Privacy policy

• The website sets no cookies and stores no data about you in your browser.
• There is no analytics, no tracking, no advertising and no embedded content from other providers. Fonts and images come from this server.
• When you open a page, Cloudflare and my server process technical data such as your IP address. I delete the access log after 14 days.
• If you email me, I use what you send only to answer you.

Responsible for this website is:

For any question about data protection, write to [email protected]. There is no data protection officer, because the law does not require one for a business of this size.

For a page to reach you, your browser sends technical information along. Processed are:

• your IP address
• date and time, the address requested, the status code and the amount of data sent
• the page you came from (referrer), if your browser sends it
• browser, operating system and preferred language, as your browser states them

My server writes this information to an access log and, when something fails, the IP address and the error message to an error log. I use both only to find errors and to fend off attacks. Entries older than 14 days are deleted automatically every day. I do not analyse the logs to recognise visitors and do not combine them with other data.

The legal basis is my legitimate interest in a secure, working website (Art. 6(1)(f) GDPR).

The server runs in the Frankfurt am Main data centre of Oracle Deutschland B.V. & Co. KG, Riesstraße 25, 80992 Munich, Germany. Oracle processes the data only on my behalf and under my instructions (Art. 28 GDPR).

Every request first passes through the network of Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. Cloudflare encrypts the connection, keeps copies of the pages and filters attacks. For this, Cloudflare processes the technical information above as my processor (Art. 28 GDPR). Data may reach the USA. The company is certified under the EU-US Data Privacy Framework; the adequacy decision of the European Commission covers this transfer (Art. 45 GDPR). See Cloudflare’s privacy policy.

Cloudflare also tells your browser to report connection errors (Network Error Logging). Your browser keeps this instruction for seven days. If a request to the website fails during that time, for example because of a network or certificate error, it sends a short report to Cloudflare (a.nel.cloudflare.com): the address requested, the type of error, the server address, the time, your browser and, technically, your IP address. Successful requests are not reported. The reports serve to detect outages. Some browsers let you turn this off; deleting your browser data also removes the instruction.

The legal basis is my legitimate interest in secure, fast delivery (Art. 6(1)(f) GDPR).

The website stores no cookies and no data about you on your device and reads nothing from it. The only technical exception is Cloudflare’s error reporting instruction described above; it contains no identifier. The language follows from the address alone (/en for English). So there is no cookie banner.

Addresses like praezisus.com/get/… lead to the app in the right store. For this one request, the server checks whether your browser reports an iPhone, iPad or Android device and redirects you to the App Store or Google Play. Otherwise it shows a page with both stores. The result is not stored; the request only ends up in the access log like any other.

An NFC tag you wrote with Ready Kit holds an address like praezisus.com/readykit/t/… with a random ID. If the app is installed, it opens the tag directly without asking the website. Otherwise your browser opens a page that leads to the app. The ID says nothing about you or your supplies; it only appears in the access log.

If you write to me, I process your address and your message to answer you. The legal basis is Art. 6(1)(b) GDPR when it concerns a project or one of my apps, otherwise my legitimate interest in answering (Art. 6(1)(f) GDPR). I delete the message once the matter is settled, unless commercial or tax law requires keeping it (up to ten years for business letters and invoices).

The praezisus.com mailboxes are hosted by STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany, which stores the messages on my behalf (Art. 28 GDPR).

Links to the App Store, Google Play and other sites are plain links. Only when you follow one does that provider learn of your visit; its own privacy policy applies there.

The website is reachable only encrypted, over HTTPS.

Where I process personal data about you, you have these rights:

• Access to your data (Art. 15 GDPR)
• Correction of wrong data (Art. 16 GDPR)
• Erasure (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Receiving your data in a common format (Art. 20 GDPR)
• Withdrawal of consent, at any time and for the future (Art. 7(3) GDPR)

Objection (Art. 21 GDPR): Where processing rests on a legitimate interest (Art. 6(1)(f) GDPR), you may object to it at any time on grounds relating to your particular situation. I then stop, unless there are compelling legitimate grounds that override your interests, or the processing serves legal claims.

An informal email to [email protected] is enough. You may also lodge a complaint with a data protection authority (Art. 77 GDPR), for example the one responsible for me:

www.baden-wuerttemberg.datenschutz.de

When the processing changes, I update this policy. The date at the top shows the last revision. The German version prevails.