Privacy Policy

1. Data Controller

The data controller responsible for this website is:

2. What Data We Collect

2.1 Website Analytics

We use Simple Analytics for website analytics. Simple Analytics is a privacy-first analytics tool that:

• Does not use cookies
• Does not collect personal data
• Does not track individual users
• Does not use fingerprinting
• Is fully GDPR compliant without requiring cookie consent
• Stores data in the European Union

Simple Analytics collects only aggregated, non-personal data such as page views, referrers, and browser types. No personal data is processed, and no consent banner is required.

2.2 Contact Data

When you contact us via email, through our contact form, or through a guide download form, we process the following data:

• Name
• Email address
• Phone number (if provided)
• Company name (guide downloads, if provided)
• Content of your message
• For guide downloads: your role and your area of interest

Legal basis: Art. 6(1)(a) GDPR (your consent, which you give with the checkbox in the contact form and can withdraw at any time), Art. 6(1)(b) GDPR (performance of a contract or pre-contractual measures) and Art. 6(1)(f) GDPR (legitimate interest in responding to inquiries).

Our forms run on Netlify Forms. Netlify stores the data you send and forwards it to us by email. We delete it in Netlify when we no longer need it (see section 4).

2.3 Server Logs

Our hosting provider, Netlify, Inc. (San Francisco, USA), automatically collects server log files including IP address, date and time of access, pages requested, and HTTP status codes. These logs are necessary for the operation and security of the website. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in security and availability). Netlify keeps these logs only as long as it needs them for operation and security.

2.4 Data Transfer to the USA

Netlify is based in the USA, so data from website visits and form submissions can be processed there. Netlify takes part in the EU-US Data Privacy Framework, for which the European Commission has adopted an adequacy decision (Art. 45 GDPR).

3. How We Use Your Data

We use the personal data collected through the contact form and email exclusively for:

• Responding to your inquiries
• Scheduling and conducting consultation calls
• Providing requested services and information
• Sending follow-up communications related to your inquiry

We do not sell, rent, or share your personal data with third parties for marketing purposes.

4. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected:

• Contact inquiries: Deleted after 6 months unless a business relationship is established
• Client data: Retained for the duration of the business relationship plus statutory retention periods (typically 6-10 years under German commercial and tax law)
• Server logs: Kept by Netlify only as long as needed for operation and security

5. Your Rights Under GDPR

Under the General Data Protection Regulation, you have the following rights regarding your personal data:

• Right of Access (Art. 15 GDPR): You may request confirmation of whether we process your personal data and obtain a copy of that data.
• Right to Rectification (Art. 16 GDPR): You may request correction of inaccurate personal data or completion of incomplete data.
• Right to Erasure (Art. 17 GDPR): You may request deletion of your personal data where there is no compelling reason for its continued processing.
• Right to Restriction (Art. 18 GDPR): You may request restriction of processing in certain circumstances.
• Right to Data Portability (Art. 20 GDPR): You may request your data in a structured, commonly used, machine-readable format.
• Right to Object (Art. 21 GDPR): You may object to processing based on legitimate interests at any time.
• Right to Withdraw Consent (Art. 7(3) GDPR): Where processing is based on consent, you may withdraw that consent at any time.

To exercise any of these rights, contact us at info@ironum.com.

6. Third-Party Services

• Simple Analytics: Privacy-first website analytics. No cookies, no personal data. Data stored in the EU. Privacy policy.
• Netlify: Website hosting and form processing (Netlify Forms). Netlify, Inc., San Francisco, USA. Data transfer under the EU-US Data Privacy Framework (see section 2.4). Privacy policy.

7. Right to Lodge a Complaint

You have the right to lodge a complaint with a data protection supervisory authority. The competent authority for our company is:

8. Contact for Privacy Inquiries

For all privacy-related questions, data subject requests, or concerns, please contact: