Privacy Policy

Last updated: 29 May 2026

Controller

Cancilico GmbH, Blasewitzer Straße 9, 01307 Dresden, Germany
Email: [email protected]

Website hosting and server logs

When you visit this website, technical access data may be processed, including IP address, date and time of access, requested URL, referrer, browser, operating system, and HTTP status. We process this data to deliver the website, maintain security, diagnose errors, and prevent misuse. Legal basis: Art. 6(1)(f) GDPR.

Contact form and email

If you contact us, we process the information you provide, such as name, email address, organization, subject, and message. We use this data to respond to your inquiry and handle related follow-up. Legal basis: Art. 6(1)(b) GDPR where the inquiry relates to a contract or pre-contractual communication, otherwise Art. 6(1)(f) GDPR.

Consent management

We use a consent manager to record and respect your privacy choices. This may involve storing consent status, timestamp, device/browser information, and selected purposes. Legal basis: Art. 6(1)(c) GDPR and Art. 6(1)(f) GDPR.

Analytics

We use Umami analytics only after consent. Analytics may process usage events, visited pages, referrer, approximate device/browser information, and truncated or otherwise minimized network information depending on configuration. Legal basis: your consent under Art. 6(1)(a) GDPR. You may withdraw consent at any time via Privacy settings.

Recipients and processors

We may use service providers for hosting, form handling, consent management, and analytics. These providers process data only as necessary to provide their services. Where data is transferred outside the EU/EEA, we rely on appropriate safeguards such as EU standard contractual clauses where required.

Retention

We retain personal data only as long as necessary for the purposes described above or as required by law. Contact inquiries are kept for the duration needed to respond and document the communication. Server logs and consent records are retained for limited operational and compliance periods.

Your rights

You have the right to request access, rectification, erasure, restriction of processing, data portability, and to object to processing based on legitimate interests. Where processing is based on consent, you may withdraw consent at any time with effect for the future.

Complaint

You may lodge a complaint with a data protection supervisory authority. For Saxony: Sächsische Datenschutz- und Transparenzbeauftragte, Maternistraße 17, 01067 Dresden, email: [email protected].

Contact

For privacy requests, contact [email protected].