for troubleshooting and operational security and by the logging configuration selected in the hosting account. Log data that are no longer needed are deleted. Optional access-log archives and visitor statistics are used only where necessary for secure technical operation.

DomainFactory information about cPanel logs and statistics

4. Contact by email and telephone

When you contact us, we process your contact details, enquiry content and information from subsequent communication. The email link on this website only opens the email application configured on your device and pre-fills the recipient and subject. The content is not transmitted through the website.

These data are used to handle and assess your enquiry, prepare proposals and communicate with you. An email is transmitted only when you send it yourself from your email application. The mailbox stores the message subject to the retention rules below.

The legal basis is Article 6(1)(b) GDPR where your enquiry concerns a contract with you as a natural person or steps taken at your request before a contract. For enquiries from employees or other business contacts and general business enquiries, we rely on Article 6(1)(f) GDPR. Our legitimate interests are appropriately handling business matters and communicating with prospective and existing customers.

You are not legally required to submit an enquiry or provide this data. Please do not send passwords, access keys or unnecessary sensitive information.

5. Microsoft Exchange Online

The mailbox info@sz-solutions.de uses Microsoft Exchange Online. Processing includes sender and recipient addresses, subject, message content, attachments and technical delivery information.

For customers in the European Economic Area, the Microsoft contracting entity is generally Microsoft Ireland Operations Limited, Ireland. Microsoft affiliates and subprocessors may also be involved. Access or processing outside the EU/EEA, particularly in the United States, cannot be ruled out solely because a mailbox is hosted in Europe.

The purposes and legal bases are those described above for handling enquiries. Microsoft describes processing and international transfers in its Microsoft Products and Services Data Protection Addendum. The conditions applicable to our actual contract and, where required, safeguards under Articles 44 et seq. GDPR, including standard contractual clauses, govern this use. Information about safeguards applicable to our processing can be requested through our privacy contact.

Microsoft Products and Services Data Protection Addendum

6. Umami Cloud and website analytics

We use Umami Cloud, provided by Umami Software, Inc., for statistical website analysis only after you have consented through the consent dialog. Before consent, the Umami script is not loaded and no connection to cloud.umami.is is established. If you consent, the connection may involve processing your IP address and technical request information. Analytics covers page views and technical usage information such as visited URLs, referring pages, browser and device information and approximate location. Our integration does not transmit the contents of your emails as analytics events.

The legal basis is your consent under Article 6(1)(a) GDPR and, where information is stored on or accessed from your device, section 25(1) TDDDG. You can withdraw consent at any time with future effect through “Privacy settings” in the footer. On withdrawal, the page reloads and Umami is no longer included on subsequent page views. This does not affect the lawfulness of processing before withdrawal.

According to the operator, the account uses the EU data region and the standard six-month retention period. Umami operates without analytics cookies. EU storage does not automatically exclude access from third countries.

Umami information about data collection

7. Local resources and device storage

The website uses locally available fonts and does not load fonts from external font providers. Design assets are hosted on our own web server. There are no external map, video or social-media embeds. Apart from the Umami script loaded only after consent, the website code does not load additional third-party scripts on page access.

Your analytics choice, the consent version and the decision time are stored in your browser's local storage for no more than six months. This storage is necessary so the website can respect your choice on later visits without asking again on every page. When the period expires, you will be asked again. You can change your choice earlier at any time through “Privacy settings”.

8. Recipients and enquiry retention

Access is provided to the responsible people and the hosting and email providers involved. Further disclosure occurs only where necessary to handle the matter, legally required or based on your consent. Newsletters and automated advertising campaigns are not part of this website.

Enquiries are retained as long as necessary to handle them and relevant follow-up questions. If no engagement results, the email is deleted once the communication has concluded, unless statutory retention duties or necessary evidence for legal claims require continued storage. If the message already constitutes business correspondence or a contractual document subject to retention requirements, its use during the necessary retention period is limited to the relevant retention or evidence purpose.

9. Your rights

Subject to the applicable statutory requirements, you have the following rights:

• Access to your personal data and a copy of that data (Article 15 GDPR).
• Rectification of inaccurate data and completion of incomplete data (Article 16 GDPR).
• Erasure where no statutory exceptions apply (Article 17 GDPR).
• Restriction of processing (Article 18 GDPR).
• Data portability for automated processing based on consent or a contract (Article 20 GDPR).
• Withdrawal of consent with future effect, without affecting the lawfulness of earlier processing (Article 7(3) GDPR).

You may complain to a data protection supervisory authority, particularly in the Member State of your habitual residence, place of work or the alleged infringement (Article 77 GDPR). The authority for our location in Hesse is the Hessian Commissioner for Data Protection and Freedom of Information (HBDI), Postfach 3163, 65021 Wiesbaden, Germany.

Submit a complaint to the HBDI

10. Automated decisions

This website does not make solely automated decisions producing legal or similarly significant effects within the meaning of Article 22 GDPR. Your enquiry is assessed personally by our team.