caern

Privacy Policy

How this website handles personal data, under the General Data Protection Regulation (GDPR).

Controller

The controller responsible for data processing on this website is:

Peter Scharr Unternehmensberatung
Peter Scharr, Senior Consultant – Netweaver Technology and Business Integration
Schillerweg 3, D-91336 Heroldsbach, Germany
Phone: +49 (0)173 3 55 01 11
Email: gut.beraten@peter-scharr.de

See also the Imprint.

No tracking, no third-party content

This website uses no web analytics, no advertising and no tracking of any kind. Its pages load no external fonts, no content delivery networks, no embedded videos, no social-media plugins and no third-party scripts. Everything a page needs is served from this server, so simply reading this site does not disclose your visit to any third party.

The consent banner offers optional „Statistics“ and „Marketing“ categories, because it is a general-purpose component. At present no statistics or marketing services are integrated on this website, so those categories currently activate nothing. Should that ever change, this policy and the banner will be updated first, and nothing would be loaded without your prior consent.

Hosting and server log files

This website is hosted by ALL-INKL.COM (Neue Medien Münnich, Germany), which acts as a processor on our behalf. When you access a page, the hosting provider’s web server automatically records technical data in log files, in particular:

  • the requested page or file, and the amount of data transferred,
  • date and time of the request,
  • the HTTP status code,
  • browser type and version, and operating system,
  • the referring URL,
  • the requesting IP address.

This data is technically necessary in order to deliver the website, to guarantee its stability and security, and to investigate misuse. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in the secure and reliable operation of the website. This log data is not merged with the data described below and is not used to identify you personally.

Cookie consent

This site asks for your consent before any non-essential cookies would be set. The consent tool is self-hosted; it contacts no external service.

The consent cookie

When you make a choice in the banner, a first-party cookie named cookie_consent_state is stored in your browser. It records your decision (which categories you allowed), the version of the policy you saw, and a randomly generated consent ID. Its lifetime is 12 months. This cookie is strictly necessary to honour your choice and to avoid asking you again on every page; it is set on the basis of § 25 Abs. 2 TDDDG and Art. 6(1)(c) GDPR (compliance with a legal obligation). You can revoke or change your decision at any time using the „Open cookie settings“ button on the site.

The consent log

In order to be able to demonstrate consent, as required by Art. 7(1) GDPR, each decision is also recorded in this website’s own database (no external service is involved). The record contains:

  • a timestamp and the version of the policy in force,
  • the action taken (accept all / reject all / custom selection / withdrawal) and the categories chosen,
  • the consent ID from the cookie, the interface language, and the path of the page you were on,
  • a salted SHA-256 hash of your IP address and a SHA-256 hash of your browser’s user-agent string.

Your IP address is not stored in plain text. Before hashing, it is first truncated (the last octet of an IPv4 address, or the lower bits of an IPv6 address, are discarded), and it is then hashed together with a secret salt that is rotated daily, so the resulting value cannot be used as a stable identifier across days. The user agent is likewise stored only as a hash. The purpose of these two values is solely to make a consent record plausible as evidence; they are not used to recognise or track you.

Consent records are automatically deleted after 12 months by a scheduled clean-up job.

Contact form

You can contact us using the form on our contact page. It processes the data you enter there:

  • your name,
  • your email address,
  • your message (and, if you fill it in, your company).

This information is used exclusively in order to process and answer your enquiry. It is sent by email to the controller and is additionally stored in this website’s own database so that no enquiry is lost if mail delivery fails temporarily. Along with the submission, a salted SHA-256 hash of your truncated IP address is stored — again never the plain IP — which serves only to limit the rate of automated submissions and to defend against spam. Spam protection is performed locally (a hidden honeypot field, a submission-timing check and a rate limit); no spam-filtering service outside this server receives your message.

The legal basis is Art. 6(1)(b) GDPR where your enquiry relates to the initiation or performance of a contract, and otherwise Art. 6(1)(f) GDPR, our legitimate interest being the effective handling of enquiries addressed to us. Your data is not passed on to third parties. Form submissions are automatically deleted from the database after 12 months by a scheduled clean-up job; this does not affect any correspondence that has to be retained for longer under statutory commercial or tax-law retention obligations.

Contact by email

If you contact us directly by email, the data you send (your email address and the content of your message) is stored in order to process your enquiry. The legal bases are the same as for the contact form (Art. 6(1)(b) and Art. 6(1)(f) GDPR). Please note that the content of unencrypted email cannot be protected against being read in transit.

Your rights

Under the GDPR you have the following rights in relation to your personal data:

  • Right of access (Art. 15 GDPR) — to obtain confirmation whether we process data about you, and a copy of it.
  • Right to rectification (Art. 16 GDPR) — to have inaccurate data corrected.
  • Right to erasure (Art. 17 GDPR) — to have your data deleted.
  • Right to restriction of processing (Art. 18 GDPR).
  • Right to data portability (Art. 20 GDPR) — to receive your data in a structured, commonly used, machine-readable format.
  • Right to object (Art. 21 GDPR) — to object, on grounds relating to your particular situation, to processing based on Art. 6(1)(f) GDPR.

Where processing is based on your consent, you have the right to withdraw that consent at any time with effect for the future (Art. 7(3) GDPR); the lawfulness of processing carried out before the withdrawal is not affected.

To exercise any of these rights, please contact the controller at gut.beraten@peter-scharr.de.

Right to lodge a complaint

Without prejudice to any other remedy, you have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), in particular in the Member State of your habitual residence, your place of work, or the place of the alleged infringement.

Changes to this policy

We will update this privacy policy whenever changes to the website make it necessary — for example if new functions are added that process personal data.