Privacy Policy.

01 / CONTROLLER

Who is responsible for your data

Use the email address above if you have a privacy question or wish to exercise your rights.

02 / WEBSITE ACCESS

Visiting our website and server logs

Your browser sends technical information required to deliver our website securely. This may include your IP address, the date and time of access, the requested URLs and files, HTTP status code, referrer where provided, and browser and operating-system information (user agent).

We process these data to provide the website, diagnose errors, prevent attacks and protect our IT systems. The legal basis is Article 6(1)(f) GDPR, reflecting our legitimate interest in operating a secure and reliable website.

Log data are kept only for as long as needed for secure technical operation, troubleshooting or investigating specific security incidents. They may be retained for longer if preservation is legally necessary.

03 / HOSTING

Technical infrastructure and hosting

The website runs on server infrastructure managed by us at Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany.

Technical connection and access data may be processed as required to provide and maintain the infrastructure. The legal basis is Article 6(1)(f) GDPR. Recipients may include infrastructure and IT service providers insofar as this is necessary to operate the website.

04 / CONTACT

Contact by email or telephone

If you contact us by email or telephone, we process the information you supply, especially your contact details, message and relevant business information, to handle your inquiry and communicate with you.

For contract-related or pre-contractual requests the legal basis is Article 6(1)(b) GDPR. Other inquiries are processed under Article 6(1)(f) GDPR (our legitimate interest in handling requests and business correspondence). Mandatory record keeping is based on Article 6(1)(c) GDPR.

We erase correspondence after handling it where no statutory retention obligation or legitimate reason for further retention applies. Business records remain subject to the relevant legal retention periods.

Providing this information is voluntary; without appropriate contact details we may be unable to respond to your request.

05 / COOKIES AND CONTENT

Cookies, analytics and third parties

The published website does not itself set analytics or advertising cookies or use analytics or advertising-tracking services. There is no registration function or contact form. Website imagery, system-fallback fonts and scripts are served without loading third-party webfont or analytics services.

Social-media icons are simple links or currently inactive profile links; no social plug-ins, posts or third-party widgets are embedded. Merely visiting this website therefore does not trigger data transfers to an external social network.

If external services or non-essential cookies are introduced later, we will update this policy and obtain consent in advance where legally required (section 25 TDDDG and Article 6(1)(a) GDPR).

06 / RECIPIENTS

Recipients and disclosure

We share personal data only where necessary and legally permitted for website delivery, IT security, handling inquiries, legal compliance or performance of contracts. Potential recipient categories include infrastructure, hosting and email service providers, and public authorities where required by law.

We do not intentionally transfer visitor data outside the European Economic Area as part of delivering this website. When you voluntarily email us, however, routing used by your own email provider or other participating providers may be outside our control.

07 / YOUR RIGHTS

Your data-protection rights

Subject to the requirements of the GDPR, you have rights of access (Article 15), rectification (Article 16), erasure (Article 17), restriction of processing (Article 18) and, where applicable, data portability (Article 20).

Where our legal basis is legitimate interests, you may object under Article 21 GDPR on grounds relating to your particular situation. If we process data based on consent, you may withdraw that consent at any time for the future.

To exercise these rights, email info@stadtdigital.com. You may also complain to a supervisory authority under Article 77 GDPR. Our relevant authority is the North Rhine-Westphalia Commissioner for Data Protection and Freedom of Information (ldi.nrw.de).

08 / OTHER INFORMATION

Security and automated decision-making

This website uses HTTPS encryption. Nevertheless, the security of internet communications cannot be guaranteed absolutely.

We do not use automated decision-making or profiling within the meaning of Article 22 GDPR in connection with this website.

This policy describes the current company website. We will update it when our services or data processing change.