Privacy Policy

Note: This is an English convenience translation. The German version (Datenschutzerklärung) is the legally authoritative version under the GDPR.

1. Controller

The controller within the meaning of the GDPR is:

Silvan Rassat
Vitus IT Solutions
Kirchstraße 22
86316 Friedberg
Germany
Email: info@vitus-it-solutions.de

2. General information on data processing

We process personal data of our users only to the extent necessary to provide a functioning website and our content and services. Processing of personal data takes place regularly only with the user's consent or, where legally permitted, on another legal basis under the GDPR (e.g. Art. 6(1)(b) or (f) GDPR).

3. Hosting and server log files

This website is hosted by 1blu AG. When you visit this website, our server automatically collects information in so-called server log files, which your browser transmits automatically. These are:

• IP address of the accessing device (possibly shortened/anonymized)
• Date and time of access
• Name and URL of the file accessed
• Website from which access occurred (referrer URL)
• Browser used and, if applicable, operating system and access provider

Processing takes place on the basis of Art. 6(1)(f) GDPR, based on our legitimate interest in ensuring smooth operation and the security of our IT systems.

4. SSL/TLS encryption

For security reasons, this site uses SSL/TLS encryption to protect the transmission of confidential content, such as inquiries via the contact form. You can recognize an encrypted connection by the lock icon in your browser's address bar and by the address starting with "https://".

5. Contact form

When you send us inquiries via the contact form, the details you provide — name, email address, subject, and message — are stored by us for the purpose of processing your inquiry and in case of follow-up questions, and forwarded by email to our mailbox.

After submitting, you additionally receive an automatic confirmation email at the address you provided, confirming receipt of your message.

Processing of this data is based on Art. 6(1)(b) GDPR (processing an inquiry in preparation of a contract) or Art. 6(1)(f) GDPR (legitimate interest in responding to inquiries). Data collected via the contact form is not passed on to third parties, except for the technically necessary transmission via our email provider (1blu) to deliver the message.

Contact form data remains with us until you request deletion, withdraw your consent to storage, or the purpose for storing the data no longer applies (e.g. after your inquiry has been fully processed). Mandatory statutory retention periods (in particular commercial and tax law, e.g. in the event a contract is concluded) remain unaffected.

6. Cookies

This website does not currently use cookies for analytics or marketing purposes.

7. Anonymous usage statistics

To analyze usage of this website, we operate our own self-hosted usage statistics on our server (no third-party service). This records which page was accessed and, if applicable, which page you came from (referrer).

No cookies are set and no IP addresses are stored. To roughly count repeat visits on the same day, a hash value is generated from the date, IP address, and browser identifier, which changes automatically every day. This hash value cannot be used to reconstruct the IP address or to recognize a visitor across multiple days.

Processing is based on Art. 6(1)(f) GDPR (legitimate interest in anonymized usage statistics to improve our offering). Data is automatically deleted after 90 days. If your browser sends "Do Not Track", no page view is recorded. The analytics dashboard itself is password-protected and not publicly accessible.

8. Web fonts

This website uses web fonts (Space Grotesk, IBM Plex Sans, IBM Plex Mono) for display purposes. These are self-hosted on our own server. No connection is made to Google or other third-party servers, and no data (in particular no IP address) is transmitted to third parties.

9. Your rights as a data subject

You have the following rights as a data subject under the GDPR:

• Right of access (Art. 15 GDPR) to the personal data we process
• Right to rectification (Art. 16 GDPR) of inaccurate data
• Right to erasure (Art. 17 GDPR), unless statutory retention obligations apply
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object (Art. 21 GDPR) to processing based on Art. 6(1)(f) GDPR
• Right to withdraw consent (Art. 7(3) GDPR) given, with effect for the future

To exercise these rights, an informal email to info@vitus-it-solutions.de is sufficient.

10. Right to lodge a complaint with a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a data protection supervisory authority, in particular in the member state of your residence, workplace, or the place of the alleged infringement, if you believe the processing of your personal data violates the GDPR. The competent authority for our location in Bavaria is:

Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 27, 91522 Ansbach, Germany
www.lda.bayern.de

11. No automated decision-making

We do not use automated decision-making or profiling within the meaning of Art. 22 GDPR.

12. Changes to this privacy policy

We reserve the right to adapt this privacy policy to ensure it always complies with current legal requirements, or to reflect changes to our services, e.g. when introducing new features. The new privacy policy will apply to your next visit.

Last updated: · This privacy policy is a convenience translation and does not constitute legal advice.