Privacy policy
This website is deliberately built to process as little data as possible: it sets no cookies, loads no content from third parties and counts its visitors only with privacy-friendly statistics on its own server. Below, in accordance with Art. 13 of the General Data Protection Regulation (GDPR), we inform you which personal data are processed when you visit this website, for what purposes and what rights you have.
This is an English translation of our Datenschutzerklärung, provided for your convenience. The German version is authoritative.
Controller
The controller responsible for data processing on this website is:
[Firmenname / Rechtsform][Inhaber/in bzw. Vertretungsberechtigte/r]
[Straße Hausnummer]
[PLZ Ort]
Phone: [Telefonnummer]
Email: info@grenadebyte.com
Data protection officer
[name and contact details of the data protection officer – only if one has been appointed, otherwise delete this paragraph]
The key points at a glance
- No cookies, no advertising services: We set no cookies and use no tracking or advertising services from third parties.
- Visitor statistics: We count how often our pages are visited with Matomo on our own server – without cookies and with a shortened IP address. You can switch this off at any time.
- No third parties: Fonts, graphics and scripts are loaded exclusively from our own server.
- Server log files: When you visit the website, our hosting provider processes technically necessary access data such as your IP address in order to deliver and protect the site.
- Contact: If you write to us or call us, we use your details to deal with your inquiry.
Hosting and server log files
This website is operated (hosted) by the following provider:
[Name des Hosting-Anbieters + Anschrift]
We have concluded a data processing agreement with the hosting provider in accordance with Art. 28 GDPR. The provider processes your data exclusively on our behalf and in accordance with our instructions. The servers are located in [server location, e.g. Germany].
Server log files
Each time you access this website, your browser automatically transmits information to our server, which is stored in so-called server log files:
- IP address of the requesting device
- date and time of access
- page or file accessed (URL) and type of request
- HTTP status code (e.g. “successful” or “not found”) and amount of data transferred
- previously visited page (referrer), if your browser transmits it
- browser type and version as well as operating system (user agent)
We need these data to deliver the website, to ensure its stability and security, and to detect and fend off errors and attacks. They are not combined with other data sources and are not used to identify visitors or to create profiles.
The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in providing this website in a technically error-free and secure manner.
The log files are automatically deleted or anonymized after [retention period of the server log files, e.g. 7 days – ask your hosting provider]. This does not apply to data whose further retention is necessary to clarify a specific security incident; we delete these as soon as the incident has been fully resolved.
Data security and encryption
For security reasons and to protect confidential content – such as the inquiries you send us via the contact form – this website uses SSL/TLS encryption. You can recognize an encrypted connection by the address in your browser starting with “https://”. When encryption is active, the data you transmit to us cannot be read by third parties.
In addition, we take appropriate technical and organizational measures to protect your data against loss, manipulation and unauthorized access (Art. 32 GDPR).
Contact form, email and phone
Contact form
When you send us an inquiry via the contact form, we process the following details:
- mandatory details: name, email address and your message
- voluntary details: company, phone number and project type
- your confirmation that you have read this privacy policy
Your details are transmitted to our web server in encrypted form and forwarded from there by email to our mailbox. We do not store the content of the form on the web server itself. Your IP address is not included in the email.
Protection against spam and abuse
The form contains an additional field that is invisible to people (a so-called honeypot) and is only filled in by automated programs. If this field is filled in, the inquiry is discarded: it is neither stored nor forwarded to us.
To prevent mass inquiries, after the form has been submitted successfully we also store a pseudonymized check value of your IP address (a cryptographic hash) together with the time of submission on our web server. The IP address itself is not stored for this purpose. The entries are no longer taken into account after 60 minutes and are deleted automatically the next time the form is used.
The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in protecting the form and our systems against spam and abuse. We use neither cookies nor CAPTCHAs nor third-party services for this.
Inquiries by email or phone
If you contact us by email or phone, we also process the data you provide (such as your name, contact details and the content of your inquiry) in order to deal with your request.
Purpose, legal basis and storage period
We process your details in order to answer your inquiry and, where applicable, to prepare a quote for you. The legal basis is Art. 6(1)(b) GDPR if your inquiry relates to the performance of a contract or is necessary for taking steps prior to entering into a contract. In all other cases, the processing is based on our legitimate interest in effectively handling the inquiries addressed to us (Art. 6(1)(f) GDPR).
We delete your data as soon as they are no longer required for these purposes. We delete inquiries that do not lead to a business relationship no later than [deletion period for inquiries, e.g. six months] after the communication has ended. If an order results or the correspondence is subject to statutory retention obligations – in particular under commercial and tax law –, we retain the data for the duration of these obligations (legal basis: Art. 6(1)(c) GDPR in conjunction with § 257 of the German Commercial Code (HGB) and § 147 of the German Fiscal Code (AO)).
Visitor statistics with Matomo
To see how our website is used and to improve it, we compile visitor statistics with the open-source software Matomo. Matomo runs on our own web server at our hosting provider (see “Hosting and server log files”). The data are not transmitted to the maker of Matomo or to any other third party.
On our website, Matomo sets no cookies. Your IP address is shortened immediately (the last two blocks are removed) and only processed in this form. The following are recorded:
- the pages visited and the date and time of the visit
- the page from which you came to us (referrer), if your browser transmits it
- the shortened IP address and the approximate country of origin
- browser, operating system, device type and language setting
- clicks on links to other websites and the successful submission of the contact form – without its content
We only evaluate these data in aggregated form. We do not combine them with other data and do not use them to identify visitors or to create profiles.
The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in analyzing the use of our website statistically and improving our services.
We automatically delete the individual page views (raw data) after [retention period of the raw statistics data, e.g. 6 months]. After that, only aggregated figures without reference to individual visits remain.
Switching off the statistics
You can object to the recording at any time. If your browser sends the “Do Not Track” or “Global Privacy Control” signal, we do not record your visits. If JavaScript is switched off, nothing is recorded either. You can also switch off the statistics for this browser here. So that we remember this choice, your browser then stores a note (in local storage, not a cookie). It contains no personal data. If you delete your browser data, the note is deleted too.
Locally hosted fonts
This website uses the fonts “Plus Jakarta Sans”, “Lexend”, “Orbitron” and “JetBrains Mono”. The font files are stored on our own server and loaded from there. No connection to servers of Google (Google Fonts) or other third parties is established in the process.
Recipients and transfers to third countries
We only pass on your data insofar as this is necessary for the purposes stated. Recipients are:
- our hosting provider (see “Hosting and server log files”) as a processor – our visitor statistics (Matomo) also run on its server, and the emails from the contact form are sent via its mail server
- [email provider, if your mailbox is not hosted by the hosting provider – name and address; otherwise delete this item]
Beyond that, we only transmit your data if we are legally obliged to do so. Your data are never sold or used for advertising purposes.
Your data are not transferred to countries outside the European Union or the European Economic Area (third countries).
Your rights
Within the scope of the statutory requirements, you have the following rights regarding the personal data concerning you:
- Access to the data we process (Art. 15 GDPR)
- Rectification of inaccurate data or completion of incomplete data (Art. 16 GDPR)
- Erasure of your data, unless statutory retention obligations prevent this (Art. 17 GDPR)
- Restriction of processing (Art. 18 GDPR)
- Notification of the recipients to whom we have communicated a rectification, erasure or restriction (Art. 19 GDPR)
- Data portability – receiving your data in a structured, commonly used and machine-readable format (Art. 20 GDPR)
- Objection to the processing (Art. 21 GDPR, see below)
- Withdrawal of consent given, with effect for the future (Art. 7(3) GDPR); the lawfulness of the processing carried out until the withdrawal remains unaffected
- Complaint to a data protection supervisory authority (Art. 77 GDPR, see below)
To exercise your rights, an informal message to the contact details above is sufficient, for example by email to info@grenadebyte.com.
Your right to object under Art. 21 GDPR
If we process your data on the basis of legitimate interests (Art. 6(1)(f) GDPR), you have the right to object to this processing at any time on grounds relating to your particular situation. We will then no longer process your data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defense of legal claims.
If your data are processed for direct marketing purposes, you can object to this processing at any time without giving reasons.
Please send your objection informally to the contact details above, for example by email to info@grenadebyte.com.
Right to lodge a complaint with a supervisory authority
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a data protection supervisory authority – in particular in the member state of your habitual residence, your place of work or the place of the alleged infringement (Art. 77 GDPR). The supervisory authority responsible for us is:
[Name und Anschrift der zuständigen Landesdatenschutzbehörde – abhängig vom Bundesland des Firmensitzes]
Obligation to provide data and automated decision-making
You are not obliged by law or contract to provide us with personal data. Without the mandatory details in the contact form (name, email address and message), however, we cannot process your inquiry via the form; alternatively, you can reach us by email or phone. Processing the access data in the server log files is technically necessary to display the website to you.
Automated decision-making, including profiling within the meaning of Art. 22 GDPR, does not take place.
Changes to this privacy policy
We adapt this privacy policy as soon as changes to the website or to legal requirements make this necessary. The version published on this page applies.