Privacy policy

1Controller

Conto IT
Nico Jannis Contopidis
Diebenkornstraße 6, 25524 Itzehoe, Germany
Phone: 04821 8875040 · Email: info@conto-it.de

2General information on data processing

As a matter of principle, we process personal data only to the extent necessary to provide a functional website and our content. Processing takes place in accordance with the GDPR and the BDSG.

3Hosting and server log data

This website is hosted by Cloudflare (Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA). When the pages are accessed, technically necessary server log data (e.g. IP address, date and time, file accessed, user agent) is processed in order to ensure delivery of the website and IT security. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in secure operation). A data processing agreement is in place with Cloudflare; any transfer of data to third countries is safeguarded by the EU Standard Contractual Clauses.

4No cookies, only an anonymous visitor counter

We do not store any cookies on your device and use no third-party analytics or advertising tools. For this reason, there is no consent banner on this website: there is nothing to consent to.

Anonymous live visitor counter: In the bottom left corner the website shows how many visitors are here right now, which areas are being viewed and how many visitors there were in the last hour and today. For this, while the page is visible, your browser tells our server about every 20 seconds which area of the website you are viewing (for example “References”). To count visits, the server forms a shortened checksum from your IP address, your browser identifier and a random value that is newly generated every day and deleted after two days. Your IP address is not stored; neither your IP address nor your identity can be derived from the checksum, and visits on different days cannot be linked. Only this checksum, the area viewed and the time are stored, for no longer than 48 hours. Nothing is stored on or read from your device. The legal basis is our legitimate interest in simple, data-minimising audience measurement and its display (Art. 6(1)(f) GDPR). The data is processed by Cloudflare as our processor (see section 3).

Storage in your browser (no cookies): So that a running website analysis continues after reloading the page, your browser keeps it until you close the tab (sessionStorage). We only keep your finished analyses if you explicitly choose “Save on this device”: your browser then stores the result, the date and reduced screenshots in its local storage (localStorage) so that you can view and compare them in your history on your next visit without running the analysis again. This data stays on your device and is not transmitted to us. You can delete it at any time with “Delete history on this device” or in your browser settings. The legal basis is Section 25(2) no. 2 TDDDG, as storage is strictly necessary for the history you have explicitly requested.

Anonymous visitor statistics: To see how visitors find our website, your browser reports to our server which page you are viewing, which website you came from (only its address, for example google.de) and the language of your browser, and when you leave, how long the page was open. The server adds the country (derived from the IP address) and the device type (computer, tablet or phone). To count visits, it creates a shortened checksum from your IP address, your browser identifier and a random value that is generated anew every day and deleted after two days. Your IP address is not stored; neither your IP address nor your identity can be derived from the checksum, and visits on different days cannot be linked. Nothing is stored on or read from your device. If “Do Not Track” is enabled in your browser, no counting takes place. The data is kept for a maximum of 13 months. The legal basis is our legitimate interest in data-minimising reach measurement (Art. 6(1)(f) GDPR). Cloudflare processes the data as our processor (see section 3).

5Fonts, images and videos

All fonts are loaded locally from our server. Your browser does not connect to any third-party servers for this purpose and does not transmit any data to them. Images and videos are also stored on our own server.

6Contacting us and the enquiry form

Using the form “Show us your current website”, you can send us the address of your website, your email address and your name. These details are stored as a case in our ticket system so that we can process your enquiry and reply to you.

Analysis of your current website: If you entered the address of your current website in the enquiry form or when redeeming a promotional code, we automatically check its publicly accessible home page: the protection of the domain, the structure and code of the page, screenshots on a computer and a phone, and an assessment by an AI service. Only the website address and the publicly visible content of that website are processed — your name, email address and phone number are not passed on for this. We show you the result straight away and add it to your enquiry. The check runs via conto-it.de, our own service.

If you contact us by email or phone, we likewise process your details in order to handle your enquiry. For appointment booking, we refer you to our main website conto-it.de; the privacy policy published there applies.

The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures) or Art. 6(1)(f) GDPR. The data is deleted as soon as it is no longer required for the purpose and no statutory retention periods prevent its deletion.

7Free security check

In the “Free security check” section, you can have a domain checked. To do so, your browser sends the domain you enter to the Conto IT check on conto-it.de. Only publicly available information about this domain is checked, such as entries relating to email protection and the elements embedded in the home page. The domain checked, the result and the time of the check are stored in order to evaluate the service. Your IP address is used only briefly to prevent misuse through mass queries and is discarded after one hour at the latest. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in offering the check and in protecting it against misuse. The controller is Conto IT as named in section 1.

Meeting about the result: We go through the individual results of the security check with you in person. “Choose a time” takes you to appointment booking on conto-it.de; the domain you checked is passed on so that the result can be matched to your appointment. The privacy policy of conto-it.de applies to the booking.

Bot protection: When you use the security check or a form, your browser loads Cloudflare’s “Turnstile” service (Cloudflare, Inc., San Francisco, USA). It checks invisibly whether a human is using the page and protects our checks against automated misuse. Technical characteristics of your browser and your IP address are transmitted to Cloudflare; no cookies are set to recognise you. The legal basis is our legitimate interest in preventing misuse (Art. 6(1)(f) GDPR). Cloudflare is certified under the EU-US Data Privacy Framework.

8Storage period

Server log data is stored only for as long as is necessary for secure operation and is then deleted or truncated.

9Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21 GDPR).

You also have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR). The competent authority is the Unabhängiges Landeszentrum für Datenschutz Schleswig-Holstein (ULD), Holstenstraße 98, 24103 Kiel.

10Changes to this policy

This privacy policy is adapted as necessary to reflect changes in the law or in our processing activities.