Privacy policy

Thank you for your interest in our website and our services. The protection of your personal data is important to us. Below, in accordance with Art. 13 and 14 of the General Data Protection Regulation (GDPR), we inform you about which data we process, for what purpose, on what legal basis, and which rights you have.

1. Controller

The controller responsible for data processing within the meaning of the GDPR is:

Dirk Ruetz Softwareentwicklung
camindo systems
Kirschbluetenweg 15
70569 Stuttgart (Germany)
Email: camindo (at) camindo (dot) de

No data protection officer has been appointed, as the legal requirements for this (Section 38 BDSG, German Federal Data Protection Act) are not met. If you have any questions about data protection, please contact the address above directly.

2. Accessing the website and server log files

When you access our website, your browser automatically transmits information to our server. The following data is temporarily stored in log files:

  • IP address of the requesting device
  • Date and time of access
  • Name and URL of the file retrieved
  • HTTP status code and amount of data transferred
  • Website from which the access is made (referrer URL)
  • Browser used and, if applicable, operating system (user agent)

The processing takes place in order to enable the delivery of the website, to ensure system security and stability, and to detect and defend against misuse and attacks. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in the purposes mentioned.

The IP addresses are anonymized after 7 days at the latest, so that they can no longer be linked to a person. This data is not combined with other data sources. No analysis for marketing purposes or tracking takes place.

3. Cookies and local storage

We do not use cookies for analysis, tracking or advertising purposes. Only one technically necessary piece of information is stored in your browser: whether you prefer the standard or the accessible version of our website. This information does not contain any personal data in the narrower sense and is not passed on to third parties.

The storage is strictly necessary to provide the display you have expressly requested. The legal basis is Section 25(2) no. 2 TDDDG (German Telecommunications Digital Services Data Protection Act); consent is not required for this. Insofar as personal data is processed in the process, the legal basis is Art. 6(1)(f) GDPR. You can delete stored information at any time via your browser settings; the website will then be displayed in the standard version.

4. No integration of third-party providers

Our website does not integrate any external services. Fonts, icons, scripts and other resources are loaded exclusively from our own server. Your data is not transmitted to analytics, advertising or social media providers.

5. Contact by email

If you contact us by email, we process the data you provide (in particular your email address, name and the content of your inquiry) in order to process and answer your inquiry.

The legal basis is Art. 6(1)(b) GDPR if your inquiry is related to the performance of a contract or the implementation of pre-contractual measures, and otherwise Art. 6(1)(f) GDPR (legitimate interest in answering inquiries).

Your data will be deleted as soon as the inquiry has been conclusively dealt with and no further communication is to be expected; as a rule, after 6 months at the latest. If the inquiry leads to a contractual relationship or if it is business correspondence subject to statutory retention obligations (commercial and business letters, Section 257 HGB, German Commercial Code: 6 years), we retain the data for the duration of these periods (Art. 6(1)(c) GDPR).

6. Processing of customer data

In the course of our business relationships, we process data of our customers and prospective customers, in particular:

  • Master data (name, company, address)
  • Contact data (email address, telephone number)
  • Contract data (services commissioned, terms, project information)
  • Billing and payment data (invoices, bank details, incoming payments)
  • Communication data (correspondence relating to the contractual relationship)

The processing takes place for the initiation, performance and handling of contracts, for customer support and for the fulfillment of legal obligations, in particular under commercial and tax law. The legal bases are Art. 6(1)(b) GDPR (performance of a contract) and Art. 6(1)(c) GDPR (legal obligation).

We store customer data for the duration of the business relationship. After it ends, the data is deleted unless statutory retention obligations prevent this. These are in particular:

  • 8 years for invoices and accounting vouchers (Section 147 AO, German Fiscal Code; Section 257 HGB)
  • 10 years for commercial books, inventories, annual financial statements and the documents required to understand them (Section 147 AO, Section 257 HGB)
  • 6 years for commercial and business letters received and sent (Section 257 HGB, Section 147 AO)

The periods each begin at the end of the calendar year in which the document was created. During this time, processing is restricted to the fulfillment of the retention obligation. In addition, data may be retained until the statutory limitation periods expire (as a rule 3 years, Sections 195, 199 BGB, German Civil Code), insofar as this is necessary for the establishment, exercise or defense of legal claims (Art. 6(1)(f) GDPR).

Customer data is only passed on to third parties insofar as this is necessary for the performance of the contract (e.g. to credit institutions for payment processing), we are legally obliged to do so (e.g. to tax authorities), or to advisors bound to confidentiality (e.g. tax advisors). Insofar as we use service providers that process data on our behalf (e.g. hosting), this is done on the basis of a data processing agreement pursuant to Art. 28 GDPR.

7. Transfer to third countries

Your personal data is not transferred to countries outside the European Union or the European Economic Area.

8. Your rights

You have the following rights with regard to your personal data:

  • Right of access (Art. 15 GDPR)
  • Right to rectification (Art. 16 GDPR)
  • Right to erasure (Art. 17 GDPR)
  • Right to restriction of processing (Art. 18 GDPR)
  • Right to data portability (Art. 20 GDPR)
  • Right to withdraw consent given, with effect for the future (Art. 7(3) GDPR)

Right to object (Art. 21 GDPR): Insofar as we process your data on the basis of legitimate interests (Art. 6(1)(f) GDPR), you have the right to object to this processing at any time on grounds relating to your particular situation. We will then no longer process the data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defense of legal claims.

To exercise your rights, an informal message to camindo (at) camindo (dot) de is sufficient.

9. Right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your data violates the GDPR (Art. 77 GDPR). The authority responsible for us is:

Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg (State Commissioner for Data Protection and Freedom of Information Baden-Württemberg)
Lautenschlagerstraße 20
70173 Stuttgart
www.baden-wuerttemberg.datenschutz.de

10. Data security

Our website is delivered exclusively via an encrypted connection (TLS/HTTPS). We use technical and organizational measures to protect your data against loss, manipulation and unauthorized access, and continuously adapt them to the state of the art.

11. Obligation to provide data, no automated decision-making

You do not have to actively provide any personal data to simply use the website. The data necessary for concluding and performing a contract is required; without it, we cannot conclude the contract. Automated decision-making, including profiling (Art. 22 GDPR), does not take place.

12. Changes to this privacy policy

We adapt this privacy policy if our data processing or the legal situation changes. The version published here at any given time applies.

Last updated: October 2026