Privacy Policy

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is: Contensi Software GmbH

Ulmenweg 2

34516 Vöhl

Germany

Represented by: Moataz Elmasry

Phone: +49 5635-7483999

Email:

projekt@contensi.com

If you have any questions about data protection, you can contact us at any time using the contact details above.

2. General information on data processing

In operating our website at contensi.com ("Website"), we process personal data. We treat this data confidentially and process it exclusively in accordance with applicable statutory provisions, in particular the General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG) and the German Telecommunications-Telemedia Data Protection Act (TTDSG). This privacy policy informs you which personal data we collect, for what purposes and on what legal basis we process it, to whom we may disclose it, and how long we retain it. We also inform you of the rights available to you as a data subject.

As a rule, we only process data that you actively provide on the website (e.g. by filling in a form or contacting us by email) or that is generated automatically when you visit the website. Your data is not sold to third parties. Where we engage external service providers for processing, this takes place under a data processing agreement pursuant to Art. 28 GDPR, under which we remain entitled to issue instructions to the provider. The individual service providers we use are named in the respective sections below.

3. Your rights as a data subject

You have the following rights with respect to the personal data concerning you that we process: the right to information about the data we process (Art. 15 GDPR); the right to rectification of inaccurate data (Art. 16 GDPR); the right to erasure of data stored about you (Art. 17 GDPR); the right to restriction of processing where the statutory requirements are met (Art. 18 GDPR); the right to data portability, where processing is based on consent or a contract and is carried out by automated means (Art. 20 GDPR); the right to object to the processing of your data where it is based on legitimate interests under Art. 6(1)(f) GDPR (Art. 21 GDPR); and the right to withdraw any consent given at any time with effect for the future (Art. 7(3) GDPR).

You also have the right to lodge a complaint with a data protection supervisory authority about our processing of your personal data (Art. 77 GDPR). The supervisory authority responsible for us is:

Der Hessische Beauftragte für Datenschutz und Informationsfreiheit (Hessian Commissioner for Data Protection and Freedom of Information)

Postfach 3163, 65021 Wiesbaden, Germany

Phone: +49 611 1408-0

Email:

poststelle@datenschutz.hessen.de

4. Hosting

4.1 Description of processing

This website is provided through a technical hosting service. The connection and log data required to deliver and secure the website is processed as part of the hosting operation. Where the hosting service processes personal data on our behalf, this takes place under a data processing agreement pursuant to Art. 28 GDPR.

4.2 Purpose

Provision and delivery of the website to users, technical security of operations.

4.3 Legal basis

Art. 6(1)(f) GDPR. Our legitimate interest lies in the reliable and secure provision of our online offering.

5. Server log files

5.1 Description of processing

Each time our website is accessed, the hosting provider’s web server automatically collects information transmitted by your browser and stores it in what are known as server log files: IP address, date and time of the request, browser type and version, operating system, page accessed, referrer URL.

5.2 Purpose

Ensuring trouble-free operation of the website, detecting and tracing misuse and attacks, system security.

5.3 Legal basis

Art. 6(1)(f) GDPR. Our legitimate interest lies in the purposes of data collection named above.

5.4 Retention period

Log file data is stored for a limited period for security reasons and then automatically deleted, unless a statutory retention obligation requires otherwise.

6. Cookies, tracking and local storage in the browser

6.1 Description of processing

This website deliberately uses no cookies and no tracking or analytics tools – there is no evaluation of user behaviour (e.g. page views, time spent, visitor origin), and no Google Fonts or other external fonts, advertising or analytics services are loaded. Solely for a single, purely visual feature – a brief animated greeting shown exactly once per session on the homepage – the website stores a single piece of technical information in your browser’s so-called session storage (not a cookie in the technical sense, but likewise a form of storing information on your device within the meaning of Sec. 25 TTDSG). This information is automatically deleted as soon as you close the browser tab, and is never transmitted to us or to any third party.

6.2 Legal basis

Storage in session storage is technically necessary to provide the feature described and is based on Sec. 25(2) No. 2 TTDSG; no consent is required for this.

6.3 Withdrawal and retention period

You can prevent this storage at any time via your browser settings, or remove the stored information by closing the browser tab or clearing the website’s data in your browser settings.

7. Cost-indication and quote-request forms

7.1 Description of processing

On the Proxmox migration page, we offer two forms: one to unlock a non-binding cost indication (asking for name, company and business email address) and one to request a quote following a workshop (additionally asking for, among other things, contact details and information about your project). Both forms transmit your details to a Google Apps Script in our own Google account, which then automatically sends an email containing your details to us. No separate third-party form provider is used; processing takes place via our Google Workspace account, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (parent company: Google LLC, USA), with whom – as with the rest of our business email communication – we have concluded a data processing agreement based on the standard terms provided by Google.

7.2 Purpose

Processing and responding to your enquiry, preparing the requested cost indication or the requested quote.

7.3 Legal basis

Art. 6(1)(b) GDPR, insofar as the enquiry is aimed at entering into a contract; otherwise Art. 6(1)(f) GDPR (legitimate interest in the efficient handling of enquiries).

7.4 Third-country transfer and retention period

As Google LLC is based in the USA, use of Google Workspace may result in data being transferred to a third country; this is based on EU standard contractual clauses. Data is deleted as soon as it is no longer required for the purpose for which it was collected – typically once communication with you has concluded. Where statutory retention periods preclude deletion, the data is deleted immediately after those periods expire.

7.5 Contact by phone and email

Regardless of the forms described above, you may contact us at any time using the phone number or email address given on the website; in that case we process the data you provide to handle your enquiry on the basis of Art. 6(1)(f) or (b) GDPR, as applicable.

8. Slack channel access request form

8.1 Description of processing

In the website’s footer, you can use a form to request access to our Slack workspace (asking for name, company, business email address, your request, and optionally a phone number). The form does not send your details via a server of its own: submitting it opens the email application set up on your device with a pre-filled message addressed to our contact address given above; we only receive your details once you actually send that email. Your details are not stored, even temporarily, on our website or on any server.

8.2 Purpose

Reviewing and granting your access to our Slack workspace.

8.3 Legal basis

Art. 6(1)(f) GDPR. Our legitimate interest lies in the straightforward handling of access requests.

8.4 Retention period

As transmission takes place exclusively by email, the general retention periods for our business email correspondence apply; data is deleted once it is no longer needed to process your request.

9. Appointment booking (Cal.com)

9.1 Description of processing

For booking consultation appointments (e.g. via the "Book an initial consultation" button), we use the Cal.com service, provided by Cal.com, Inc., 1 Broadway, Cambridge, MA 02142, USA. The associated booking window is only loaded once you actively click the relevant button – simply visiting the website does not create a connection to Cal.com. When booking an appointment, your name, email address and the appointment details you select are processed.

9.2 Purpose

Enabling straightforward appointment scheduling.

9.3 Legal basis

Art. 6(1)(f) GDPR (legitimate interest in efficient appointment scheduling) or Art. 6(1)(b) GDPR, insofar as the booking serves to initiate a contract.

9.4 Third-country transfer and retention period

As Cal.com, Inc. is based in the USA, data may be transferred to a third country. This is based on EU standard contractual clauses. Data is deleted once it is no longer needed to handle the appointment.

10. Job applications

10.1 Description of processing

If you apply to us (e.g. via the application link on our careers page or directly by email), we process the application documents you send us by email (including name, contact details, CV, references, cover letter). We do not offer a separate upload form for applications.

10.2 Purpose

Conducting and administering the application process.

10.3 Legal basis

Sec. 26 BDSG in conjunction with Art. 88 GDPR, and Art. 6(1)(b) GDPR (initiating an employment relationship).

10.4 Retention period

If your application is unsuccessful, your application data is deleted no later than 6 months after the application process concludes, unless you have consented to longer storage or longer retention is necessary to defend against legal claims (Sec. 15(4) AGG, the German General Equal Treatment Act). If you are hired, the data is transferred to your personnel file.

11. Recipients and disclosure to third parties

Your data is only disclosed to third parties as part of the processing described above – to our hosting provider (to be named once selected), to Google in connection with the cost-indication and quote-request forms (item 7), and to Cal.com, Inc. in connection with appointment booking – as well as, where legally required, to authorities entitled to request data. No disclosure to an external service provider takes place for the Slack access request form (item 8), since the message is sent to us solely via your own email application. No disclosure takes place for any purpose other than those named here.

12. Changes to this privacy policy

We reserve the right to amend this privacy policy in order to adapt it to changes in the law or to changes in our processing. The version published on this page at the time of your visit applies.

Last updated: September 2026