Privacy policy

1. Controller

Maximus GmbH, Gottfriedstraße 1, 48151 Münster, Germany, represented by its managing director Léa Varsideh. Email: [Contact email].

2. Visiting this website

When you open a page, our web server processes your IP address, the time of the request, the requested URL, the referrer and your browser’s user agent. We process this data to deliver the site securely and to detect abuse. Legal basis: Art. 6 (1) (f) GDPR, our legitimate interest in a secure and stable website. Server logs are deleted after [server log retention, proposed: 14 days].

This website sets no cookies for visitors, uses no analytics or tracking tools and loads no resources from third parties. Fonts are served from our own server. The live demo on the start page runs only in your browser; nothing you enter there is sent to us.

3. Demo request form

If you send the demo request form we process your name, work email, company, website, expected monthly volume and message, plus the time of your consent. We use them only to answer your request and to arrange a demo. Legal basis: Art. 6 (1) (b) GDPR (steps prior to entering into a contract at your request) and Art. 6 (1) (f) GDPR (handling business enquiries).

To prevent abuse we store a salted one-way hash of your IP address with the request and use it to limit the number of requests. The IP address itself is not stored with the request.

We keep your request for 12 months after it has been handled, unless a contract follows or commercial or tax law requires longer storage (§ 257 HGB, § 147 AO).

4. Recipients and hosting

The website is hosted by Vercel Inc., USA. Demo requests are stored in a database operated by [Database provider: company, country, region (the code uses Neon)] and forwarded by email through [Email provider: company, country (the code uses Resend)].

Because these providers are US companies or may use US group companies, access to data from the USA cannot be ruled out. Vercel is certified under the EU-US Data Privacy Framework (Art. 45 GDPR). We do not sell your data.

5. Your rights

You have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20) and to object (Art. 21 GDPR). Where processing is based on consent, you can withdraw it at any time with effect for the future. Write to us at [Contact email].

You also have the right to lodge a complaint with a supervisory authority. The authority responsible for us is the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW), Kavalleriestraße 2–4, 40213 Düsseldorf, https://www.ldi.nrw.de.

6. Changes

We update this policy when the website or the law changes. The current version is always on this page.