Privacy notice

1. Controller

NETLITE Media GmbH
Adelheidstraße 1a
83670 Bad Heilbrunn
Germany

E-Mail: info@netlite.de

2. Hosting and server log files

This website is hosted by STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany. To deliver and protect the website, the hosting infrastructure processes technical access data, including the IP address, requested resource, date and time, referrer, browser information and response status. The legal basis is Article 6(1)(f) GDPR; our legitimate interest is secure, stable and abuse-resistant operation. According to STRATO's current documentation, host names or client IP addresses are anonymised in the log files; downloadable web-server log archives cover the last six weeks and error logs the last 24 hours. STRATO also provides longer-term aggregate graphical statistics depending on the hosting package. These hosting logs are technically and organisationally separate from the aggregate analytics described below. STRATO is engaged as a processor. We do not transfer analytics data to STRATO or other third parties beyond the processing necessarily involved in hosting.

3. First-party aggregate analytics

On the marketing home page, we operate our own cookieless, first-party analytics solely to understand aggregate reach. We count only pageviews and the page language. Each accepted view is added immediately to a daily total consisting only of date, event, source, language and count. No raw event is retained.

The analytics application does not store or hash IP addresses, user-agent strings, referrers or full URLs and does not create visitor, user or session identifiers. It performs no fingerprinting, device profiling, cross-page histories, unique-person measurement or automated decision-making. For transport, the hosting server necessarily receives the IP address and other HTTP metadata. The collection endpoint transiently checks the request origin or referrer, common bot indicators in the user-agent and DNT/GPC headers for security, abuse prevention and objection handling; these values are not written to the analytics data. The short-lived rate limiter also stores only a minute value and global event-category counters, never a visitor-related value.

The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is the proportionate, data-minimising assessment of the marketing site's reach, language use and effectiveness without third-party services or personal profiles. The design is limited to the information necessary for this purpose and applies safeguards including immediate aggregation, fixed input categories, same-origin transmission, bot filtering and rate limits. Aggregate daily counts are retained until they are no longer needed for long-term comparison and are then deleted manually. Because the counts contain no individual reference after aggregation, they cannot be assigned to, extracted for or retrospectively deleted for a particular person.

4. Cookies, device storage and third parties

The marketing site and its analytics set no cookies and use no localStorage, sessionStorage, IndexedDB or comparable storage for analytics or language selection. The analytics neither stores information on your device nor reads an analytics identifier from it. All images, icons, style sheets and scripts needed for the normal visit are delivered from our own domain. No analytics provider, advertising service, tracking service, social-media SDK, CDN, external font or embedded third-party content is loaded by opening the website. This assessment of Section 25 TDDDG reflects the implemented technical configuration; whether consent is required must always be assessed for the precise configuration and purpose.

5. Objection to analytics

You may object to processing based on legitimate interests. The collection endpoint honours the DNT and Global Privacy Control (GPC) signals sent by your browser. You can also open the home page with ?analytics=off to suppress analytics for that page visit without storing an opt-out identifier. Because this site deliberately uses no persistent browser storage or visitor identifier, this URL-based choice is not remembered automatically for later visits. You may also contact us at info@netlite.de regarding an objection.

6. Contact by email

If you contact us, we process the information you provide in order to handle your enquiry. The legal basis is Article 6(1)(b) GDPR where the enquiry concerns a contract or pre-contractual steps; otherwise it is Article 6(1)(f) GDPR based on our legitimate interest in answering enquiries. Data are deleted when the purpose no longer applies, unless statutory retention obligations require longer storage.

7. Your rights

Subject to the statutory requirements, you have the right to access, rectification, erasure, restriction of processing, data portability and objection. You may also withdraw consent at any time with effect for the future where processing is based on consent. You have the right to lodge a complaint with a data protection supervisory authority, in particular in the EU Member State of your habitual residence, place of work or the place of the alleged infringement.

8. Competent supervisory authority

Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 27 (Schloss)
91522 Ansbach
Germany
www.lda.bayern.de

9. Encryption and changes

The publicly hosted website is delivered using TLS encryption. Local testing on localhost may use an unencrypted connection. We will update this notice if the purposes, data categories, recipients or technical configuration change materially.