Legal

Privacy policy

We take protecting your personal data seriously. Below we explain processing when you visit https://www.sutex-software.de and use our contact form.

Controller

Controller within the meaning of the GDPR:

SuTEX Software
Wilhelm-Buß-Stiege 2
46395 Bocholt
Deutschland
Email: info@sutex-software.de
Phone: +49 (0) 2871 2046289

Scope

This policy applies to the information website of SuTEX Software at https://www.sutex-software.de. It does not cover processing in our software products or customer portals; separate information applies there.

Hosting and server log files

The site is operated on external hosting infrastructure. Personal data collected when you visit is processed on the host’s servers. Legal basis: Art. 6 (1) lit. f GDPR (legitimate interest in secure, efficient operation).

Log files may include IP address, date/time, requested URL, referrer, browser/OS, and HTTP status. Data is deleted subject to statutory retention. We have a data processing agreement with the host pursuant to Art. 28 GDPR.

TLS encryption

This site uses TLS (HTTPS). You can recognize an encrypted connection by the lock icon or “https://” in the address bar.

Contact form and email

When you contact us, we process the data you provide (e.g. name, email, phone, topic, message) to handle your request and any follow-up.

Legal basis: Art. 6 (1) lit. b GDPR if related to a contract or pre-contractual steps; otherwise Art. 6 (1) lit. f GDPR. Data is deleted once the request is completed and no retention duties apply, typically within three years.

To prevent abuse, we use a short-lived PHP session for form tokens and a simple math challenge; we also temporarily store IP address and timestamp in a local rate-limit file when the form is submitted (no permanent tracking). Legal basis: Art. 6 (1) lit. f GDPR.

Language selection (cookie)

If you choose a language manually, we set the cookie “sutex_hp_lang” (one year) to store your preference. Legal basis: Art. 6 (1) lit. f GDPR. Without the cookie, language may default from country headers provided by hosting; no lasting profiling is created.

No tracking tools

This website does not use analytics or marketing trackers (e.g. no Google Analytics, no Facebook pixel). No advertising profiles are created.

Disclosure of data

We disclose data only if required for contract performance, legally required, you have consented, or another Art. 6 GDPR basis applies. No transfers to countries outside the EU/EEA occur via this website unless explicitly stated in individual cases.

Obligation to provide data

Providing data in the contact form is not legally or contractually required; without necessary details we cannot respond to your request.

Automated decision-making

No automated decision-making including profiling under Art. 22 GDPR takes place.

Your rights

You have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), objection (Art. 21), and data portability (Art. 20) GDPR, within statutory limits.

If processing is based on Art. 6 (1) lit. f GDPR, you may object at any time for reasons arising from your particular situation.

Supervisory authority

You may lodge a complaint with a supervisory authority, e.g. the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (LDI NRW), Kavalleriestraße 22–24, 40213 Düsseldorf, Germany, www.ldi.nrw.de.

Updates

We update this policy when law, our website, or processing changes. The version published on this page applies.