Privacy Policy

2. Hosting & server logfiles

This website is hosted by Strato AG, Pascalstraße 10, 10587 Berlin. A data processing agreement (DPA) pursuant to Art. 28 GDPR has been concluded. The servers are located in Germany.

When the website is accessed, the following data is automatically recorded in server logfiles:

• IP address (anonymised after 7 days)
• Date and time of access
• Name and URL of the file retrieved
• Referrer URL (referring page)
• Browser identifier (user agent), operating system, device type
• HTTP status code and amount of data transferred

This data is not merged with other sources. The IP address is anonymised after no more than 7 days; the remaining log data is stored only for as long as is necessary for IT security and error analysis, and is subsequently deleted.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in IT security and technical operation)

3. Contact form

Data collected

When you use the contact form, the following data is processed:

Mandatory fields:

• First name
• Email address
• Consent to data processing (checkbox confirmation)

Optional fields:

• Phone number
• Company / organisation
• Message (max. 500 characters)
• Demo request (checkbox)

Technical metadata (internal, not public):

• Page URL of the form (to trace the source of the enquiry)
• Timestamp of the page view (solely for anti-spam checks, no profiling)

Purpose and legal basis

The data is processed in order to respond to your enquiry and – if requested – to arrange a non-binding product demo.

Legal basis: Art. 6(1)(a) GDPR (explicit consent through checkbox confirmation). For demo requests, additionally Art. 6(1)(b) GDPR (pre-contractual measures).

Storage location & access

Your form data is processed and stored in our internally operated CRM/ERP system. This system is based on the open-source framework Frappe, is operated exclusively by Cita.Solutions UG and is located on EU servers. No transfer to third parties takes place.

Storage period

Contact enquiries are stored for the duration of processing and subsequently deleted after no more than 90 days, unless statutory retention obligations apply (§ 147 AO, § 257 HGB).

Withdrawal of consent

You may withdraw your consent at any time with effect for the future. To do so, send an informal email to info@cita-solutions.de. The lawfulness of the processing carried out up to the point of withdrawal remains unaffected.

Anti-spam measures

The form contains an invisible honeypot field as well as server-side rate limiting (max. 5 requests/hour). These technical measures serve solely to protect against automated spam bots and do not store any personal data. No CAPTCHA is used.

4. Browser temporary storage (session storage)

When you activate the privacy checkbox in the contact form, the website temporarily stores your form draft in the session storage of your browser. This serves convenience purposes only (recovery in the event of an accidental page reload).

This data:

• is stored exclusively locally in your browser
• is not transmitted to our servers
• is automatically deleted as soon as you close the browser tab or have successfully submitted the form

This is not a cookie within the meaning of § 25 TDDDG. Legal basis: your consent (checkbox activation).

5. Cookies

This website uses exclusively technically necessary cookies that are essential for the technical operation of the website. No tracking, analytics or marketing cookies are used. A cookie consent banner is therefore not required.

Legal basis: § 25(2) no. 2 TDDDG

6. Links to the Cita.Events platform

This website contains links to the Cita.Events platform (cita.events). For all data processing on the platform – in particular ticket purchases, organiser registration, payment processing via Stripe and check-in – the separate privacy policy of the platform applies exclusively, available at:

https://cita.events/datenschutz

7. Your rights

You have the following rights vis-à-vis Cita.Solutions UG:

Requests to exercise these rights: info@cita-solutions.de

8. Right to lodge a complaint with the supervisory authority

You have the right to lodge a complaint with a data protection supervisory authority at any time. The authority responsible for Cita.Solutions UG is:

9. Currency of this policy

We reserve the right to update this privacy policy in the event of changes to the website, the technologies used or the legal requirements.