Privacy Policy

1. Controller

Plan&Code Automation UG (haftungsbeschränkt)
Traarer Str. 154a
47829 Krefeld
Germany
Managing Director: Frank Matthey
Email: info@planundcode.de
Phone: +49 2151 9173940

2. General Information on Data Processing

The protection of your personal data is important to us. Personal data is processed on this website only to the extent necessary and in accordance with applicable data protection laws.

3. Access Data / Server Log Files

When visiting this website, certain technical data may be processed automatically. This includes:

• IP address
• Date and time of access
• Browser type
• Operating system
• Referrer URL
• Pages accessed

These data are processed to ensure technical operation, system security, stability and error analysis.

4. Contact Requests

If you contact us via email or a contact form, the information you provide will be processed in order to handle your request and for possible follow-up communication.

This may include your name, email address, company information and the content of your message.

4a. Product Tester Applications

If you apply as a product tester, we process your name, email address, selected product, experience, availability and voluntary motivation. Processing is based on your consent for selecting, contacting and organising potential product tests. To prevent misuse, the IP address is stored only as a non-reversible hash. Your application will be deleted when it is no longer needed for tester selection or when you withdraw consent, unless legal obligations require continued retention.

4b. Login and Customer Account

When you register a customer account, we process the account type, name, email address, postal address and mobile number and, for business customers, the company name. These details are used to create and administer the protected customer area, assign product and support services and communicate in connection with the contract. The password is stored exclusively as a secure hash.

When you log in, we process the email address, the result of the authentication attempt and technically necessary session information. A secure session cookie is used to keep you logged in and to protect authenticated requests. The cookie is not used for advertising or analytics. Using “LogOut” terminates the server-side session; the session cookie then becomes invalid. Inactive sessions expire automatically in accordance with the server configuration.

4c. Newsletter and Abuse Prevention

For newsletter subscriptions, we process your email address, selected language, time of consent and a non-reversible hash of the IP address for verification and abuse prevention. The subscription becomes active only after confirmation by email. Registration, sign-in and newsletter subscription use a technically necessary, locally generated CAPTCHA. The CAPTCHA code is stored temporarily in the session and discarded after verification or after no more than ten minutes.

5. Purpose of Data Processing

Personal data may be processed for the following purposes:

• Providing and operating the website
• Processing contact inquiries
• Communication with customers and business partners
• IT security and prevention of misuse
• Compliance with legal obligations

6. Legal Basis

Where applicable, data processing is carried out on the basis of relevant data protection regulations, for example to perform pre-contractual measures, to fulfil legal obligations, based on legitimate interests, or on the basis of consent.

7. Data Retention

Personal data is stored only for as long as necessary to fulfil the respective purposes or as required by legal retention obligations.

After that, the data will be deleted or blocked.

8. Data Sharing

Personal data will only be shared with third parties if this is necessary for contractual performance, technical operation of the website, legal obligations or based on explicit consent.

9. Hosting and Technical Service Providers

External hosting or IT service providers may be used to operate this website. If such providers have access to personal data, this will only occur to the extent necessary and on the basis of appropriate contractual agreements.

10. Consent-Based Web Analytics

If you expressly agree through the notice shown on your first visit, we use self-hosted web analytics. It records pages viewed, time, language, referring website, device type and, where present in the accessed URL, campaign parameters (UTM source, medium, campaign, content and search term). A visitor hash that changes daily is generated from the IP address, browser identifier and a secret salt. The IP address itself is not stored in the analytics database. Session and consent identifiers are randomly generated values.

If our hosting infrastructure supplies coarse location information such as a country code, this may be stored with the page view. A company association is stored only if a separately assessed service or an upstream in-house lookup supplies a company name and domain in the future. The analytics do not identify a specific natural person. No external company lookup is currently active.

Processing takes place solely on the basis of your consent. Analytics events are deleted after 180 days. Evidence of your decision is stored for up to three years. The website operator is generally the recipient. Data is stored centrally in the group MariaDB and attributed to the originating website. Data is not transferred to an external analytics provider.

11. Local Storage, Necessary Session Cookie and Withdrawal

Your analytics decision and a random consent identifier are stored in your browser's local storage. An analytics session identifier is created in session storage only after consent and is discarded when the browser is closed. Independently of analytics consent, the technically necessary login session cookie described above is set only when required for account functions. You can withdraw your analytics consent at any time with future effect through “Privacy settings” in the page footer. Processing carried out before withdrawal remains lawful.

12. Your Rights

Under applicable data protection laws, you have the following rights:

• Right of access to your personal data
• Right to rectification of incorrect data
• Right to erasure of personal data
• Right to restriction of processing
• Right to object to processing
• Right to data portability (where applicable)

13. Right to Lodge a Complaint

You have the right to lodge a complaint with a competent data protection supervisory authority if you believe that the processing of your personal data violates applicable data protection regulations.

14. Changes to this Privacy Policy

We reserve the right to adapt this privacy policy if technical, legal or organisational changes require it.