Privacy Policy pursuant to the GDPR · Last updated: July 2026

Privacy Policy

This English translation is provided for convenience. We endeavour to keep the German and English versions consistent; in the event of any discrepancy, the German version shall be authoritative.

The protection of your personal data is important to us. This Privacy Policy explains how we process personal data when you visit this website, in accordance with the General Data Protection Regulation (GDPR). Personal data within the meaning of Article 4(1) GDPR means any information relating to an identified or identifiable natural person.

1. Controller

The controller responsible for processing personal data on this website within the meaning of Article 4(7) GDPR is:

2. Website provision, hosting and security (Cloudflare)

Each time this website is accessed, connection and security data transmitted by your browser is automatically processed. This may include, in particular: the IP address, the date and time of access, the requested page (URL), the volume of data transferred, the referrer URL, and information about the browser type, version, and operating system.

This website is a purely static site delivered via Cloudflare Pages; we do not operate our own origin server for it. The provider is Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA. Cloudflare processes connection and security data on our behalf as a processor (Article 28 GDPR), among other things to defend against attacks and misuse and to deliver the website in a stable and fast manner. For this purpose, Cloudflare may engage affiliated companies and other authorised subprocessors in accordance with its Data Processing Addendum and its subprocessor list. The processing of this connection data is technically necessary to provide the website; without it, the website cannot be delivered.

The legal basis is Article 6(1)(f) GDPR. Our legitimate interest lies in the secure, stable, and efficient provision of this website and in the protection of our systems against attacks and misuse.

Processing may also take place outside the European Economic Area, in particular in the United States. Transfers to the United States are based, where applicable, on the European Commission’s adequacy decision concerning the EU-US Data Privacy Framework pursuant to Article 45 GDPR. Where that framework does not apply, the transfer is based on the European Commission’s Standard Contractual Clauses pursuant to Article 46 GDPR. Cloudflare’s Data Processing Addendum, including the incorporated Standard Contractual Clauses, and its subprocessor list are available at cloudflare.com/cloudflare-customer-dpa; you may also request a copy via the contact address given above.

3. Contact by e-mail

An e-mail address is provided on this website through which you can contact us. If you send us an e-mail, we process the data you transmit (in particular your e-mail address and the content of your message) solely to handle your enquiry.

Our e-mail mailbox is hosted by STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany, as a processor (Article 28 GDPR); the processing takes place within the European Union.

The legal basis is generally our legitimate interest in responding to your enquiry and in communicating with companies, customers, and suppliers (Article 6(1)(f) GDPR). Where you are yourself a party to a contract, or where you yourself request pre-contractual measures, the processing may be based on Article 6(1)(b) GDPR.

Providing personal data by e-mail is voluntary. However, without sufficient contact and enquiry details, we may be unable to process or respond to your request.

4. Cookies and local storage

This website does not set any cookies. No analytics, marketing, or tracking cookies are used, and no third-party analytics or tracking services are integrated. A cookie banner is therefore not required.

When you switch languages, only the value of your language selection (“de” or “en”) is stored locally in your browser (localStorage, key “detools-lang”). Its sole purpose is to show you the language version you selected on your next visit. This information remains on your device, is not transmitted to us or to any third party, and is not used to recognise or track you. It remains stored until you change your language selection or clear your browser’s local storage.

5. Storage duration

We process personal data only for as long as is necessary for the respective purposes:

• Connection and security data is stored in accordance with the infrastructure and security services used and the handling of security incidents, and is subsequently erased or anonymised.
• E-mail enquiries without any further business relationship are erased once the enquiry has been conclusively dealt with and no legitimate follow-up is to be expected.
• Business correspondence is retained for the duration of the performance of the contract and for the assertion or defence of legal claims.
• Records subject to statutory retention obligations (in particular under German commercial and tax law, including Section 257 HGB and Section 147 AO) are retained for the duration of the respective statutory period and erased thereafter; the legal basis is the respective statutory retention obligation in conjunction with Article 6(1)(c) GDPR.
• The locally stored language selection remains until you change it or clear your browser’s local storage.

6. Rights of the data subject

If your personal data is processed, you have the following rights vis-à-vis the controller, where the applicable statutory requirements are met:

• Right of access (Article 15 GDPR)
• Right to rectification (Article 16 GDPR)
• Right to erasure (Article 17 GDPR)
• Right to restriction of processing (Article 18 GDPR)
• Right to data portability (Article 20 GDPR)
• Right to object to certain processing (Article 21 GDPR)
• Right to withdraw consent (Article 7(3) GDPR), where processing is based on consent

To exercise your rights, an informal message to the contact address given above is sufficient.

7. Right to lodge a complaint with a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, place of work, or the place of the alleged infringement (Article 77 GDPR). The supervisory authority responsible for us is:

8. SSL/TLS encryption

For security reasons, this website uses SSL/TLS encryption for the transmission between your browser and this website. You can recognise an encrypted connection by the fact that the browser’s address line begins with “https://” and a lock symbol is displayed. Please note: if you send us an e-mail via the address provided, its transmission takes place outside this website connection and is subject to the terms of your own e-mail provider.

9. Currency and amendment of this privacy policy

This privacy policy is dated July 2026. As this website develops, or due to changed legal or regulatory requirements, it may become necessary to amend it. The version in force at any given time can be accessed on this website at any time.