Privacy Policy

1. Name and contact details of the controller responsible for processing and of the company data protection officer

This privacy information applies to data processing by:

2. Collection and storage of personal data as well as the nature and purpose of its use

a) When visiting the website

When you access our website deindigo.de, the browser used on your device automatically sends information to the server of our website. This information is stored temporarily in a so-called log file. The following information is recorded without any action on your part and stored until it is automatically deleted:

• IP address of the requesting computer,
• date and time of access,
• name and URL of the file retrieved,
• website from which access is made (referrer URL),
• browser used and, where applicable, the operating system of your computer as well as the name of your access provider.

We process the above data for the following purposes:

• ensuring that a connection to the website is established without difficulty,
• ensuring that our website can be used conveniently,
• evaluating system security and stability, and
• for further administrative purposes.

The legal basis for the data processing is Art. 6 para. 1 sentence 1 lit. f GDPR. Our legitimate interest follows from the purposes of data collection listed above. Under no circumstances do we use the data collected for the purpose of drawing conclusions about you as a person.

When you visit our website, we use cookies and an analysis service only with your consent. Further explanations can be found in section 4 of this privacy policy.

b) When using our contact form

For questions of any kind, we offer you the option of contacting us via a form provided on the website. This requires you to provide a valid email address so that we know who the enquiry is from and can respond to it. Further details may be provided voluntarily.

The data processing for the purpose of contacting us takes place in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR on the basis of your voluntarily given consent.

The personal data we collect for the use of the contact form is deleted automatically once your enquiry has been dealt with.

3. Disclosure of data

Your personal data is not transferred to third parties for purposes other than those listed below.

We only pass your personal data on to third parties if:

• you have given your express consent to this in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR,
• disclosure is necessary under Art. 6 para. 1 sentence 1 lit. f GDPR for the assertion, exercise or defence of legal claims and there is no reason to assume that you have an overriding interest worthy of protection in your data not being disclosed,
• there is a legal obligation to disclose the data under Art. 6 para. 1 sentence 1 lit. c GDPR, and
• this is legally permissible and necessary under Art. 6 para. 1 sentence 1 lit. b GDPR for the performance of contractual relationships with you.

4. Cookies and analysis services

Cookies are small files that your browser creates automatically and that are stored on your device (laptop, tablet, smartphone or similar) when you visit a website.

Without your consent, we set no cookies on this website that are not necessary for its operation. When you first visit our pages you will see a notice allowing you to accept or decline the audience measurement described below. If you decline, or make no selection, no cookies are set and no analysis takes place.

Google Analytics 4

Where you have given your consent, we use Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Google processes the data as our processor; a data processing agreement pursuant to Art. 28 GDPR is in place.

Google Analytics uses cookies that enable an analysis of your use of our website. Two cookies are set, each with a lifetime of two years. They contain a randomly generated identifier that recognises your browser on a return visit; your name and email address are not among the data stored.

The data collected includes the pages you visit, the time and duration of your visit, the page you came from, your approximate location at city level, and technical details of your browser and device. Your IP address is transmitted to Google and used there to determine that approximate location; according to Google's own statements, IP addresses are neither logged nor stored in Google Analytics 4. We ourselves cannot identify you from this data.

The event data is deleted automatically after 14 months.

Transfer to the USA. A transfer of your data to Google LLC in the United States cannot be ruled out. Google LLC is certified under the EU-US Data Privacy Framework; by its decision of 10 July 2023 the European Commission determined an adequate level of protection for transfers to certified organisations. Google has additionally entered into Standard Contractual Clauses. We point out that US authorities may, under certain conditions, access such data, and that you may not have the same legal remedies available to you as within the European Union.

Legal basis. The legal basis for storing cookies on your device and accessing them is Section 25 (1) TDDDG; for the subsequent processing of your data it is your consent pursuant to Art. 6 (1) (a) GDPR. Consent is voluntary; without it, all content on our website remains fully available to you.

Withdrawal. You may withdraw your consent at any time with effect for the future. To do so, open the cookie settings via the link in the footer of any page and switch off analysis. You can additionally delete cookies already set in your browser settings. The lawfulness of processing carried out before withdrawal remains unaffected.

Further information on how Google handles user data can be found in Google's privacy policy at policies.google.com/privacy.

Consent management

To obtain and manage your consent we use a solution operated on our own server. It stores your choice on your device so that the notice does not reappear on every visit, and transmits no data to third parties. The legal basis is Section 25 (2) no. 2 TDDDG together with Art. 6 (1) (c) GDPR, as we are obliged to demonstrate the consent given.

Should we use further cookies or analysis services in future, we will amend this privacy policy accordingly beforehand and, where required, obtain your consent.

5. Rights of data subjects

You have the right:

• under Art. 15 GDPR to request information about the personal data we process concerning you. In particular, you may request information about the purposes of processing, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right of complaint, the origin of your data if it was not collected by us, as well as the existence of automated decision-making including profiling and, where applicable, meaningful information about the details thereof;
• under Art. 16 GDPR to request without undue delay the rectification of incorrect personal data or the completion of the personal data stored by us;
• under Art. 17 GDPR to request the erasure of your personal data stored by us, unless the processing is necessary for exercising the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the assertion, exercise or defence of legal claims;
• under Art. 18 GDPR to request the restriction of the processing of your personal data if you contest the accuracy of the data, if the processing is unlawful but you object to its erasure and we no longer need the data although you require it for the assertion, exercise or defence of legal claims, or if you have objected to the processing under Art. 21 GDPR;
• under Art. 20 GDPR to receive the personal data you have provided to us in a structured, commonly used and machine-readable format or to request its transmission to another controller;
• under Art. 7 para. 3 GDPR to withdraw consent once given at any time with effect towards us. The consequence of this is that we may no longer continue the data processing that was based on this consent in future, and
• under Art. 77 GDPR to lodge a complaint with a supervisory authority. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or of our registered office for this purpose.

6. Right to object

Where your personal data is processed on the basis of legitimate interests under Art. 6 para. 1 sentence 1 lit. f GDPR, you have the right under Art. 21 GDPR to object to the processing of your personal data, provided that there are grounds for this arising from your particular situation or the objection is directed against direct marketing. In the latter case, you have a general right to object, which we will implement without any particular situation having to be stated.

If you wish to exercise your right of withdrawal or objection, an email to markus@deindigo.de is sufficient.

7. Data security

During your visit to the website we use the widely used SSL procedure (Secure Socket Layer) in combination with the highest level of encryption supported by your browser in each case. As a rule, this is 256-bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead. You can tell whether an individual page of our website is transmitted in encrypted form by the closed display of the key or padlock symbol in the lower status bar of your browser.

We also use appropriate technical and organisational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or unauthorised access by third parties. Our security measures are continuously improved in line with technological developments.

8. Currency of and changes to this privacy policy

This privacy policy is currently valid and dated September 2026. As a result of the further development of our website and of the services offered through it, or due to changed statutory or regulatory requirements, it may become necessary to amend this privacy policy.