What stays with you. What you send.

Who is responsible

We are the controller for personal data processed through this website.

When you visit the site

The site is hosted by Netlify, Inc. When your browser requests a page, Netlify processes technical request data such as your IP address, date and time, requested page, browser information, and error or security data. This is needed to deliver and protect the site.

The legal basis is Article 6(1)(f) GDPR. Our legitimate interests are secure, reliable website operation and the investigation of faults or abuse.

Workflow Deletion tool

Your workflow labels, screening answers, assumptions, time figures, and cost figures are calculated locally in your browser. They are not included in analytics and are not submitted to us. They may remain in the open page until you close or refresh it.

If you choose “Prepare a sanitized summary,” the tool shows the exact non-numeric fields first. Nothing is transmitted automatically. The summary is sent only if you then open your email application and choose to send the email.

Email

If you email us, we receive your address, message, the optional sanitized summary, and related correspondence. The generated summary excludes workflow names, numeric inputs, and financial inputs.

We use this information to assess whether a business conversation is useful, respond to you, and take steps you request before a possible contract. The legal basis is Article 6(1)(b) GDPR where you ask us to take pre-contractual steps. For general business enquiries, it is Article 6(1)(f) GDPR, based on our legitimate interest in responding to relevant enquiries and operating our business.

Privacy-focused analytics

On the production site, we use Plausible Analytics, provided by Plausible Insights OÜ, to understand which pages and anonymous site paths are useful. Preview and local versions do not load Plausible.

Plausible receives a normal web request, including an IP address and user-agent string, but says it does not store either. It creates a daily identifier that changes every 24 hours. The service uses no cookies or persistent browser storage, and its visitor data is hosted in the European Union.

We record page views. We do not send workflow labels, screening answers, numeric inputs, financial inputs, email addresses, or organization names to Plausible.

The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is measuring the usefulness of this business website with minimal data. The current implementation does not place non-essential cookies or use persistent device storage.

Service providers and international transfers

• Netlify, Inc. hosts and delivers the site. Netlify is based in the United States. Netlify states that it uses the EU-US Data Privacy Framework and the European Commission's Standard Contractual Clauses for relevant transfers.
• Plausible Insights OÜ. provides analytics from EU-hosted infrastructure and says visitor data does not leave the EU.
• Google. provides our Google Workspace email service. Google may process data internationally under its stated transfer safeguards.

We may also disclose data to professional advisers or public authorities where this is necessary or legally required.

Provider information: Netlify privacy, Netlify GDPR information, Plausible privacy, and Google privacy.

How long we keep data

• Email records: kept while we handle the enquiry and then only for applicable commercial, tax, accounting, or legal limitation periods.
• Hosting data: retained only as long as needed for delivery, security, fault investigation, and Netlify's documented operational requirements.
• Analytics: Plausible says raw IP addresses and user-agent strings are not stored. Its daily visitor identifier resets every 24 hours. We retain aggregated site statistics while they remain useful for the purposes described above.

To request earlier deletion, email kontakt@hgconnect.de.

Your data protection rights

Depending on the circumstances, you may have the right to:

• access and receive a copy of your personal data;
• correct inaccurate or incomplete data;
• request deletion or restriction;
• receive data you provided in a portable format;
• object to processing based on legitimate interests; and
• withdraw consent at any time where consent is the legal basis.

Contact us at kontakt@hgconnect.de. You may also complain to a supervisory authority. Our competent authority is the Bavarian State Office for Data Protection Supervision, Promenade 18, 91522 Ansbach, Germany.

No legally significant automated decisions

The Workflow Deletion tool applies fixed rules in your browser and shows a broad result. It does not accept or reject an order, create a contract, make a clinical decision, or otherwise produce a legal or similarly significant effect. We do not use this website for automated decision-making under Article 22 GDPR.

Changes to this notice

We will update this page when the site's data handling or service providers change. The effective date at the top shows the current version.