Privacy Policy

1. Data Controller

The data controller responsible for this website is:

2. What Data We Collect

2.1 Website Analytics

We use Simple Analytics for website analytics. Simple Analytics is a privacy-first analytics tool that:

• Does not use cookies
• Does not collect personal data
• Does not track individual users
• Does not use fingerprinting
• Is fully GDPR compliant without requiring cookie consent
• Stores data in the European Union

Simple Analytics collects only aggregated, non-personal data such as page views, referrers, and browser types. No personal data is processed, and no consent banner is required.

2.2 Contact and Booking Data

When you contact us via email or book a call through our scheduling tool (Microsoft Bookings), we process the following data:

• Name
• Email address
• Phone number (if provided)
• Company name (if provided)
• Content of your message or booking details

Legal basis: Art. 6(1)(b) GDPR (performance of a contract or pre-contractual measures) and Art. 6(1)(f) GDPR (legitimate interest in responding to inquiries).

2.3 Server Logs

Our hosting provider (Hetzner, Germany) automatically collects server log files including IP address, date and time of access, pages requested, and HTTP status codes. These logs are necessary for the operation and security of the website. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in security and availability). Server logs are automatically deleted after 7 days.

3. How We Use Your Data

We use the personal data collected through contact forms and bookings exclusively for:

• Responding to your inquiries
• Scheduling and conducting consultation calls
• Providing requested services and information
• Sending follow-up communications related to your inquiry

We do not sell, rent, or share your personal data with third parties for marketing purposes.

4. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected:

• Contact inquiries: Deleted after 6 months unless a business relationship is established
• Client data: Retained for the duration of the business relationship plus statutory retention periods (typically 6-10 years under German commercial and tax law)
• Server logs: Automatically deleted after 7 days

5. Your Rights Under GDPR

Under the General Data Protection Regulation, you have the following rights regarding your personal data:

• Right of Access (Art. 15 GDPR): You may request confirmation of whether we process your personal data and obtain a copy of that data.
• Right to Rectification (Art. 16 GDPR): You may request correction of inaccurate personal data or completion of incomplete data.
• Right to Erasure (Art. 17 GDPR): You may request deletion of your personal data where there is no compelling reason for its continued processing.
• Right to Restriction (Art. 18 GDPR): You may request restriction of processing in certain circumstances.
• Right to Data Portability (Art. 20 GDPR): You may request your data in a structured, commonly used, machine-readable format.
• Right to Object (Art. 21 GDPR): You may object to processing based on legitimate interests at any time.
• Right to Withdraw Consent (Art. 7(3) GDPR): Where processing is based on consent, you may withdraw that consent at any time.

To exercise any of these rights, contact us at info@ironum.com.

6. Third-Party Services

• Simple Analytics: Privacy-first website analytics. No cookies, no personal data. Data stored in the EU. Privacy policy.
• Microsoft Bookings: Used for scheduling consultation calls. Subject to Microsoft's privacy policy. Microsoft processes data under a DPA with EU standard contractual clauses.
• Hetzner: Website hosting provider based in Germany. ISO 27001 certified. Data centers in Nuremberg and Falkenstein, Germany. Privacy policy.

7. Right to Lodge a Complaint

You have the right to lodge a complaint with a data protection supervisory authority. The competent authority for our company is:

8. Contact for Privacy Inquiries

For all privacy-related questions, data subject requests, or concerns, please contact: