Privacy.

Courtesy translation. This English version is provided for convenience only. The legally binding version of this privacy policy is the German original at www.it42.gmbh/datenschutz.html. In case of discrepancies, the German text prevails.

This privacy policy is a structured working draft, not legal advice. For a binding legal assessment, we recommend consulting a law firm specialized in IT and data protection law. In particular, adapt the sections on service providers, cookies, and hosting to reflect your actual data processing activities.

1. Controller

The controller responsible for the processing of personal data on this website within the meaning of the General Data Protection Regulation (GDPR) is:

IT42 GmbH
Baumwall 5
20459 Hamburg, Germany
Phone: 0800 20 400 01
Email: info@it42.gmbh

2. Collection and storage of personal data

Server log files

When you access this website, our web host (IONOS SE, Elgendorfer Straße 57, 56410 Montabaur, Germany) automatically stores information in so-called server log files that your browser transmits. These are:

IP address (in shortened form)
Date and time of access
Referrer URL
Browser and operating system used
Page accessed

The legal basis is Art. 6 (1) lit. f GDPR (legitimate interest in secure and stable operation). The data is stored for a maximum of [X] days and deleted thereafter.

3. Contact

When you contact us by email, phone, or contact form, your information is stored for the purpose of processing your request and for any follow-up questions. The legal basis is Art. 6 (1) lit. b GDPR (initiation/performance of a contract) or Art. 6 (1) lit. f GDPR (legitimate interest in responding to your enquiry).

4. Hosting

This website is hosted by IONOS SE, Elgendorfer Straße 57, 56410 Montabaur, Germany. A data processing agreement pursuant to Art. 28 GDPR is in place with IONOS. Data is processed exclusively in data centers located within the European Union.

5. Fonts (Google Fonts)

Current status: This website currently embeds the "Roboto" font family via the Google Fonts CDN. In doing so, the visitor's IP address is transmitted to Google (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland).

Planned change: Fonts will be hosted locally in the near future to avoid data transmission to Google.

Note: In a ruling dated 20 January 2022 (case no. 3 O 17493/20), the Munich Regional Court classified the embedding of Google Fonts without consent as a GDPR violation. Local hosting of fonts is recommended before go-live.

6. Maps (Google Maps)

The contact section of this website contains a reference (link) to Google Maps. Simply clicking the link does not transmit any data to Google beyond what occurs when visiting any other website.

If a Maps view is embedded: A two-click solution or consent pursuant to Art. 6 (1) lit. a GDPR will be obtained.

7. Cookies and consent mechanism

This website uses no tracking or marketing cookies. To store your cookie banner decision, an entry is created in the browser's local storage (localStorage) under the key it42-cookie-consent. This is technically necessary within the meaning of § 25 (2) no. 2 of the German Telecommunications-Telemedia Data Protection Act (TTDSG) and does not contain any personally identifying information — the entry stores only your choice ("accepted" or "declined") with a timestamp. Legal basis: Art. 6 (1) lit. f GDPR (legitimate interest in documenting consent).

External content (e.g. embedded maps) that would trigger further data processing is loaded only after your explicit consent via the cookie banner. The legal basis for this is Art. 6 (1) lit. a GDPR. You can revoke your consent at any time via the "Cookie settings" link in the footer.

8. Your rights as a data subject

You have the following rights with respect to us:

Right to access (Art. 15 GDPR)
Right to rectification (Art. 16 GDPR)
Right to erasure (Art. 17 GDPR)
Right to restriction of processing (Art. 18 GDPR)
Right to data portability (Art. 20 GDPR)
Right to object to processing (Art. 21 GDPR)

You also have the right to lodge a complaint with a data protection supervisory authority regarding our processing of your personal data. The competent supervisory authority is the Hamburg Commissioner for Data Protection and Freedom of Information (HmbBfDI), Ludwig-Erhard-Str. 22, 20459 Hamburg, Germany.

9. Withdrawal of consent

If the processing of your personal data is based on your consent, you have the right to withdraw your consent at any time. The lawfulness of processing carried out on the basis of consent prior to withdrawal remains unaffected.

10. Currency of this privacy policy

As of: [Date to be added on publication]. Due to further development of our website or changed legal requirements, it may become necessary to update this privacy policy. The latest version can be viewed on this website at any time.