Skip links

Privacy

Privacy policy

Thank you for your interest in using our website. The protection of personal data is a top priority for us. Below you will find information about the processing of your personal data and about your rights when using our website.

1. Controller

The controller for data processing is

PrivacyPilot GmbH (hereinafter: “we”)

Adenauerallee 136
D-53113 Bonn
Tel.: +49 (0) 228-504 46 270
Fax: +49 (0) 228-504 46 249

E-Mail: info@privacy-pilot.com

2. Your rights as a data subject
As a data subject, you have the following rights under the General Data Protection Regulation (GDPR), provided that the respective legal requirements are met:

  • Information (Art. 15 GDPR): You have the right to obtain information about the personal data processed about you.
  • Rectification (Art. 16 GDPR): You can request the rectification of inaccurate personal data concerning you. You can also request the completion of incomplete data.
  • Erasure (Art. 17 GDPR):I n certain cases, you may request the erasure of your personal data.
  • Restriction of processing (Art. 18 GDPR): In certain cases, you can request that the processing of your data be restricted.
  • Data portability (Art. 20 GDPR): If you have provided data on the basis of a contract or consent and the processing is carried out using automated procedures, you can request that the data you have provided be provided to you in a structured, commonly used and machine-readable format or that it be transferred to another controller.

Right to object in individual cases:

You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you on the basis of Art. 6 para. 1 subpara. 1 f) GDPR (balancing of interests).

If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing serves to assert, exercise, or defend legal claims.

Exercising your rights: To exercise all of your aforementioned rights, please contact us at the address given in section 1 above. Please ensure that we are able to clearly identify you.

Right to lodge a complaint with the supervisory authority: If you believe that the processing of your personal data violates data protection law, you can also lodge a complaint with a supervisory authority, in particular in the EU member state or federal state of your habitual residence, place of work, or the place of the alleged violation.

3. automated individual decision-making including profiling
Automated decisions in individual cases, including profiling within the meaning of Article 22 of the GDPR, do not take place in connection with the use of our service.

4. details of integrated services and functionalities

4.1. Provision of the website

Processed personal data:

Date and time of access, duration of the visit, type of end device, operating system used, functions used, amount of data sent, type of event, IP address, domain name

Purpose(s):

Provision of the website

Legal basis(s):

Art. 6 para. 1 para. 1 f) GDPR (balancing of interests). In doing so, we pursue the legitimate interest of providing our website.

Recipient of the personal data:

Hosting provider, internal departments, external service provider for technical support

Third country transfer:

No

Storage period of personal data:

Deletion immediately after delivery by the web server

4.2. Logfiles

Processed personal data:

URL accessed, IP address, time and date of access, amount of data transferred, website from which the user came to the requested page (so-called “referrer”), website accessed by the user’s system via our website, http status, information about the browser type and version used, user’s operating system, user’s Internet service provider

Purpose(s):

Improvement of the website, system security (e.g. prevention of misuse), error diagnosis

Legal basis(s):

Art. 6 para. 1 para. 1 f) GDPR (balancing of interests). In doing so, we pursue the legitimate interest in improving the website, system security (e.g. prevention of misuse) and error diagnosis.

Art. 6 para. 1 para. 1 c) GDPR (fulfillment of a legal obligation). This includes disclosures to government agencies upon request.

Recipient of the personal data:

Hosting provider, internal departments, external service provider for technical support, government agencies on request

Third country transfer:

No

Storage period of personal data:

Deletion 9 weeks after creation

4.3. Contact form

Processed personal data:

Title, first and last name of the person seeking contact, telephone number, e-mail address, company/authority and position, content of the message

Purpose(s):

Receiving and processing inquiries, complaints or other feedback

Legal basis(s):

Art. 6 para. 1 para. 1 f) GDPR (balancing of interests). In doing so, we pursue the legitimate interest in receiving and processing inquiries, complaints or other feedback.

Art. 6 para. 1 para. 1 c) GDPR (fulfillment of a legal obligation). This includes disclosures to government agencies upon request.

Recipient of the personal data:

Hosting providers, internal departments, government agencies on request

Third country transfer:

No

Storage period of personal data:

Deletion after final processing of the request

Obligation to provide personal data and consequences of non-provision:

Mandatory information in the contact form marked with “*”, other information is used to process your request more quickly, but does not have to be provided.

Status: September 2025