Legal

Privacy Policy

This is a courtesy translation. The German version of this Privacy Policy is the legally binding one.

Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) for data processing on this website is:

Phiro Group
Owner: Rouven Koch
Böcklerstraße 5b
70199 Stuttgart
Germany

Phone: 015128856829
Email: privacy@phiro-group.com

Data Protection Officer

Due to the size and nature of our business, we are not legally required to appoint a data protection officer. For all questions and concerns regarding data protection, you can reach us at any time at privacy@phiro-group.com.

Your Rights as a Data Subject

You have the following rights regarding your personal data:

  • Right of access (Art. 15 GDPR)
  • Right to rectification of inaccurate data (Art. 16 GDPR)
  • Right to erasure (Art. 17 GDPR)
  • Right to restriction of processing (Art. 18 GDPR)
  • Right to data portability (Art. 20 GDPR)
  • Right to object to processing (Art. 21 GDPR)
  • Right to withdraw consent given at any time with effect for the future (Art. 7 (3) GDPR)

You also have the right to lodge a complaint with a data protection supervisory authority regarding our processing of your personal data. The competent authority is generally the supervisory authority of the place where our company is based:

The State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg (Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg)
Heilbronner Straße 35
70191 Stuttgart
www.baden-wuerttemberg.datenschutz.de

Hosting and Server Log Files

This website is operated on our own server located in Germany/the EU. Each time this website is accessed, the server automatically records so-called server log files transmitted by your browser. These include in particular:

  • IP address of the accessing device
  • Date and time of access
  • File accessed and amount of data transferred
  • Browser type and version, operating system used
  • Previously visited page (referrer URL)

Processing takes place to ensure a smooth connection, convenient use of the website, and to evaluate system security and stability (legal basis: Art. 6 (1)(f) GDPR, legitimate interest). This data is not combined with data from other sources. Log files are automatically deleted once they are no longer needed for the stated purposes, generally after a few weeks.

Cookies and Consent

This website uses technically necessary cookies and comparable storage technologies to ensure basic functionality – for example, to store your cookie decision (in your browser’s local storage, not as a cookie) and to protect the contact form against abuse (see the section "Spam Protection with hCaptcha"). These are permitted without your consent under § 25 (2) No. 2 TTDSG and Art. 6 (1)(f) GDPR, as they are strictly necessary for operating the website.

Beyond that, non-essential cookies (currently: Matomo’s analytics cookies) are only used after your explicit consent via the cookie banner (Art. 6 (1)(a) GDPR). You can change your selection at any time via the "Cookie Settings" link in the footer of this website or withdraw your consent with effect for the future.

Web Analytics with Matomo

If you have given consent via the cookie banner, we use the web analytics service Matomo to statistically evaluate the use of this website (e.g. pages visited, time spent, navigation paths, button clicks). The legal basis is exclusively your consent (Art. 6 (1)(a) GDPR); no processing takes place without your consent.

We operate Matomo ourselves on our own server located in Germany (stats.phiro-group.com). The collected data is not shared with third parties or transferred to servers outside the EU. The following cookies are set:

  • _pk_id – recognizing returning visitors, retention period 13 months
  • _pk_ses – assigning actions within a session, retention period 30 minutes
  • _pk_ref – assigning the access source (e.g. search engine, referring page), retention period 6 months

Your IP address is currently not anonymized, but is stored together with the other usage data in Matomo. You can withdraw your consent at any time via the "Cookie Settings" link in the footer; any Matomo cookies already set will be deleted automatically.

Contact Form

If you send us a request via the contact form, we process the data you enter there (name, email address, optionally company and phone number, subject, and message) in order to process and respond to your request. The legal basis is your consent (Art. 6 (1)(a) GDPR), which you grant by checking the box before submitting the form. You can withdraw this consent at any time with effect for the future by contacting us informally by email; the lawfulness of processing carried out up to the point of withdrawal remains unaffected.

Technically, the form is handled by the third-party provider Web3Forms, which receives the entered data and forwards it by email to our inbox. Web3Forms’ servers are located in the USA; this involves a transfer of data to this third country. According to its own statements, Web3Forms stores submitted form data for up to twelve months and regularly deletes server log files containing personal data. Further information can be found in Web3Forms’ privacy policy: web3forms.com/privacy .

Email Communication and Microsoft 365

If you contact us directly by email, or if a message sent via the contact form is forwarded to us, it arrives in our email inbox. For our business email communication, we use Microsoft 365 (provider: Microsoft Ireland Operations Limited or Microsoft Corporation). Our data is generally stored in European data centers; however, processing by Microsoft outside the EU/EEA cannot be fully ruled out, for example for maintenance or support purposes. We have a data processing agreement with Microsoft (Art. 28 GDPR) based on the standard contractual clauses provided by Microsoft.

Processing of the data you transmit by email takes place to handle and respond to your request (Art. 6 (1)(b) or (f) GDPR). Emails are retained for as long as is necessary to handle your request, or as required by statutory retention obligations under commercial and tax law.

Spam Protection with hCaptcha

To protect our contact form against automated abuse (spam, bots), we use the hCaptcha service provided by Intuition Machines, Inc., 1065 SW 8th St #704, Miami, FL 33130, USA. Among other things, hCaptcha collects your IP address, date and time of interaction, device and browser information, and interaction data (e.g. mouse movements), and sets cookies for this purpose.

Processing is based on our legitimate interest in a contact form protected against spam and automated attacks (Art. 6 (1)(f) GDPR) and on § 25 (2) No. 2 TTDSG, since its use is strictly necessary to secure a function you actively requested (submitting the contact form). A separate consent via the cookie banner is not required for this.

hCaptcha also processes data in the USA. The provider refers to standard contractual clauses and a certification under the EU-U.S. Data Privacy Framework. Further information can be found in hCaptcha’s privacy policy: hcaptcha.com/privacy .

Embedded Fonts (Google Fonts)

This website embeds the fonts "Manrope" and "IBM Plex Mono" via the Google Fonts API. When a page is loaded, your browser establishes a connection to Google’s servers (Google Ireland Limited or Google LLC, USA), transmitting your IP address to Google so that the font can be delivered to your browser.

This is done on the basis of our legitimate interest in a consistent, performant display of fonts (Art. 6 (1)(f) GDPR). Further information can be found in Google’s privacy policy: policies.google.com/privacy .

External Links

This website links, among other things, to the site operator’s LinkedIn profile. Merely placing a link does not transmit any data to the linked site; this only happens once you actively click the link and visit the external site. The respective provider is solely responsible for data processing on the linked site.

Data Security

For security reasons and to protect the transmission of confidential content, this website uses SSL/TLS encryption. You can recognize an encrypted connection by the fact that your browser’s address bar changes from "http://" to "https://" and by the lock icon in the address bar.

No Automated Decision-Making

No automated decision-making, including profiling within the meaning of Art. 22 GDPR, takes place in connection with the use of this website.

Changes to this Privacy Policy

We reserve the right to amend this privacy policy to ensure it always complies with current legal requirements or to reflect changes to our services. The updated version will then apply on your next visit.