Privacy Policy

Information about data protection

1. General information

The protection of your personal data is important to me. I treat your personal data confidentially and in accordance with the statutory data protection regulations (GDPR, BDSG) and this privacy policy.

2. Controller

Wigandt Technology
Johannes Wigandt
St. Georgenstr. 17
56751 Polch
Germany

3. Legal basis for processing

The processing of personal data is carried out in accordance with the General Data Protection Regulation (GDPR). Depending on the type of request, I rely on the following legal bases:

  • Art. 6 para. 1 (b) GDPR (performance of a contract and pre-contractual measures), e.g. for project enquiries
  • Art. 6 para. 1 (f) GDPR (legitimate interests), e.g. for the technical provision of the website or server logs
  • Art. 6 para. 1 (c) GDPR (legal obligation), e.g. for tax and commercial retention periods
  • Art. 6 para. 1 (a) GDPR (consent), if I obtain it in specific cases

4. Hosting & infrastructure

This website is operated on servers located in the European Union.
I have concluded a data processing agreement with the hosting provider to ensure that personal data is processed in accordance with the GDPR.

5. Server log files

When you visit the website, technical data is automatically processed by the hosting provider. This includes:

  • IP address
  • Date and time of the request
  • Requested URL
  • Referrer URL
  • Browser type, browser version and operating system

The data is stored for security reasons (e.g. to investigate misuse or fraud) for a maximum of 7 days and then automatically deleted. The legal basis is my legitimate interest pursuant to Art. 6 para. 1 (f) GDPR.

6. Contacting me

If you contact me by email, phone or via a form, I process your details (name, contact information, content of the request) to respond to your inquiry.
The data is used solely for this purpose and deleted once the enquiry has been resolved or after statutory retention periods have expired.
The legal basis is Art. 6 para. 1 (b) GDPR (pre-contractual measures) or Art. 6 para. 1 (f) GDPR (legitimate interest in efficient communication).

7. Project-related data processing

In the context of projects I process additional personal data (e.g. contact persons, team accounts, billing data). Such data is only collected if it is necessary for project delivery or invoicing.
Storage takes place for the duration of the collaboration and thereafter based on statutory retention obligations (e.g. 6 or 10 years pursuant to § 147 AO and § 257 HGB).

8. Data processing agreements & confidentiality

Whenever client data is processed, it is solely based on the contractual scope.
All information is treated confidentially and, where necessary, covered by data processing agreements. Data is only shared with third parties if required to provide the service (e.g. hosting, monitoring, collaboration tools) and a legal basis applies.

9. Cookies & tracking

This website only uses cookies and similar technologies that are technically necessary for operations (e.g. session cookies or security functions).
I do not currently use tracking, advertising or analytics cookies. Should this change, I will update this privacy policy and request consent where needed.

10. Storage period

Personal data is stored only for as long as required for the respective purpose or for as long as statutory retention periods apply. Once the purpose ceases to apply or retention periods expire, the data is deleted or anonymised.

11. Recipients & data transfers

Data is not transferred to third countries outside the EU/EEA. If this is necessary in individual cases, the transfer will only take place under the conditions of Art. 44 et seq. GDPR (e.g. EU Standard Contractual Clauses).

12. Your rights

You have the right at any time to:

  • request access to the data stored about you (Art. 15 GDPR)
  • request rectification of inaccurate data (Art. 16 GDPR)
  • request erasure or restriction of processing (Art. 17/18 GDPR)
  • object to processing (Art. 21 GDPR)
  • request data portability (Art. 20 GDPR)
  • withdraw consent at any time (Art. 7 para. 3 GDPR)
  • lodge a complaint with a supervisory authority (Art. 77 GDPR)

The competent supervisory authority for me is the State Commissioner for Data Protection and Freedom of Information of Rhineland-Palatinate.

13. Data security

I use state-of-the-art technical and organisational measures to protect your data against loss, manipulation or unauthorised access. This includes encrypted connections (HTTPS/TLS), access controls, backups and granular permission concepts.

14. Updates to this privacy policy

I update this privacy policy whenever new legal requirements or technical changes make this necessary. The current version is always available at https://wigandt.tech/en/privacy-policy.

Status: January 2025