Legal

Privacy policy

This is a courtesy translation of our German Datenschutzerklärung. In the event of any discrepancy, the German version is authoritative.

This privacy policy tells you about the nature, scope and purpose of the processing of personal data when you visit this website, ibx-company.de, and about your rights under the General Data Protection Regulation (GDPR).

Controller

Michel Winkler
Sole trader, trading under the name „ibx“ (ibx company)
Laher Kirchweg 24
30659 Hannover
Germany
Email: info@ibx-company.de

No data protection officer has been appointed, as the legal conditions requiring one are not met.

Legal bases for processing

We process personal data on the basis of your consent (Art. 6 (1) (a) GDPR), for the performance of a contract or pre-contractual measures (Art. 6 (1) (b) GDPR), to comply with legal obligations (Art. 6 (1) (c) GDPR) and to protect legitimate interests (Art. 6 (1) (f) GDPR). The basis that applies in each case is stated with the individual processing activities below.

Hosting

This website is hosted by Hostinger International Ltd. The host processes the data arising through the website on our behalf (in particular access and server log data) on servers within the European Union. The basis for this is a data processing agreement pursuant to Art. 28 GDPR. The legal basis is our legitimate interest in secure and stable operation (Art. 6 (1) (f) GDPR).

Server log files

When the website is accessed, information transmitted by your browser is recorded automatically: IP address, date and time of access, the page or file requested, the volume of data transferred, the referrer URL, and your browser type and operating system. This data serves the technical operation, security and stability of the website and is stored for a limited period only. The legal basis is Art. 6 (1) (f) GDPR.

Encryption

The website uses TLS encryption (https) to protect the transmission of your data.

Cookies and local storage

No tracking, analytics or marketing cookies are used. WordPress sets technically necessary cookies only if you log in or leave a comment. The spam protection in use is configured without cookies. The website also stores a few items locally in your browser without transmitting them to us: your settings in the accessibility widget, the fact that you closed the newsletter prompt, and your scroll position when reloading. This storage serves only functions you triggered yourself and is strictly necessary for them. There is no analysis and no recognition across websites. A consent banner is therefore not required. The legal basis for necessary cookies and for local storage is section 25 (2) no. 2 TDDDG in conjunction with Art. 6 (1) (f) GDPR.

Contact form and enquiries

If you use the contact form, we process the details you provide: company, name, email address, telephone number, street and house number, postcode and town, the service selected and your message. These details are used to deal with your enquiry and for any follow-up communication. In order to process and track it, the enquiry is stored in the website database and additionally sent to us by email via the host’s mail server. You will receive a confirmation at the email address you gave. The legal basis is Art. 6 (1) (b) GDPR (pre-contractual measures) together with your consent under Art. 6 (1) (a) GDPR. The data is deleted as soon as it is no longer required for the purpose and no statutory retention periods prevent deletion.

If you subscribe to the newsletter, we process your email address together with the time and IP address of the sign-up and your consent. The data is used solely to send the newsletter. The legal basis is your consent under Art. 6 (1) (a) GDPR. You can unsubscribe at any time and withdraw your consent with effect for the future, for example by email to info@ibx-company.de.

Comments

For comments on the blog, the comment text, the name given, the email address, the IP address, the browser type and the time are stored. Comments are submitted after express consent to this privacy policy. The legal basis is Art. 6 (1) (a) GDPR. Comments and their metadata are stored until the comment is deleted, also so that follow-up comments can be attributed.

Gravatar

When you comment, an anonymised check value (hash) derived from your email address may be transmitted to the Gravatar service operated by Automattic Inc., USA, in order to display a profile picture. Data may be transferred to the USA in the process. The legal basis is Art. 6 (1) (f) GDPR.

Spam protection (Antispam Bee)

We use Antispam Bee to protect forms and comments against spam. The check runs entirely on our own server at the host named above, within the European Union. No cookies are set and no data is passed to third parties or to a third country. What is checked is the content entered and the IP address, including a comparison against entries already marked as spam in our own database. Country checking, Gravatar matching and translation services are switched off. The legal basis is our legitimate interest in preventing spam and misuse (Art. 6 (1) (f) GDPR).

Audience measurement

We use our own data-minimising audience measurement to evaluate use of this website statistically. It runs exclusively on our own server at the host named above, within the European Union. No cookies are set and no data is passed to third parties or to a third country. No external service such as Jetpack or Google Analytics is used.

When a page is viewed we store the time, the page requested and, where available, the host name of the referring website without the full address. Your IP address is not stored. To distinguish visits roughly, we form a pseudonymous check value that changes daily and therefore allows neither recognition across several days nor the creation of profiles. The data collected in this way does not allow any conclusions to be drawn about you personally. It is deleted automatically after 180 days at the latest. The legal basis is our legitimate interest in a data-minimising statistical evaluation of website use (Art. 6 (1) (f) GDPR). You may object to this processing under Art. 21 GDPR, for example by email to info@ibx-company.de.

Image optimisation

To reduce loading times, images on the website are optimised using the ShortPixel service. Image files from the website are transferred to the provider’s servers in the process. As a rule, no personal data of visitors is affected. The legal basis is Art. 6 (1) (f) GDPR.

Caching

Server-side caching (LiteSpeed Cache) is used to speed up delivery. Content is not delivered through an external content delivery network, and no personal data is passed to third parties as a result.

Fonts

The fonts used are served locally from our own server. There is no connection to Google servers, and your IP address is not transmitted to third parties in order to display fonts.

Recipients and transfers to third countries

Recipients of personal data are the hosting provider and the services named above for optimisation. Spam protection runs without any transfer to third parties. Where data is transferred to the USA in connection with the comment function (Gravatar), this takes place on the basis of appropriate safeguards pursuant to Art. 46 GDPR or, where applicable, pursuant to Art. 49 GDPR. No transfer to any other third party takes place unless we are legally obliged to do so.

Storage period

We store personal data only for as long as it is required for the respective purposes or as statutory retention periods provide. After that the data is deleted or blocked.

Your rights

You have the right of access (Art. 15 GDPR), to rectification (Art. 16 GDPR), to erasure (Art. 17 GDPR), to restriction of processing (Art. 18 GDPR), to data portability (Art. 20 GDPR) and the right to object to processing based on legitimate interests (Art. 21 GDPR). You may withdraw consent you have given at any time with effect for the future (Art. 7 (3) GDPR). Please contact info@ibx-company.de to do so.

Right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint with a data protection supervisory authority. The authority responsible is in particular the State Commissioner for Data Protection of Lower Saxony (Landesbeauftragte für den Datenschutz Niedersachsen), Prinzenstraße 5, 30159 Hannover, Germany.

No automated decision-making

No solely automated decision-making, including profiling, within the meaning of Art. 22 GDPR takes place.

Obligation to provide data

Where you contact us or submit an enquiry, providing the data marked as mandatory is necessary in order for us to deal with your request. Without those details we cannot process the enquiry.

Currency of this policy

This privacy policy is updated when processing activities or the legal position change. Last updated: August 2026.