Privacy

Controller

Name

Tobias Schlegel

Address

Muehlenweg 15
54636 Huettingen an der Kyll
Germany

Email

info@softschlegel.de

Phone

on request

Business status

Small business owner

Purpose of the website

The public homepage presents the software development work of Tobias Schlegel. The protected account area is used to provide selected testers, potential customers and business partners with controlled access to programs, downloads, web links and project information.

Website access and server logs

When the website is accessed, the web server processes technically required access data. This may include IP address, date and time of access, requested file, transferred data volume, browser type, operating system, referrer URL and status codes.

This processing serves to deliver the website, ensure stability and security, analyze errors and prevent misuse. The legal basis is the legitimate interest in a secure and functional website.

Aggregated homepage statistics

The local homepage statistic stores the total number of views and the last view. In addition, the protected CRM on the same server counts public page views by page path and time. These CRM counters contain no IP addresses, browser characteristics, cookies, user identifiers, URL parameters or visitor profiles. A random identifier for each page load prevents duplicate delivery and is not stored in the browser. The CRM maintenance job aggregates individual events into daily totals after 90 days. GPC and Do Not Track are respected for CRM page counting. Content from protected applications is not sent to the CRM.

Cookies and sessions

The protected area uses technically necessary session cookies. These cookies keep the login active, protect access, enable CSRF protection and separate approved content from public content.

Without these technically necessary cookies, the account area cannot be operated securely. The cookies are not used for advertising, profiling or external tracking.

Cookie settings are available at any time using the button of the same name. Confirmation is stored only locally in the browser so that the notice does not reappear on every page visit.

Login, account management and access rights

For the account area, username, password hash, role, account status, lock periods, expiration dates, login limits, login counters, last login, EULA/non-disclosure confirmation, program permissions and customer data may be processed.

Customer data may include name, company, email address, telephone number and internal notes where entered to manage test, customer or partner access.

Processing serves to provide protected programs and links, individual approvals, access security and traceability of confirmations.

Contact form and email contact

If the contact form is used or an email is sent to info@softschlegel.de, the submitted details are processed. This may include name, email address, subject, message, time of request and technical delivery data.

The data is used to answer the request, clarify follow-up questions and enable orderly communication. Transfer to third parties is not intended unless required for processing or by law. Contact form submissions are also recorded as contacts and enquiries in the access-protected CRM on the same server, separated by website. During an outage a protected local queue retains submissions until import. The public page statistics receive only a form counter, not the contact content.

EULA and non-disclosure agreement

After login, users must confirm the end user license agreement and the non-disclosure agreement before programs, downloads, links or management functions can be used. The time of confirmation may be stored in the account.

Downloads, programs and external links

Direct browser programs, downloads and external web links may be provided in the protected area. When protected files are requested, the server checks whether the account is approved for the program or link.

When opening external links, the privacy policies of the respective external providers also apply.

Legal bases

Depending on the situation, processing is carried out to provide the requested service, perform pre-contractual or contractual measures, fulfill legal obligations or based on legitimate interests in secure software provision, access protection, misuse prevention and technical error analysis.

Retention period

Personal data is stored only as long as required for the stated purposes or legal retention periods. Test and partner accounts may be deleted, locked or time-limited. Session data expires automatically after inactivity or at the latest after the maximum session duration.

Recipients and hosting

The website is operated on a web server. The hosting provider processes technical access data as part of server infrastructure operation. Personal data is not otherwise transferred to third parties unless required for operation, legally prescribed or consented to.

Security

The account area uses password hashes, server-side sessions, CSRF protection, access controls, lock options, configurable program approvals and technical protection mechanisms for downloads and programs. Nevertheless, absolute security cannot be guaranteed.

Rights of data subjects

Within the statutory requirements, data subjects have rights to access, rectification, deletion, restriction of processing, data portability and objection to certain processing. Given consent can be revoked with effect for the future.

There is also a right to lodge a complaint with a competent data protection supervisory authority.

Status

Status of this privacy policy: July 18, 2026.