In accordance with Art. 13 of the General Data Protection Regulation (GDPR), this privacy policy explains which personal data we process when you visit this website, for what purposes and on what legal basis. In case of doubt, the German version prevails.
1. Controller
SmartForge UG (haftungsbeschränkt)
Mühlmoosstr. 9, 83043 Bad Aibling, Germany
Represented by the managing director Christopher Niechziol
Phone: +49 8061 34829280
E-mail: web@smartforge.de
2. Summary
- This website uses no cookies and no analytics or tracking tools.
- No third-party content is loaded. Scripts and maps are served from our own server; no web fonts are loaded (your device's system font is used).
- We only process personal data where technically necessary to operate the website or when you contact us via the contact form or by e-mail.
3. Hosting and server log files
This website and our e-mail mailbox are hosted by STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany. The provider processes data solely on our behalf and according to our instructions (data processing agreement pursuant to Art. 28 GDPR), in data centres in Germany.
When you access the website, the web server automatically processes the following data transmitted by your browser:
- IP address of the requesting device
- date and time of access
- requested page or file, amount of data transferred and HTTP status code
- referrer URL (previously visited page), if transmitted
- browser and operating system used (user agent)
This data is required to deliver the website and to ensure secure and stable operation, in particular to detect and investigate attacks. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in a secure and functional website. IP addresses in the log files are anonymised by the host. Log files are deleted aftersix weeks at the latest; beyond that, only statistical evaluations without personal reference are kept.
4. Encryption
This website is delivered exclusively via an encrypted connection (HTTPS/TLS), so data you send to us cannot be read by third parties.
5. Contact form
If you contact us via the contact form, we process your first name, last name, e-mail address and message (required) as well as, optionally, your phone number, company name and the selected office. The data is transmitted to our server via an encrypted connection and forwarded from there as an e-mail to our mailbox. The content is not stored on the web server itself.
The purpose is to handle your enquiry. The legal basis is Art. 6(1)(b) GDPR where your enquiry relates to the conclusion or performance of a contract, and otherwise Art. 6(1)(f) GDPR (our legitimate interest in responding to enquiries). We delete your data once your enquiry has been fully dealt with, unless statutory retention obligations (e.g. under commercial or tax law) apply.
Spam protection
To protect against automated spam, we use the open-source solution ALTCHA, which runs entirely on our own server. Your browser solves a small computational task; no cookies are set, no fingerprinting takes place and no data is transferred to third parties. In addition, the form contains a field that is invisible to humans and is only filled in by bots.
To prevent mass submissions, we store an irreversible hash of your IP address for each form submission for a maximum of one hour. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in protecting our systems against abuse.
6. Contact by e-mail or phone
If you contact us by e-mail or phone, we process your details to handle your request. The legal bases and retention period are the same as for the contact form.
7. Links to other websites
Our website contains links to our partners' websites. Data is only transmitted to them when you click a link; the respective operator is responsible for any processing there.
8. Recipients and transfers to third countries
Apart from us, the only recipient of your data is our hosting and e-mail provider STRATO, acting as processor. Data is not transferred to countries outside the EU/EEA.
9. Your rights
You have the right at any time to
- access the data stored about you (Art. 15 GDPR),
- rectification of inaccurate data (Art. 16 GDPR),
- erasure (Art. 17 GDPR) and restriction of processing (Art. 18 GDPR),
- data portability (Art. 20 GDPR).
Right to object: Where we process data on the basis of Art. 6(1)(f) GDPR, you may object at any time on grounds relating to your particular situation (Art. 21 GDPR). We will then no longer process the data unless we can demonstrate compelling legitimate grounds.
To exercise your rights, an informal message to web@smartforge.de is sufficient.
You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is the Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Promenade 18, 91522 Ansbach, Germany,www.lda.bayern.de.
10. Obligation to provide data, automated decision-making
You are not legally or contractually obliged to provide us with personal data. However, without the required fields in the contact form we cannot process your enquiry this way. No automated decision-making, including profiling, takes place.
Last updated: October 2026