Legal

Privacy Policy

Information on the processing of personal data under Art. 13, 14 GDPR.

1. Controller

GitCover Project GmbH
Talstraße 2 · 61381 Friedrichsdorf · Germany
E-mail: kontakt@gitcover.de

No data protection officer has been appointed; the conditions of § 38 BDSG are not met.

2. Principle

This website is deliberately privacy-friendly: no tracking, no profiling, no marketing cookies, no external fonts or map services. All assets are served by us or via our own CDN. Processing only takes place to the extent necessary for secure operation and to answer your enquiries.

3. Server log data

When you access the website, the hosting provider processes technical access data (IP address, date and time, file accessed, amount of data transferred, referrer, browser/OS identifier). This data is required for secure, stable operation and error analysis.

Purpose: operational security, error analysis, defence against abusive access. Legal basis: Art. 6 (1) (f) GDPR (legitimate interest). Retention: only as long as necessary for secure operation, then deletion (generally no longer than 7 days or after log rotation).

4. Cookies and local storage

No consent-requiring cookies and no tracking are set. Only technically necessary values (e.g. your light/dark setting and language) are kept in your browser's local storage (localStorage). This storage is necessary to provide the functions you requested (§ 25 (2) no. 2 TDDDG) and does not require consent. You can delete this data at any time via your browser settings.

5. Contact (e-mail and contact form)

You can reach us by e-mail at kontakt@gitcover.de or via the contact form. Through the form we process the data you provide: name, e-mail address, company/organisation (optional), subject (category), message and, technically, the IP address required for transmission. In addition to handling the content, we send a notification to our mailbox (e-mail). No SMS is sent.

Purpose: handling your enquiry and communicating with you. Legal basis: Art. 6 (1) (b) GDPR (pre-contractual measures) or Art. 6 (1) (f) GDPR (legitimate interest in handling); for voluntary storage for evidencing purposes, Art. 6 (1) (f) GDPR. Recipients: exclusively the hosting provider (servers located in Germany, Art. 28 DPA). No third-party form service, no third-country transfer. Retention: until your enquiry is fully handled and thereafter within statutory retention periods; the IP-based rate limit is stored transiently (max. 1 hour) and then deleted.

Providing the data is voluntary; however, without the fields marked as required (name, e-mail, message, consent) we cannot handle your enquiry. You may withdraw your consent at any time with effect for the future (Art. 7 (3) GDPR) — a message to the address above suffices.

6. Hosting

The website is hosted as a static website with a web hosting provider with servers located in Germany. A data processing agreement under Art. 28 GDPR is in place with the provider. No transfer to third countries takes place.

7. No automated decision-making

No automated decision-making, including profiling, under Art. 22 GDPR takes place.

8. Recipients

Personal data is disclosed only where necessary for contract performance, to fulfil legal obligations or to protect legitimate interests (e.g. hosting provider, tax advisers, authorities). No disclosure for advertising or to third parties for other purposes takes place.

9. Your rights

You have the following rights vis-à-vis the controller:

• Access to the processed data (Art. 15 GDPR),
• Rectification of inaccurate data (Art. 16 GDPR),
• Erasure (Art. 17 GDPR),
• Restriction of processing (Art. 18 GDPR),
• Data portability (Art. 20 GDPR),
• Objection to processing based on Art. 6 (1) (f) GDPR (Art. 21 GDPR).

A message to the address above suffices to exercise these rights.

10. Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). Competent is the authority at your habitual residence or our seat: Der Hessische Beauftragte für Datenschutz und Informationsfreiheit (HBDI), Gustav-Stresemann-Ring 1, 65189 Wiesbaden, Germany.

11. No obligation to provide

The provision of personal data is neither legally nor contractually required. You are not obliged to provide data; however, without the information required for contact, we cannot handle your enquiry.

12. Currency

This privacy policy is updated when processing or the legal situation changes. Status: 260926.