Privacy Policy

1Controller

The controller within the meaning of the GDPR is:

2Collection of personal data

Data is only collected insofar as it is technically necessary or voluntarily provided. Legal bases: Art. 6 para. 1 lit. a, b and f GDPR.

3Contact form

When completing the form, the following is collected: name, email, phone (optional), subject, message. Delivery via Resend (USA) on the basis of a data processing agreement pursuant to Art. 28 GDPR. Legal basis: Art. 6 para. 1 lit. b and f GDPR. Deleted after 6 months.

Further information: resend.com/legal/privacy-policy

4Contact by email or phone

Data you transmit is stored for processing and not passed on without your consent. Legal basis: Art. 6 para. 1 lit. b and f GDPR.

5Server log files

Vercel automatically records log files: browser type, operating system, referrer URL, hostname, time, IP address (anonymized). No merging with other data. Legal basis: Art. 6 para. 1 lit. f GDPR.

6Cookies & consent

This website displays a cookie banner on your first visit. Google Analytics 4 is only loaded after your consent. Your decision is stored in your browser's localStorage – no server cookie.

Withdraw consent: browser settings → privacy → delete website data (for cdm-it.de). After that, GA4 is no longer loaded.

Technically necessary cookies are set without consent pursuant to Art. 6 para. 1 lit. f GDPR.

7Google Analytics 4

This website uses Google Analytics 4 provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland – exclusively after your consent.

Data collected

• Pages visited and time spent
• Approximate geographic origin (country/region)
• Browser type and operating system
• Traffic source (e.g. search engine, direct visit)

Data protection measures

• IP anonymization enabled (anonymize_ip: true)
• No disclosure to third parties for advertising purposes
• Data transfer to the USA on the basis of the EU standard contractual clauses (Art. 46 GDPR)

Legal basis: Art. 6 para. 1 lit. a GDPR (consent). Withdrawal: see section 6.

policies.google.com/privacy  |  GA4 Opt-Out Plugin

8Hosting (Vercel)

Hosting with Vercel Inc. (USA). Server locations in the EU (Frankfurt). Data transfer on the basis of the EU standard contractual clauses pursuant to Art. 46 GDPR.

vercel.com/legal/privacy-policy

9Your rights

• Access (Art. 15 GDPR)
• Rectification (Art. 16 GDPR)
• Erasure (Art. 17 GDPR)
• Restriction (Art. 18 GDPR)
• Objection (Art. 21 GDPR)
• Data portability (Art. 20 GDPR)
• Withdrawal of consent (e.g. Google Analytics)

Requests: info@cdm-it.de

Right to lodge a complaint: LDI NRW

10Data security

SSL/TLS encryption via Let's Encrypt (recognizable by the “https://”).

11Changes

We adapt this policy as needed. Last updated: March 2025.