Privacy Policy

We are pleased about your visit to our website. The protection of your personal data is important to us. Below, we inform you about which personal data we process when you use our website and what rights you have under the General Data Protection Regulation (GDPR).

1. Controller

Data Fabricator GmbH

Rathausallee 70, 22846 Norderstedt, Germany

Phone: +49 (0) 40 / 60 92 72 72

Email: m.schultz@data-fabricator.com

2. Purposes and Legal Bases

We process personal data for the following purposes and on the following legal bases:

• Provision and security of the website (Art. 6 para. 1 lit. f GDPR)

• Processing of inquiries / project initiation (Art. 6 para. 1 lit. b GDPR)

• Fulfillment of legal obligations (Art. 6 para. 1 lit. c GDPR)

• Optional analysis/marketing only with consent (Art. 6 para. 1 lit. a GDPR)

3. Website Provision & Server Log Files

When accessing the website, technically required data (server log files) is processed by the hosting provider, e.g., IP address, time, accessed page, referrer URL, browser/OS.

Purposes: Stability, security, error analysis, defense against attacks.

Legal basis: Art. 6 para. 1 lit. f GDPR.

Storage period: 7–14 days.

Hosting provider: Hetzner

4. Contact (Email, Phone, Contact Form)

When contacting us, we process your information (name, email, phone number if applicable, company, content of your message) to handle your inquiry.

Legal basis: Art. 6 para. 1 lit. b GDPR (pre-contractual) and/or Art. 6 para. 1 lit. f GDPR.

Storage period: Until final processing; beyond that only if retention obligations exist or for documentation purposes.

5. Cookies & Consent Management

We may use cookies/similar technologies. Technically necessary cookies are required for operation and security. Optional cookies (e.g., analysis/marketing) are only used with consent.

Legal basis: Art. 6 para. 1 lit. c GDPR (proof) and Art. 6 para. 1 lit. f GDPR (legally compliant management).

6. Third-Party Content / External Services

If we embed third-party content (e.g., maps, videos, external fonts), the third-party provider may technically process required data (e.g., IP address).

Legal basis: Typically consent (Art. 6 para. 1 lit. a GDPR), unless technically required.

7. Recipients, Data Processors, Third Countries

We use service providers (hosting/IT) who process data on our behalf. Transfer to third countries only takes place if GDPR requirements are met (e.g., adequacy decision, standard contractual clauses) and/or consent is given.

8. Storage Period

We store data only as long as required for purposes or legal obligations. Business-relevant communication may be subject to commercial/tax retention periods.

9. Your Rights

You have the right to information, correction, deletion, restriction, data portability, objection, and withdrawal of given consent.

10. Right to Complain

You have the right to complain to a data protection supervisory authority. The authority of your place of residence or our company headquarters is particularly responsible.

11. Data Security

We implement appropriate technical and organizational measures to protect your data.

12. Changes

We adapt this privacy policy if the legal situation or our data processing changes.