Privacy Policy

This policy explains which personal data is processed when you visit eicdevcon.de. It applies to this website only — not to the independent services linked in the footer, each of which has its own privacy policy.

Controller

The controller within the meaning of Article 4(7) GDPR is:

EicDevCon UG (haftungsbeschränkt)
Lindenbachstraße 9a
37124 Rosdorf
Germany

Email: info@eicdevcon.de

Further details are available in the imprint.

Our Approach

This website is built to collect as little data as possible. It uses:

no contact form and no server-side form processing
no externally hosted fonts — all fonts are served from our own server
no content delivery network
no social media plug-ins, tracking pixels or advertising networks
no CAPTCHA
no user accounts and no login

The only external analytics service embedded in this website is Google Analytics — and it is loaded only after you have given your explicit consent.

Website Requests and Server Logs

When you open a page, your browser transmits technically necessary data to the server. The hosting provider logs in particular:

IP address
date and time of the request
requested address and HTTP status code
amount of data transferred
referring page, if transmitted
browser type and operating system

Purpose: secure and reliable operation of the website, and the detection, investigation and prevention of attacks.

Legal basis is Article 6(1)(f) GDPR. Our legitimate interest lies in operating the website securely and free of technical faults.

Retention: Non-anonymized IP addresses in security-relevant server logs are processed for a maximum of seven days and are then irreversibly anonymized. The anonymized logs remain available for evaluation purposes for a limited period beyond that; at this point they no longer relate to an identifiable person. This data is not combined with any other data sources.

Hosting

The website is hosted by STRATO GmbH. The hosting provider processes the data listed above on our behalf under a data processing agreement pursuant to Article 28 GDPR. The website is hosted in STRATO data centers in Germany.

Application Logs

The application itself writes technical logs, but only for pages that could not be found and for server errors. These entries contain the requested path, the status code, a random request ID and — in the event of an error — the class of the program error that occurred.

They deliberately contain no IP address, no browser identifier, no query parameters and no submitted content. The application filters out such fields before an entry is written. As a result, the entries do not relate to an identifiable person.

Contact by Email or Postal Mail

This website offers no contact form. You can reach us at the email address provided or by postal mail.

The data processed consists solely of what you send us yourself: your sender details and the content of your message. We do not collect this data through an input form, and we do not store it in a customer relationship management system for website inquiries.

Purpose is handling and responding to your inquiry.

Legal basis is Article 6(1)(b) GDPR where your inquiry relates to entering into or performing a contract, and otherwise Article 6(1)(f) GDPR — our legitimate interest in responding to inquiries.

Retention: We delete your inquiry once it has been dealt with conclusively and no statutory retention obligations apply. Business correspondence is subject to retention obligations under German commercial and tax law; while those apply, processing is restricted rather than the data being deleted.

Cookies and Local Storage

This website does not set cookies before you give consent. There are no login, shopping cart, session or advertising cookies.

Your decision about Google Analytics is not stored in a cookie. It is stored in your browser's local storage (localStorage) under the key eicdevcon_consent. The entry takes this form:

JSON

{
  "version": 1,
  "analytics": false
}

What is stored is therefore only a version number and your yes-or-no decision. No timestamp, no identifier, no IP address and no other personal data are recorded. The entry is never transmitted to the server and remains entirely within your browser.

You can delete it at any time through your browser settings. The website will then ask again.

Only once you consent to Google Analytics does Google set cookies — in particular _ga and _ga_<identifier>. Details follow in the next section.

Google Analytics 4

We use Google Analytics 4 to understand how this website is used and to improve it technically and editorially.

The service provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

This is not a setting but the way the website is built. Until you have explicitly consented:

the Google script gtag.js is not loaded,
no connection to a Google server is established,
no Analytics cookies are set,
and no cookieless measurement takes place either.

The delivered HTML document contains no Google address whatsoever. The script is loaded only when you click “Allow analytics”.

Once you consent, gtag.js is loaded and consent is granted for analytics storage (analytics_storage) only. Google then processes in particular the pages you visit, time spent, approximate location based on your IP address, device type, browser and operating system, and the referring page.

Advertising-related features remain permanently disabled. The signals ad_storage, ad_user_data and ad_personalization are fixed at “denied”. This website uses no Google Ads and no remarketing, no ad personalization, no Google AdSense, no Google Signals, no User ID of our own and no cross-device analysis.

We use neither Google Tag Manager nor Google Maps, YouTube embeds or reCAPTCHA.

Legal basis is solely your consent under Article 6(1)(a) GDPR and — for storing information on and accessing information from your device — Section 25(1) TDDDG, the German Telecommunications Digital Services Data Protection Act. We do not additionally base the use of Google Analytics on legitimate interests or on the performance of a contract.

Retention: Retention of user and event data in Google Analytics is set to two months; resetting this period on new activity is disabled.

International data transfers: For users in the European Economic Area, the service provider is Google Ireland Limited. Processing by other companies of the Google group, in particular Google LLC in the United States, cannot be ruled out. Google uses the transfer mechanisms provided for under applicable data protection law for international data transfers. Further information is available in Google's privacy policy and in the privacy information for Google Analytics.

You can change your decision at any time using the “Privacy settings” control at the bottom of every page.

When you withdraw consent, analytics consent is revoked and the Google Analytics cookies that were set (_ga, _ga_<identifier>) are deleted. If the Google script was already loaded in the current page view, the page then reloads — JavaScript that has already been loaded cannot be technically unloaded, and only a reload reliably restores a clean state.

Withdrawal takes effect for the future. The lawfulness of processing carried out on the basis of your consent up to that point remains unaffected.

Disclosure to Third Parties

Beyond the cases described above, we do not disclose personal data to third parties. The only recipients are:

the hosting provider, acting as a processor,
Google, as the provider of Google Analytics, and only after you have consented.

Disclosure may also occur where we are legally obliged to do so, for example to law enforcement authorities.

No Automated Decision-Making

There is no automated decision-making, including profiling, within the meaning of Article 22 GDPR. Audience measurement with Google Analytics serves statistical evaluation and does not make any decisions about you.

Your Rights

Under the GDPR you have the following rights:

Right of access (Art. 15) — whether and which data we process about you
Right to rectification (Art. 16) — correction of inaccurate and completion of incomplete data
Right to erasure (Art. 17) — unless a retention obligation applies
Right to restriction of processing (Art. 18)
Right to data portability (Art. 20) — in a common, machine-readable format
Right to object (Art. 21) — to processing based on legitimate interests
Right to withdraw consent (Art. 7(3)) — at any time and with effect for the future

An informal message to info@eicdevcon.de is sufficient to exercise these rights.

Independently of this, you have the right to lodge a complaint with a data protection supervisory authority (Article 77 GDPR) — with the authority in your place of residence, your place of work or the place of the alleged infringement. The authority responsible for us is the State Commissioner for Data Protection of Lower Saxony (Landesbeauftragte für den Datenschutz Niedersachsen).

Data Security

The website is delivered exclusively over encrypted HTTPS connections. Additional browser-level safeguards are in place, including a restrictive Content Security Policy that limits the loading of external resources to explicitly permitted sources.

We take appropriate technical and organisational measures in accordance with Article 32 GDPR and adapt them as technology evolves. However, no transmission over the internet can offer absolute protection.

Last Updated

This privacy policy is current as of August 28, 2026. We update it whenever changes to the website make that necessary.

Privacy settings