Privacy Policy

1. Data Protection at a Glance

General Information

The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to personally identify you.

For detailed information about data protection, please refer to our privacy policy listed below this text.

Data Collection on this Website

Who is responsible for data collection on this website?

Data processing on this website is carried out by the website operator. You can find their contact details in the section "Information about the Controller" of this privacy policy.

How do we collect your data?

Your data is collected when you provide it to us (e.g., via a contact form).
Other data is collected automatically or after your consent by our IT systems when you visit the website.

This includes technical data such as:

Internet browser
Operating system
Time of page access

What do we use your data for?

To ensure error-free provision of the website
To analyze user behavior

What rights do you have regarding your data?

You have the right to:

Request information about your stored personal data (free of charge)
Request correction or deletion of your data
Revoke consent at any time
Request restriction of processing under certain conditions
Lodge a complaint with a supervisory authority

Analysis Tools and Third-Party Tools

Your browsing behavior may be statistically evaluated using analysis programs.

Details can be found later in this privacy policy.

2. Hosting

We host our website with:

Hetzner Online GmbH
Industriestr. 25
91710 Gunzenhausen

Legal Basis

Art. 6(1)(f) GDPR (legitimate interest)
Art. 6(1)(a) GDPR + § 25(1) TTDSG (if consent given)

Consent can be revoked at any time.

Data Processing Agreement

We have concluded a Data Processing Agreement (DPA) with Hetzner to ensure GDPR-compliant processing.

3. General Information and Mandatory Information

Data Protection

We treat your personal data confidentially and in accordance with legal regulations.

Note: Data transmission over the Internet (e.g., email) may have security vulnerabilities.

Information about the Controller

bitwald GmbH
Kantstraße 127
10625 Berlin
Email: kontakt@bitwald.com

Storage Duration

Your personal data is stored only as long as necessary for its purpose.

Exceptions:

Legal retention obligations (tax/commercial law)

Legal Basis for Data Processing

Depending on the case, processing is based on:

Art. 6(1)(a) GDPR – Consent
Art. 6(1)(b) GDPR – Contract fulfillment
Art. 6(1)(c) GDPR – Legal obligation
Art. 6(1)(f) GDPR – Legitimate interest
Art. 9(2)(a) GDPR – Special categories of data
Art. 49(1)(a) GDPR – Third-country transfers

Consent can be revoked at any time.

Recipients of Personal Data

We only share data if:

Required for contract fulfillment
Legally required
Legitimate interest exists
Consent has been given

Your Rights Regarding Data Processing

Revocation of Consent

You can revoke your consent at any time.

Right to Object (Art. 21 GDPR)

If data processing is based on Art. 6(1)(e) or (f) GDPR, you have the right to object at any time.

Right to Lodge a Complaint

You may lodge a complaint with a supervisory authority in:

Your place of residence
Your workplace
Location of the alleged violation

Right to Data Portability

You can request your data in a machine-readable format.

Right to Information, Correction, and Deletion

You may request:

Access to your data
Correction
Deletion

Right to Restriction of Processing

You may request restriction of processing under certain conditions.

SSL or TLS Encryption

This website uses SSL/TLS encryption.

You can recognize it by:

https:// in the address bar
Lock icon in your browser

4. Data Collection on this Website

Cookies

Cookies are small data files stored on your device.

Types of Cookies

Session cookies (deleted after visit)
Permanent cookies (stored until deleted)

Cookie Sources

First-party cookies
Third-party cookies

Purpose of Cookies

Enable website functionality
Analyze behavior
Support advertising

Legal Basis

Art. 6(1)(f) GDPR (legitimate interest)
Art. 6(1)(a) GDPR + § 25(1) TTDSG (consent)

Browser Settings

You can:

Allow cookies selectively
Disable cookies
Automatically delete cookies

⚠️ Disabling cookies may limit functionality.

Server Log Files

Automatically collected data includes:

Browser type/version
Operating system
Referrer URL
Hostname
Time of request
IP address

Legal basis: Art. 6(1)(f) GDPR

Contact Form

Data submitted via contact form is stored for:

Processing inquiries
Follow-up questions

Legal basis:

Art. 6(1)(b) GDPR
Art. 6(1)(f) GDPR
Art. 6(1)(a) GDPR (if consent)

Contact via Email, Phone, or Fax

Your inquiry data is stored and processed for handling your request.

Same legal bases apply as above.

5. Analysis Tools and Advertising

Google Tag Manager

Provider:
Google Ireland Limited
Dublin, Ireland

Function

Integrates and manages tracking tools
Does not store cookies or create profiles

Legal Basis

Art. 6(1)(f) GDPR
Art. 6(1)(a) GDPR (if consent given)

Google Analytics

Function

Analyzes user behavior:

Page views
Duration
Device info
Clicks & scrolls

Uses:

Cookies
Device fingerprinting
Machine learning

Legal Basis

Art. 6(1)(a) GDPR (consent)

Data Transfer

Data may be transferred to the USA based on:

Standard Contractual Clauses (SCCs)
EU-US Data Privacy Framework (DPF)

IP Anonymization

Your IP is anonymized within the EU before transfer.

Browser Plugin

Opt-out plugin:
https://tools.google.com/dlpage/gaoptout?hl=en

More Information

Google Analytics privacy:
https://support.google.com/analytics/answer/6004245?hl=en

Data Processing Agreement

We have concluded a DPA with Google in compliance with GDPR.