arocon
Language: Deutsch

Privacy policy

Controller

arocom GmbH
Felix-Dahn-Straße 92
70597 Stuttgart · Germany
Contact: see Imprint.

Hosting & server logs

This site is operated on our own servers in Germany. The web server writes technical access logs (date, time, URL, HTTP status code, shortened IP address, user agent). Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure operation of the website). Purpose: operation, stability, attack prevention. Logs are deleted after at most 14 days.

Contact form & email

When you use the contact form, we process the data you provide (role, organization, your question, email address) solely to respond to your inquiry. Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures) and (f) (legitimate interest in responding). We do not transfer this data to third parties beyond what is necessary for the response.

Outbound email is sent through our corporate mail provider. Inquiries are stored as long as necessary to respond and for any follow-up conversations, at most 24 months.

Analytics (Umami, self-hosted)

This site uses Umami in a self-hosted instance at analytics.arocon.eu for reach measurement. No cookies are set and no personal data is transferred to third parties. IP addresses are not stored; a daily-rotating anonymous visitor hash is derived from user-agent and salt instead. Do-Not-Track is honored. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in minimal reach measurement).

Calendly (external scheduling tool)

For appointment booking we link to Calendly. The moment you click a booking link you leave this site and Calendly LLC's privacy policy applies. Calendly is not embedded inside our pages — no data is transferred to Calendly unless you click the link.

Purpose and legal basis

Processing takes place to respond to your inquiry (Art. 6(1)(b) and (f) GDPR) and to operate the site securely. No transfer to third parties beyond what is necessary to respond.

Retention

Server logs: max. 14 days. Inquiries and email: as long as necessary to respond and follow up, at most 24 months. Analytics data: aggregated, without personal reference.

Your rights

You have the right to information, correction, deletion, restriction of processing, data portability, and objection. Contact the controller for this (see Imprint). Independently, you have the right to lodge a complaint with the competent supervisory authority; for us this is the State Commissioner for Data Protection and Freedom of Information Baden-Württemberg.

Cookies and local storage

This site uses no third-party marketing cookies and no personalised tracking. The reach measurement in use (Umami) is cookieless. We use local browser storage (localStorage) and, in one specific case, a first-party cookie:

Essential

Legal bases: § 25(2) no. 2 TDDDG (storage exception for strictly necessary functions) in conjunction with Art. 6(1)(f) GDPR (legitimate interest in technically sound site operation).

  • arocon.theme — your light/dark mode choice. Persisted indefinitely in localStorage.
  • arocon.cookie.choice — confirmation of the optional notice banner, where activated. Persisted indefinitely in localStorage.
  • arocon.internal — internal-staff marker that excludes our team's visits from reach measurement. Set only when the site is opened with the URL parameter ?internal. Persisted indefinitely in localStorage.

Campaign attribution

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in measuring the effectiveness of our own marketing content and channels). The cookie is set only when you open the site with UTM parameters in the URL — i.e. only when you actively followed one of our campaign links. A direct visit, or a visit without UTM parameters, sets no cookie.

  • arocon.utm — stores the UTM parameters present in the request URL (utm_source, utm_medium, utm_campaign, utm_content, utm_term), the first-seen timestamp and the landing path. Lifetime: 90 days, SameSite=Lax, first-party only. Combined with anonymous Umami reach-measurement events to evaluate marketing-channel effectiveness in aggregate.

Manual deletion: You can delete localStorage and cookie data at any time via your browser's developer tools. Deleting the essential entries has no effect on the basic functionality of the site.

Right to object: You may object at any time, under Art. 21 GDPR, to processing of UTM attribution data based on Art. 6(1)(f) GDPR (see "Your rights"). In addition, our reach measurement honors your browser's Do-Not-Track header; when active, no events are collected and the UTM cookie is not evaluated.