Privacy Policy

1. Controller

Controller: Imatronix UG (haftungsbeschränkt), Matternstraße 3, 10249 Berlin, Germany, represented by the managing director Angel Zimmermann. Email for privacy matters: contact@imatronix.de (recommended subject: “Privacy”). This site is published in English, German, and Spanish. The controller and the processing described here apply regardless of the language in which you read this page.

2. Scope of this policy

This notice covers the website imatronix.de and the communications we maintain with customers, suppliers, and people interested in our software, automation, AI-agent, and related services — including email we send in reply to enquiries or in the course of a customer relationship. It does not replace data-processing annexes, confidentiality agreements, or the specific terms we agree in a contract. If a signed contract with you regulates processing in more detail, that contract prevails. It also does not cover third-party sites we link to, nor other product sites in our ecosystem (for example caufix.com or angelservers.net), which publish their own privacy notices.

3. Applicable legal framework

We process personal data in accordance with the EU General Data Protection Regulation (GDPR) and applicable German law, including the Telecommunications Digital Services Data Protection Act (TDDDG) insofar as we store or access information on your terminal equipment. Where we provide services to customers outside the EU, we apply the GDPR standard of this notice unless a contract with you sets a different, lawful arrangement.

4. Our role: controller and processor

We act as controller for the data of this website, our invoicing, and the commercial relationship with customers and suppliers. We act as processor when we host or operate systems on a customer’s instructions and those systems contain personal data of that customer’s users, employees, or end customers. In that case the customer determines the purposes and we process the data according to its instructions, with the security and confidentiality duties agreed in the contract. We do not use data hosted on a customer’s behalf for our own purposes.

5. Data we process and for which purposes

• Technical connection data (IP address, date and time, requested resource, response code, volume transferred, browser and operating system) to deliver the site, keep it secure, and diagnose errors. • Contact data and message content when you write to us or submit a form (name, email address, phone if you provide it, company, country, and your enquiry) so we can handle the request and follow up. • Contractual relationship data (billing and tax identification, technical and administrative contacts, support and incident records) to provide the service, invoice, and meet legal duties. • Email delivery data (recipient address, message identifiers, delivery, bounce, and complaint status) to send mail you requested or that belongs to an existing relationship, and to keep our sending infrastructure healthy. • Site-usage data and session recordings, only if you consent to the analytics category, so we can understand how the site is used and improve it. • Operational and audit logs of the infrastructure (administrative access, configuration changes, monitoring alerts) to ensure availability, traceability, and security.

6. Legal bases

• Article 6(1)(b) GDPR — performance of a contract or steps at your request prior to entering into a contract: quotes, audits you booked, support, invoicing, account and service messages. • Article 6(1)(f) GDPR — legitimate interests: securing the infrastructure, preventing abuse and fraud, technical logs, answering business enquiries, delivering relationship email, and defending our rights. You may object to processing based on legitimate interests as described in section 18. • Article 6(1)(a) GDPR — consent: analytics and optional site features, which you can grant or withdraw in the cookie preference centre. Where we ever send promotional newsletters, we would do so only with consent. • Article 6(1)(c) GDPR — legal obligation: retention of accounting and tax records and responding to competent authorities. Storage of or access to information on your device for non-essential cookies and similar technologies is based on consent under § 25 TDDDG, in addition to the GDPR bases above.

7. Email communications (Amazon SES)

We send email as part of operating this website and our services. Typical messages include: • Replies to messages you send to contact@imatronix.de or another published address. • Follow-up on a demo, audit, research-funnel, or contact request that you submitted, so we can continue the conversation you started. • Transactional and service messages for customers and users of our platforms — for example password reset, organisation invitations, appointment confirmations, commercial offers, invoices, and contract documents. We obtain email addresses only when you give them to us (forms, email, contract) or when an organisation that is already our customer provides them for users of that organisation’s account. We do not buy email lists, harvest addresses from third-party sources, or send unsolicited bulk advertising. We do not use visitors of this site as a source for mass marketing campaigns. Email is delivered through Amazon Simple Email Service (Amazon SES), provided by Amazon Web Services. AWS processes recipient addresses and delivery metadata (including bounces and complaints) as our processor solely to transmit the message and to report delivery status. We act on bounce and complaint notifications from SES: we stop sending to addresses that cannot receive mail or that have complained. That protects recipients and keeps our sending reputation within Amazon’s acceptable-use rules. You can object to further promotional or relationship follow-up emails at any time by writing to contact@imatronix.de with the subject “Unsubscribe”, or by using an unsubscribe link where a message includes one. We will then stop those messages. Emails that are necessary to perform a contract, to provide a service you requested, or to meet a legal duty (for example invoices, security notices, or password-reset mail) may still be sent. Our sender identity is Imatronix UG (haftungsbeschränkt), Matternstraße 3, 10249 Berlin, Germany — contact@imatronix.de.

8. Hosting and infrastructure

This site and associated systems run on infrastructure we operate in data centres of providers in Europe (currently Contabo). The provider supplies the physical and network layer; configuration, access, and operation of the servers are our responsibility. Customer systems are deployed in the infrastructure and region agreed in each case. If you need a particular location for regulatory reasons, tell us before contracting so it can be reflected in the agreement.

9. Server logs

Each visit generates a technical log with the data listed in section 5. These logs let us detect and contain attacks, measure service health, and reconstruct incidents. They are kept only as long as needed for those purposes and are then deleted or aggregated so they no longer identify a person. We do not use them to build commercial or advertising profiles.

10. Cookies and local storage

We use strictly necessary storage to remember your cookie decision and your visual theme (light or dark). That storage cannot be turned off from the site, because without it we could not honour your own choices. Optional categories (analytics and convenience features) are activated only with your consent. You can review and change them at any time under Cookie settings, and you can delete site data for imatronix.de in your browser.

11. Analytics (Microsoft Clarity)

If you enable the analytics category we load Microsoft Clarity, which processes heatmaps, session recordings, and usage metrics, together with device, browser, and approximate location data, according to Microsoft’s documentation. Without that consent the tool is not initialised and no information is sent to Microsoft. You may withdraw consent at any time; withdrawal does not affect the lawfulness of processing carried out before withdrawal.

12. Approximate country detection

Some forms may suggest your country to save you typing. For that, our /api/geo endpoint queries the service ipapi.co with the IP address of the request and returns only the country code; that IP address is not stored in your browser for this purpose. The feature belongs to the optional Preferences category.

13. Enquiries, support, and CRM

When you write to us by email or submit a demo, audit, or research-funnel form, we process your message and the contact data you choose to provide. These communications and commercial enquiries may be recorded in our CRM (Zoho) and in our internal follow-up tools, so we can continue the case and keep a technical history. Submitting a form is a request that we contact you, including by email, about that request. It is not consent to unrelated bulk marketing, which we do not send from this site.

14. Recipients and processors

To operate the site and the services we use providers that may process personal data on our behalf or as independent controllers, each under their own terms: • Contabo — data centres and infrastructure in Europe. • Amazon Web Services (Amazon SES) — delivery of transactional and relationship email, including bounce and complaint handling. • Microsoft — Clarity, only if you consent to analytics. • Zoho — CRM for commercial and service enquiries. • ipapi.co — approximate country detection in the optional feature described above. • Providers of telecommunications, accounting, and professional services needed for our operation and legal compliance. Where they act as processors we conclude the agreements required by applicable law, including Article 28 GDPR. We may also disclose data to authorities where we have a legal obligation.

15. International transfers

We are a German company that operates infrastructure in Europe and works with providers established in the European Union and in the United States, so a cross-border flow of data can occur (in particular for email via Amazon SES, CRM via Zoho, and analytics via Microsoft if you consent). Transfers subject to the GDPR are covered by the mechanisms provided by law, such as an adequacy decision, standard contractual clauses, and supplementary measures. If your organisation needs data to remain in a specific jurisdiction, that commitment must be written into the service contract.

16. Retention

We keep data only for as long as needed for the purpose that justifies it: • Enquiries that do not become a contract: for reasonable commercial follow-up and subsequent archiving. • Contractual, accounting, and tax data: during the relationship and afterwards for the statutory retention periods applicable in Germany. • Email delivery logs (including bounces and complaints): for short periods oriented to deliverability, abuse prevention, and Amazon SES compliance. • Technical and security logs: short periods oriented to detecting and analysing incidents. • Data processed on behalf of customers: according to the contract; at the end they are returned or deleted as agreed. When a datum is no longer needed it is deleted or anonymised.

17. Security

We apply technical and organisational measures proportionate to the risk: encryption in transit, least-privilege administrative access with stronger authentication, separation of environments, secret management, dependency updates, monitoring, backups, and change control. No system is infallible. If we detect a security incident affecting personal data we assess it, contain it, and notify affected customers and the authorities when the law requires it, with the information available at the time.

18. Your rights

You may request access, rectification, erasure, restriction of processing, data portability, and objection, and you may withdraw consent given for optional processing. You also have the right to object, on grounds relating to your particular situation, to processing based on legitimate interests (Article 21 GDPR), including relationship email that is not required to perform a contract. To exercise these rights write to contact@imatronix.de describing your request; we may ask for reasonable additional information to verify your identity. We will respond within the statutory time limits. If you consider that we have not handled your request correctly you may lodge a complaint with a supervisory authority, in particular the Berliner Beauftragte für Datenschutz und Informationsfreiheit, or the authority of your place of residence, place of work, or of the alleged infringement. If your data are processed on behalf of one of our customers — for example because you are a user of a system we operate — please contact that customer, who is the controller; we will provide the support provided for in the contract.

19. Data Protection Officer

Imatronix UG has not appointed a Data Protection Officer (DPO). Under Article 37 GDPR a DPO is mandatory only in specific circumstances (for example certain kinds of large-scale regular and systematic monitoring, or large-scale processing of special categories of personal data). We handle privacy and data-subject requests ourselves as the controller — please use contact@imatronix.de.

20. Automated decisions

We do not take automated decisions with legal or similarly significant effects on you, nor do we build profiles for that purpose, from the information collected on this site.

21. Minors

Our services are aimed at businesses and organisations. They are not directed at minors and we do not knowingly collect their data. If you believe a minor has provided us with information, write to us and we will delete it.

22. Changes to this policy

We may update this notice to reflect changes in the services, the providers, or the law. We will publish the current version on this page with its update date; if a change is material and affects active customers, we will communicate it through the usual channels.

23. Contact

Imatronix UG (haftungsbeschränkt) Matternstraße 3 10249 Berlin Germany contact@imatronix.de Last updated: August 2026. This document describes our processing practices for transparency and is not legal advice. If it conflicts with a signed contract between you and Imatronix UG, the contract prevails.