Privacy Policy
Last updated: September 2026
We take the protection of your personal data seriously. This policy explains which personal data we process when you visit our website or contact us, for what purposes, on which legal basis, and what rights you have under the EU General Data Protection Regulation (GDPR).
1. Controller
ColVisTec AG
Max-Planck-Str. 3
12489 Berlin, Germany
Phone: +49 30 6392 7816
E-mail: info@colvistec.de
Represented by the Management Board: Jan H. Johnsen (CEO)
For all questions about data protection, please contact us at the address above or at info@colvistec.de.
2. Visiting our website (server log files)
When you visit our website, your browser automatically transmits information to our web server, which is stored temporarily in log files: IP address of the requesting device, date and time of access, the page or file requested, the website from which you reached us (referrer), browser type and version, and operating system.
This data is processed to deliver the website, to ensure its stability and security, and to detect and defend against attacks. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in the secure and error-free operation of the website. The log data is deleted after a short period unless it is needed longer to investigate a specific security incident.
Our website is hosted by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany, which processes the data on our behalf under a data processing agreement pursuant to Art. 28 GDPR.
3. Cookies, analytics and tracking
Our website does not use analytics, tracking or marketing tools, and does not set cookies for such purposes. If technically necessary cookies are used (for example to keep the website working correctly during your visit), they are used on the basis of § 25(2) No. 2 of the German Telecommunications Digital Services Data Protection Act (TDDDG) and Art. 6(1)(f) GDPR and do not require your consent.
The fonts used on this website are loaded from our own server. No connection to third-party servers (for example Google) is established for this purpose.
4. Contacting us by e-mail or phone
If you contact us by e-mail or phone, we process the data you provide (for example name, company, e-mail address, phone number and the content of your enquiry) in order to answer your request.
The legal basis is Art. 6(1)(b) GDPR if your enquiry relates to a contract or to pre-contractual measures (for example a quote or a trial), and otherwise Art. 6(1)(f) GDPR, our legitimate interest being to respond to enquiries addressed to us.
We use Microsoft 365, a service of Microsoft Ireland Operations Ltd., One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland, for our e-mail communication. Microsoft processes the data on our behalf under a data processing agreement (Art. 28 GDPR). A transfer of data to Microsoft Corporation in the USA cannot be excluded; Microsoft is certified under the EU-U.S. Data Privacy Framework, for which the European Commission has adopted an adequacy decision (Art. 45 GDPR). In addition, the EU Standard Contractual Clauses are part of the agreement.
We delete your data once your enquiry has been fully dealt with and it is no longer needed, unless statutory retention obligations apply (in particular under commercial and tax law, generally 6 or 10 years for business correspondence).
5. Links to other websites
Our website contains links to external websites, for example to our LinkedIn company page. These are simple links; no data is transmitted to the operator of the linked website until you click on the link. After that, the privacy policy of the respective provider applies.
6. Encryption
This website uses TLS/SSL encryption. You can recognise an encrypted connection by "https://" in the address bar and the lock symbol in your browser.
7. Your rights
Under the GDPR you have the following rights with regard to your personal data:
- Right of access (Art. 15 GDPR)
- Right to rectification (Art. 16 GDPR)
- Right to erasure (Art. 17 GDPR)
- Right to restriction of processing (Art. 18 GDPR)
- Right to data portability (Art. 20 GDPR)
- Right to withdraw any consent given, with effect for the future (Art. 7(3) GDPR)
Right to object (Art. 21 GDPR): Where we process your data on the basis of Art. 6(1)(f) GDPR, you have the right to object to this processing at any time on grounds relating to your particular situation. We will then no longer process the data unless we can demonstrate compelling legitimate grounds, or the processing serves the establishment, exercise or defence of legal claims.
To exercise your rights, an informal message to info@colvistec.de is sufficient.
Right to lodge a complaint: You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is:
Berliner Beauftragte für Datenschutz und Informationsfreiheit
Alt-Moabit 59–61, 10555 Berlin, Germany
www.datenschutz-berlin.de
8. Automated decision-making
We do not use automated decision-making or profiling within the meaning of Art. 22 GDPR.
9. Changes to this policy
We will update this privacy policy if our website or the legal requirements change. The current version is always available on this page.