Privacy Policy

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

CaRD Gesellschaft für EDV-Beratung mbH
Gutenbergring 2, 69168 Wiesloch, Germany
Phone: +49 (0) 6222 9256-0
E-mail: info@card.de

For data-protection enquiries, please contact the address above, marked “Data protection".

2. No cookies, no tracking

This website does not set cookies and does not use comparable technologies for tracking purposes. There is no reach measurement, no profiling and no use of analytics tools. For this reason, no cookie banner is required.

3. No external services

All resources required to display the site (fonts, stylesheets, scripts, images) are served exclusively from our own server. No fonts or libraries are loaded from third parties (such as Google Fonts). As a result, no personal data is transmitted to third parties when you visit the site.

4. Server log files

When you access this website, the hosting provider automatically collects information in so-called server log files that your browser transmits. These are typically:

• anonymised / shortened IP address
• date and time of the request
• requested file / page and the volume of data transferred
• referrer URL and the browser/operating system used

This data is not merged with other data sources. Processing is based on Art. 6 (1) (f) GDPR; our legitimate interest lies in the technically error-free operation and security of the website. Log files are deleted after a short period unless they are required to investigate security incidents.

Hosting is provided by a service provider that processes the data on our behalf and on the basis of a data-processing agreement (Art. 28 GDPR).

5. Contact (form & e-mail)

If you contact us via the contact form or by e-mail, we process the data you provide (e.g. name, e-mail address, company, phone number and the content of your message) in order to process and answer your enquiry.

The legal basis is Art. 6 (1) (b) GDPR (initiation/performance of a contract or pre-contractual measures) or Art. 6 (1) (f) GDPR (legitimate interest in answering your enquiry).

The contact form is processed on the server and the message is delivered to us by e-mail. No cookies are set and no data is passed on to third parties for advertising purposes.

Retention: We store the data until your enquiry has been fully processed and then delete it, unless statutory retention obligations (e.g. commercial or tax law, generally six to ten years) apply.

6. Recipients of the data

Within our company, only those departments that need your data to handle your enquiry (in particular sales and, where applicable, technical consulting) have access to it. No transfer to third countries takes place.

7. Your rights

Within the framework of the statutory requirements, you have the following rights:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object (Art. 21 GDPR)

To exercise your rights, an informal message to the contact details above is sufficient. You also have the right to lodge a complaint with a data-protection supervisory authority (Art. 77 GDPR).

8. Data security

This website is delivered exclusively encrypted via HTTPS (TLS) to protect the transmission of your data. Please note that communication by ordinary e-mail may be unencrypted.

9. Validity

The current version of this privacy policy published on this website applies. As our website develops, an update may become necessary.