Privacy

1. Controller

2. Hosting and security

The website and business email are hosted by STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany. A data processing agreement under Article 28 GDPR is in place with STRATO. In particular, IP address, access time, requested content and browser information are processed to provide and secure the website (Article 6(1)(f) GDPR). STRATO provides access logs for six weeks; according to the provider, IP addresses and hostnames in these logs are anonymised.

To protect the WordPress login, IP addresses, attempted usernames and lockout information are processed locally (Article 6(1)(f) GDPR). Dated logs are cleaned up 30 days after the last event per IP/username combination; dated daily summaries are cleaned up after 30 days. Active lockouts and entries with unclear dates are retained for review; execution depends on WordPress cron. Backups may contain personal data and are kept with restricted access.

3. Contact and email archiving

When you contact us by email or telephone, we process your contact details, messages and any attachments to handle the enquiry or contract (Article 6(1)(b) GDPR; for other enquiries, Article 6(1)(f) GDPR). Data are deleted when their purpose no longer applies, unless statutory retention duties or necessary enforcement or defence of legal claims require otherwise.

Business emails are additionally archived with STRATO in an audit-proof archive. Legally required retention is based on Article 6(1)(c) GDPR and depends on the type of document. The current technical archive retention setting is eleven years. This is not a statutory retention period for all emails.

4. Cookies and external content

This website uses locally hosted images, system fonts and direct email and telephone links, with no contact forms or embedded maps or videos. No additional analytics or marketing services are configured.

No cookie consents are requested or recorded for the public pages. Technically necessary cookies are used to log in to the WordPress administration area.

5. Your rights

Subject to statutory conditions, you have rights of access, rectification, erasure, restriction of processing and data portability. Consent may be withdrawn at any time for the future. You may object to processing based on legitimate interests on grounds relating to your particular situation, and to direct marketing at any time. Contact info@srpd.eu to exercise these rights.

You may lodge a complaint with a data protection supervisory authority, in particular the State Commissioner for Data Protection and Freedom of Information Baden-Württemberg, Heilbronner Straße 35, 70191 Stuttgart, Germany, poststelle@lfdi.bwl.de, www.baden-wuerttemberg.datenschutz.de.