Privacy Policy

1. Controller

innt Consulting GmbH
Untermainkai 83a, 60329 Frankfurt am Main
tm@innt-consulting.com

2. Data protection officer

Es ist kein Datenschutzbeauftragter bestellt. Für Datenschutzanfragen wenden Sie sich bitte an den Verantwortlichen:

innt Consulting GmbH
Untermainkai 83a
60329 Frankfurt am Main
E-Mail: info@innt-gmbh.de

3. Principles

We process personal data only as far as necessary for the respective purpose. The legal bases are Art. 6(1)(b) GDPR (steps prior to and performance of a contract), Art. 6(1)(c) GDPR (legal obligations such as tax retention), Art. 6(1)(f) GDPR (legitimate interest in secure operation) and, where we explicitly ask you, Art. 6(1)(a) GDPR (consent).

4. Visiting our pages

When you visit, we process the data your browser transmits and that is technically required to serve the page: IP address, date and time, address requested, volume transferred, success message, browser type and version, operating system and the referring page if your browser sends one. This data appears in our hosting provider's logs, serves secure operation (Art. 6(1)(f) GDPR), is not combined with other records and is deleted after a short period.

5. Usage measurement on our pages

We measure the use of our pages with our own counting, operated on our servers. Page views and interactions are recorded; there is no recognition across devices, and the data does not leave our infrastructure. The legal basis is our legitimate interest in comprehensible usage statistics (Art. 6(1)(f) GDPR).

6. Cookies and browser storage

We set technically necessary cookies only where they are needed — for a sign-in, for example, or to keep your selection during an order. They are protected from scripts (httpOnly) and end with the session. We do not set cookies requiring consent for advertising or analytics.

7. Forms

When you fill in a form, we process the details provided in order to handle your request and to contact you (Art. 6(1)(b) GDPR). Mandatory fields are marked as such; everything else is voluntary. A one-time code may be sent to confirm your email address.

8. Service providers

We use service providers that process data exclusively on our behalf and on our instructions (processing under Art. 28 GDPR):

Vercel Inc. (USA) — operation and delivery of the pages. The log data named above arises here.
Supabase Inc. (USA), data stored in Frankfurt am Main, Germany — database.
Cloudflare, Inc. (USA) — storage and delivery of images, videos and documents. When a file is fetched, your IP address is necessarily transmitted to this service.
Railway Corp. (USA) — background processing, such as generating PDF documents and thumbnails.
Inngest, Inc. (USA) — orchestration of recurring tasks. Only internal identifiers are transmitted.
Plus Five Five, Inc. ("Resend", USA) — delivery of our emails.
Backblaze, Inc. (USA) — encrypted backup.

Data processing agreements are in place with all processors.

9. Transfers to third countries

Where providers process data outside the European Union, this is based on the European Commission's standard contractual clauses (Art. 46(2)(c) GDPR) with supplementary safeguards, or on an adequacy decision.

10. Retention

We keep personal data only as long as necessary for the respective purpose. It is then deleted unless a statutory retention obligation applies.

11. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18) and data portability (Art. 20). You may object at any time, on grounds relating to your particular situation, to processing based on legitimate interests (Art. 21). Consent once given can be withdrawn at any time with effect for the future.

12. Right to complain

You may lodge a complaint with a data protection supervisory authority, in particular in the Member State of your residence, place of work or the place of the alleged infringement. The authority competent for us is:
Der Hessische Beauftragte für Datenschutz und Informationsfreiheit
Postfach 3163
65021 Wiesbaden

E-Mail: poststelle@datenschutz.hessen.de
datenschutz.hessen.de

13. Links to other sites

Our pages may link to third-party websites. Their content and data processing are the sole responsibility of those providers.

14. Changes

We update this policy when the processing described here changes. Last updated: [date — please complete].