Privacy Policy
1. Controller
Calidat GmbH
Moltkestraße 137
50674 Cologne
Germany
E-Mail: contact@calidat.com
Website: www.calidat.com
If you have any questions about data protection, please contact us directly at the email address given above.
2. General Information
2.1 Scope of Data Processing
We generally process our users' personal data only to the extent necessary to provide a functioning website and our content and services. Processing generally takes place only with consent or where otherwise permitted by law.
2.2 Legal Basis
We base the processing of personal data on the following legal grounds under the GDPR:
- Art. 6(1)(a) GDPR – Consent of the data subject
- Art. 6(1)(b) GDPR – Performance of a contract or pre-contractual measures
- Art. 6(1)(c) GDPR – Compliance with a legal obligation
- Art. 6(1)(f) GDPR – Legitimate interests of the controller
2.3 Data Deletion and Retention Period
Personal data is deleted or blocked as soon as the purpose of storage no longer applies and no statutory retention obligations preclude deletion. Commercial and tax law retention periods (generally 6–10 years) remain unaffected.
2.4 Data Security
For security reasons, this website uses SSL/TLS encryption. You can recognize an encrypted connection by the fact that the browser's address bar changes from "http://" to "https://".
3. Server Log Files
When you visit our website, your browser automatically transmits technical information to our web server. The following data is collected and stored in server log files:
- IP address (anonymized after 24 hours)
- Date and time of access
- Browser type and version, operating system
- Referrer URL (previously visited page)
- Page accessed and HTTP status code
Legal basis: Art. 6(1)(f) GDPR. Our legitimate interest lies in the technically error-free presentation and optimization of the website as well as IT security.
Storage period: 7 days, after which it is automatically deleted.
4. Cookies and Consent Management
Our website uses cookies – small text files that are stored on your device. We distinguish between:
- Technically necessary cookies: Enable the basic functions of the website (e.g. language, session). Legal basis: Art. 6(1)(f) GDPR.
- Analytics and marketing cookies: Are only set with your express consent. Legal basis: Art. 6(1)(a) GDPR.
When you first visit our website, a consent banner appears, allowing you to give or refuse your consent to optional cookies. You can revoke your consent at any time with future effect by reopening the cookie settings at the bottom of the page.
5. Google Analytics 4
Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (for EU/EEA users). Parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
We use Google Analytics 4 (GA4) to statistically evaluate and improve the use of our website. GA4 uses cookies to analyze user behavior (pages visited, time spent, session data). The data generated in this way is transmitted to Google servers and processed there.
We have activated IP anonymization and reduced data storage to a minimum. Advertising features (e.g. remarketing, demographic reports) are disabled. We have a data processing agreement with Google in accordance with Art. 28 GDPR.
Transfer to third countries: Data may be transferred to Google LLC servers in the USA. Google LLC is certified under the EU-US Data Privacy Framework (adequacy decision of the EU Commission dated 10 July 2023). In addition, we conclude Standard Contractual Clauses (SCCs) in accordance with Art. 46(2)(c) GDPR.
Legal basis: Art. 6(1)(a) GDPR (your consent via the consent banner).
Storage period: User data is automatically deleted in GA4 after 14 months.
Objection / Opt-out: You can prevent data collection by GA4 by revoking your consent in the consent banner or by installing Google's browser add-on: tools.google.com/dlpage/gaoptout.
Google Privacy Policy: policies.google.com/privacy
6. Contact
If you contact us via the contact form or email, the data you provide (e.g. name, email address, message content) will be stored by us for the purpose of processing your inquiry and in case of follow-up questions.
Data processed: Name, email address, subject, message content, timestamp.
Legal basis: Art. 6(1)(b) GDPR (processing of a pre-contractual inquiry) or Art. 6(1)(f) GDPR (legitimate interest in responding to customer inquiries).
Storage period: Once your inquiry has been fully processed, the data will be deleted unless statutory retention obligations apply (generally after 3 years).
We do not disclose your data to third parties without your consent.
7. Newsletter
If you subscribe to our newsletter, we use your data exclusively to send you the newsletter. Registration takes place using the double opt-in procedure: after registering, you will receive a confirmation email in which you must confirm your consent by clicking a link. Only then will your email address be activated for sending.
Data processed: Email address, name if applicable, time of consent, IP address (as proof of consent).
Legal basis: Art. 6(1)(a) GDPR (consent).
Storage period: Until you revoke your consent. Proof of consent is retained for a correspondingly longer period.
Revocation: You can unsubscribe from the newsletter at any time by clicking the unsubscribe link in each newsletter email or by notifying us at contact@calidat.com . Your revocation does not affect the lawfulness of the processing carried out up to that point.
If we use a service provider to send the newsletter, we conclude a data processing agreement with them in accordance with Art. 28 GDPR. We will provide further details upon request.
8. Your Rights as a Data Subject
You have the following rights with respect to the personal data concerning you:
Right of access (Art. 15 GDPR): You can request information about what data we process about you, for what purpose, and to whom we may disclose it.
Right to rectification (Art. 16 GDPR): You have the right to have inaccurate or incomplete data corrected.
Right to erasure (Art. 17 GDPR): You can request the deletion of your data provided there is no longer a reason for processing and no statutory retention obligations apply.
Right to restriction of processing (Art. 18 GDPR): Under certain conditions, you can request that the processing of your data be restricted.
Right to data portability (Art. 20 GDPR): You have the right to receive your data in a structured, commonly used, machine-readable format.
Right to object (Art. 21 GDPR): You can object at any time, on grounds relating to your particular situation, to the processing of your data based on Art. 6(1)(f) GDPR.
Right of revocation (Art. 7(3) GDPR): If you have given consent, you can revoke it at any time with future effect, without affecting the lawfulness of the processing carried out until the revocation.
8.1 Right to Lodge a Complaint with a Supervisory Authority
You have the right to lodge a complaint with a data protection supervisory authority regarding the processing of your personal data. The supervisory authority responsible for Calidat GmbH is:
State Commissioner for Data Protection and Freedom of Information NRW (LfDI NRW)
Kavalleriestraße 2–4
40213 Düsseldorf
Phone: +49 211 38424-0
Email: poststelle@ldi.nrw.de
Website: www.ldi.nrw.de
8.2 Contact for Data Protection Inquiries
To exercise your rights, please contact: contact@calidat.com · Calidat GmbH · Moltkestraße 137 · 50674 Cologne
9. Links to External Websites
Our website contains links to external third-party websites. We have no influence over the content of these pages and therefore assume no liability for their data protection practices. The respective operator is always responsible for the content and data protection compliance of the linked pages.
10. Currency and Changes to this Statement
This privacy policy is current as of March 2026. We reserve the right to update it as needed, for example due to changes in the legal situation or the services we use. The current version can always be found on this website.
Please note: This privacy policy was prepared carefully but does not replace individual legal advice. If you have any legal uncertainties, we recommend consulting a data protection lawyer.