Privacy Policy

• No cookies, no tracking, no consent banner. We embed nothing that would require one.
• No third-party content. Fonts, images, videos and scripts are delivered from our own server. Your IP address is not passed to any third party when you view our pages.
• Usage statistics come from anonymised server logs, not from your browser.
• Server logs are deleted automatically after 14 days.
• The contact form processes only what you enter, protected against abuse without an external captcha service.
• The search runs in your browser. We learn the search term, but not who searched.
• Hosting in Germany, transmitted exclusively over encrypted connections.

The controller responsible for data processing on this website within the meaning of Art. 4 (7) General Data Protection Regulation (GDPR) is:

Arkcanis Consulting GmbH

Westerhofer Str. 12

21224 Rosengarten

Germany

Represented by its managing director Oliver Groht

Phone +49 40 524 7171-90

Email: info@arkcanis.com

Further details can be found in our Legal Notice.

For any questions about data protection and to exercise your rights, please email info@arkcanis.com with the subject “Privacy”, or write to the postal address above, marked “Data Protection”.

When you open a page, your browser transmits certain data to our server for technical reasons. This data is recorded in server logs:

• the IP address of the requesting device,
• date and time of the request,
• the address requested and the name of the website requested,
• the response status and the amount of data transferred,
• the page from which you came to us (referrer), if your browser sends it,
• type and version of your browser and operating system (user agent),
• the time taken to process the request.

We need this data to deliver the website to you, to ensure its stability and security, to analyse errors and to detect attacks. The legal basis is Art. 6 (1) (f) GDPR; our legitimate interest lies in the secure and uninterrupted operation of the website. The logs are deleted automatically after 14 days. We do not combine them with other data sources and do not build user profiles from them.

The connection to our website is only possible over an encrypted connection (HTTPS). Unencrypted requests are redirected to the encrypted address.

Our server automatically scans the logs for attack patterns, such as systematic probing for known vulnerabilities, an unusually high number of failed requests or abuse of the contact form. The address from which such requests originate is blocked temporarily, as a rule for no more than 24 hours. The legal basis is Art. 6 (1) (f) GDPR; our legitimate interest lies in protecting our systems and the data of our visitors. Normal use of the website does not trigger these measures.

We want to know which pages are read and how visitors find us. For this purpose we evaluate the server logs described above and nothing else. Before evaluation, the IP address is truncated so that it can no longer be attributed to any person or connection. No script runs in your browser, no cookie is set, no device is recognised and no profile is created.

The result is aggregated figures such as page views per day, most-read articles, referring websites and browsers used. These statistics no longer contain personal data and are kept without time limit. The legal basis for evaluating the logs is Art. 6 (1) (f) GDPR; our legitimate interest lies in developing our website in line with what our visitors need.

The search runs entirely in your browser: from the second character it loads a directory of all pages and articles once and searches it locally. The search term does not appear in the page address and therefore never ends up in our server logs.

So that we can tell which content people look for and fail to find, the website reports the search term, the number of results, the language and, if you open a result, the page you chose. This information reaches our own server only. No IP address is stored with this report, no cookie is set and no identifier is assigned that would allow several searches to be attributed to one person; the record holds nothing but the time, the search term, the number of results and the language. The transmission itself is covered, like every other request, by the server log described above. The report is sent once you have stopped typing, not on every keystroke.

A filter discards entries that look like an email address, an IBAN or a phone, account or customer number before anything is stored. It recognises the usual notations but cannot catch every conceivable detail. Please do not enter personal data into the search field; the contact form is the right way to send us a message.

The legal basis is Art. 6 (1) (f) GDPR; our legitimate interest lies in recognising which information is missing from this website and adding it. These records are deleted after twelve months.

This website sets no cookies, neither our own nor third-party ones. There are no analytics or advertising cookies and therefore no consent banner.

Until September 2026 this website was hosted by a different provider that set long-lived cookies. If your browser still holds such cookies, we neither read nor use them; when you visit our pages we instruct your browser to delete them. You can also remove them yourself at any time.

The one exception concerns the contact form: so that your entries are not lost if an error occurs on submission, your browser temporarily keeps the values you entered in session storage (sessionStorage). This data never leaves your device, is not transmitted to us and is deleted as soon as you have successfully submitted the form or close the browser tab. This storage is strictly necessary for the function you requested (Section 25 (2) no. 2 of the German Telecommunications Digital Services Data Protection Act, TDDDG); no consent is required for it.

You can send us a message via the form on our contact page. Your name, email address and message are required; your phone number is optional and helps us to reach you in the way you prefer.

Topic and further optional details. The form has a field called “Enquiry topic”. If you arrive via the contact button on one of our service pages, it is preselected accordingly; you can change it at any time. Depending on the topic, the form asks one or two further questions — for instance about the kind of support you are looking for or about the environment you use. These details are optional: they help us answer you without further enquiries, and leaving them empty is equally fine. We store the identifier of the topic you chose and the page from which you opened the form.

Protection against abuse. To fend off automated bulk submissions, the form asks a simple arithmetic question and performs automated plausibility checks. We do not use an external captcha service for this; no data is transmitted to third parties. In addition to your entries we store the time of submission, the language you chose, your browser identifier and an identifier derived from your IP address that cannot be reversed, which allows us to recognise repeated abuse. The IP address itself is not stored with your message.

Delivery and storage. Your message is received on our server and delivered to us by email. Our email system is operated by a service provider on our behalf and according to our instructions under a data processing agreement (Art. 28 GDPR), with processing in data centres within the European Union. A copy remains on the server for up to 90 days to safeguard delivery and is then deleted automatically. In our mailbox we keep your enquiry until your request has been dealt with conclusively and no further communication is to be expected. If your enquiry leads to a business relationship, the statutory retention periods under German commercial and tax law of up to ten years apply in addition.

Legal bases. If your enquiry concerns our services, processing is necessary in order to take steps prior to entering into a contract (Art. 6 (1) (b) GDPR). For other enquiries we process your data on the basis of our legitimate interest in answering your request (Art. 6 (1) (f) GDPR). The anti-abuse measures are likewise based on Art. 6 (1) (f) GDPR.

If you contact us directly by email or phone, we process the data you provide in order to deal with your request. The same legal bases and retention rules apply as for the contact form. Please note that unencrypted emails can be read by third parties in transit; please do not send us confidential information this way.

This website is operated by a hosting provider based in Germany, in a data centre in Germany. The provider processes the data described above exclusively on our behalf and according to our instructions under a data processing agreement (Art. 28 GDPR). No data is transferred to countries outside the European Union in the course of operating the website.

All components of this website, that is fonts, images, videos and scripts, are delivered from our own server. We do not embed any third-party content: no external font services, no map services, no video platforms, no social media buttons and no content delivery network. When you view our pages, your browser therefore establishes no connection to third parties.

Our pages contain links to external websites. Only when you click such a link do you leave our site; from then on the privacy information of the respective provider applies.

You have the following rights with regard to the personal data concerning you:

• Access (Art. 15 GDPR) to whether and which data we process about you,
• Rectification (Art. 16 GDPR) of inaccurate or incomplete data,
• Erasure (Art. 17 GDPR), unless statutory retention obligations prevent it,
• Restriction of processing (Art. 18 GDPR),
• Data portability (Art. 20 GDPR) in a commonly used, machine-readable format,
• Withdrawal of any consent given, with effect for the future (Art. 7 (3) GDPR).

An informal message to the address above is sufficient to exercise your rights. We normally respond within one month.

You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which we base on Art. 6 (1) (f) GDPR (Art. 21 (1) GDPR). If you object, we will no longer process your data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

We do not carry out direct marketing on the basis of your data. Should we do so in future, you may object at any time without giving reasons (Art. 21 (2) GDPR).

You have the right to lodge a complaint with a data protection supervisory authority about our processing of your data (Art. 77 GDPR), in particular in the Member State of your habitual residence, place of work or place of the alleged infringement. The authority responsible for our registered office is:

Der Landesbeauftragte für den Datenschutz Niedersachsen (State Commissioner for Data Protection of Lower Saxony)

Prinzenstraße 5

30159 Hannover, Germany

www.lfd.niedersachsen.de

We do not make automated individual decisions and do not carry out profiling (Art. 22 GDPR). This website can be used without providing personal data. Providing your data in the contact form is voluntary; without the required fields, however, we cannot answer your enquiry.

We update this policy when the technologies we use or the legal situation change. The version published on this page applies.

Last updated: 16 September 2026

If you have any questions about this policy or about how we handle your data, write to us via the contact page or at info@arkcanis.com. You will get a personal reply.