Privacy Policy
In line with the EU General Data Protection Regulation (GDPR) and the German BDSG.
1. Controller
The controller responsible for the processing of personal data on this website is:
- Provider
- iProSoft — sole proprietor Nic Mewes
- Address
- Dörpfeldstrasse 25
22609 Hamburg, Germany - Phone
- +49 170 8060 953
- contact@iprosoft.de
2. General
We process personal data only on the basis of the GDPR and the BDSG. This policy describes the type, scope and purpose of processing as well as your rights. We follow the principle of data minimisation: no trackers, no advertising cookies, no third-party scripts without a clear functional purpose.
3. Server logs (hosting)
When you visit this website, our hosting provider records technically necessary data in server logs:
- IP address (truncated after 7 days)
- date and time of access
- requested URL and HTTP status code
- referrer URL
- user agent (browser identifier)
Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in operating a stable and secure website). Retention: maximum 30 days, then automatic deletion.
Hosting provider: Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. A data processing agreement under Art. 28 GDPR is in place. Server location: Germany.
4. Contact chat („Lead Assistant")
The home page offers an AI-assisted chat for structured first contact. Any information you enter there (name, email, request, time frame, budget) is processed to handle your enquiry. Legal basis: Art. 6 (1) (b) GDPR (pre-contractual measures) or (f) (legitimate interest in handling enquiries).
Processors used:
- Anthropic PBC, 548 Market St PMB 90375, San Francisco CA 94104, USA — processes chat messages to generate the assistant's responses. Transfer to the US on the basis of the EU Standard Contractual Clauses (SCC) pursuant to Commission Decision (EU) 2021/914. By default Anthropic does not store API inputs for training its models.
- Resend, Inc., 2261 Market Street #4667, San Francisco CA 94114, USA — sends the final summary of your enquiry as an email to us. Transfer also on the basis of the SCC.
For technical session attribution we set a strictly necessary session cookie
(iprosoft_sid, HttpOnly, SameSite=Lax, path /api). It
contains only a random session ID, expires after 60 minutes and is deleted server-side.
No consent required (strictly necessary, § 25 (2) (2) TTDSG).
Your data is only transmitted to us by email when you actively confirm the Send button. Retention on our side: as long as needed to process your enquiry, at most until any follow-up communication is complete.
5. Contact by email or phone
If you contact us by email or phone, the information you provide is stored to process the enquiry and for any follow-up questions. Legal basis: Art. 6 (1) (b) or (f) GDPR. Data is deleted as soon as it is no longer required for the purpose, at the latest after statutory retention obligations expire.
6. Fonts
This site uses the IBM Plex typeface, self-hosted from our own server. No data is transmitted to third parties for font loading.
7. Cookies — overview
iprosoft_sid· session cookie for the lead chat · HttpOnly · lifetime 60 min · strictly necessary
No analytics, marketing or tracking cookies are used.
8. Your rights
You have the right at any time to:
- access (Art. 15 GDPR)
- rectification (Art. 16 GDPR)
- erasure (Art. 17 GDPR)
- restriction of processing (Art. 18 GDPR)
- data portability (Art. 20 GDPR)
- object to processing (Art. 21 GDPR)
- withdraw consent with effect for the future (Art. 7 (3) GDPR)
Please direct requests to contact@iprosoft.de.
9. Right to lodge a complaint
You have the right to lodge a complaint with a supervisory authority — the competent authority is the Hamburg Commissioner for Data Protection and Freedom of Information, Ludwig-Erhard-Straße 22, 20459 Hamburg, datenschutz-hamburg.de.
10. Currency
We adapt this policy when our processing or the legal situation changes. Status: May 2026.