Privacy Policy

This Privacy Policy explains how iiterate Technologies GmbH (iiterate, we, us) processes personal data when you visit www.iiterate.de (the Website), and how we comply with the EU General Data Protection Regulation (GDPR) and applicable German data protection law. The Website is primarily an informational presence. We keep data collection to a minimum, and we do not sell personal data.

1. Controller#

The controller responsible for the processing of personal data on this Website is:

iiterate Technologies GmbH

Mittelbachstraße 66, 53518 Adenau, Germany

Managing Director: Aashwin Shrivastava

Email: [email protected]

Phone: +49 (0) 176 74709826

Commercial register: HRB 28958, Local Court of Koblenz

VAT ID: DE354188637

Full company information is set out in our Impressum.

2. Data Protection Officer#

We are not required to appoint a Data Protection Officer under Art. 37 GDPR and § 38 BDSG. For any questions regarding data protection, please contact us at [email protected].

3. Visiting the Website (server log data)#

When you access the Website, technical data is processed automatically to enable the secure and stable delivery of the site. This may include your IP address, the date and time of the request, the browser type and operating system, the referring page, and the pages you access. The legal basis is our legitimate interest in providing a functional and secure website (Art. 6(1)(f) GDPR). Hosting is provided by Contabo GmbH, Aschheim, Germany, on servers located in Germany (European Union), which processes this data on our behalf under a data processing agreement pursuant to Art. 28 GDPR as part of delivering the Website.

The Website is delivered through the content delivery network and security service of Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA (EU contracting entity: Cloudflare Germany GmbH). Cloudflare acts as our processor under Art. 28 GDPR and terminates the encrypted connection, so it processes your IP address, the request metadata described above, and technical security signals. The purpose is the secure, available and performant delivery of the Website, including protection against denial-of-service and other attacks; the legal basis is our legitimate interest under Art. 6(1)(f) GDPR. Cloudflare serves the Website from the network location closest to you, so this processing may take place on servers outside the European Union, including in third countries. Such transfers are safeguarded by the EU Standard Contractual Clauses agreed with Cloudflare.

4. Contacting us#

If you contact us through a contact form or by email, we process the data you provide (for example your name, email address, and the content of your message) in order to handle and respond to your request. The legal basis is Art. 6(1)(b) GDPR where your request relates to pre-contractual steps or an existing contract, and otherwise our legitimate interest in responding to inquiries (Art. 6(1)(f) GDPR). We delete this data once it is no longer required and no statutory retention period applies.

5. Cookies#

The Website uses only cookies and local storage that are technically necessary for it to function. The only value stored on your device is your chosen display theme (light or dark), kept in your browser's local storage; it is never sent to us. The Website does not set any cookies of its own, and it does not use analytics, advertising, tracking, or third-party marketing cookies, nor a tag manager. Embedded YouTube videos are not loaded until you actively click to load them, so no third party can access or store information on your device without your prior action. Because no non-essential cookies are set, no consent banner is required.

6. Recipients of your data#

We share personal data only with service providers that help us operate the Website — our hosting provider Contabo GmbH, Germany, and our content delivery and security provider Cloudflare (see Section 3) — and only to the extent necessary for that purpose. One page embeds a video from YouTube (operated by Google Ireland Limited). That video is not loaded automatically: it is replaced by a placeholder, and only when you click to load it does your browser connect to YouTube/Google servers, which may then receive your IP address and store information on your device. By clicking you consent to that transfer (Art. 6(1)(a) GDPR and § 25(1) TDDDG); you can withhold it simply by not clicking. We do not sell personal data and do not pass it on for unrelated purposes.

7. International data transfers#

Hosting and the storage of the Website's content take place within the European Union, on servers in Germany. Two forms of processing can nevertheless reach a third country. First, our content delivery and security provider Cloudflare serves the Website from the network location closest to the visitor, which may be outside the EU (see Section 3); this is safeguarded by the EU Standard Contractual Clauses. Second, a transfer to Google occurs if — and only if — you click to load the embedded YouTube video (see Section 6); this is covered by Google's certification under the EU-US Data Privacy Framework and by standard contractual clauses.

8. How long we keep your data#

We process personal data only for as long as necessary for the purposes described in this Policy, or for as long as required by statutory retention obligations (for example under German commercial and tax law). Once the purpose no longer applies and no retention obligation remains, the data is deleted.

9. Security#

The Website is provided over an encrypted connection (HTTPS/TLS) to protect data in transit between your browser and the Website.

10. Your rights#

Subject to the conditions of the GDPR, you have the right to access your data (Art. 15), to rectification (Art. 16), to erasure (Art. 17), to restriction of processing (Art. 18), to data portability (Art. 20), and to object to processing based on legitimate interests (Art. 21). Where processing is based on your consent, you may withdraw that consent at any time with effect for the future (Art. 7(3) GDPR). To exercise any of these rights, please contact us at [email protected].

11. Right to lodge a complaint#

You have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is:

Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Rheinland-Pfalz

Hintere Bleiche 34, 55116 Mainz, Germany

12. Obligation to provide data#

You are generally not legally or contractually obliged to provide personal data to us. However, certain functions, such as contacting us, require the data necessary to carry them out. If you choose not to provide it, we may be unable to respond to your request.

13. Changes to this Policy#

We may update this Privacy Policy to reflect changes to the Website or to legal requirements. The version that applies is the one published here, as indicated by the date shown at the top of this page.