Privacy Policy

1. Data protection at a glance

General information

The following notes provide a simple overview of what happens to your personal data when you visit our website. Personal data is any data by which you can be personally identified. For detailed information on data protection, please refer to the privacy policy set out below this text.

Data collection on our website

Who is responsible for collecting data on this website?

Data on this website is processed by the website operator. You will find their contact details in the section "Information on the controller" in this privacy policy.

How do we collect your data?

Some of your data is collected because you provide it to us (for example by filling in a contact form or by email). Other data is collected automatically by our IT systems when you visit the website (for example technical data such as your browser, operating system or the time of the page view).

What do we use your data for?

Part of the data is collected to ensure that the website is provided without errors. We do not analyse how you use the site.

What rights do you have regarding your data?

You have the right, at any time and free of charge, to obtain information about the origin, recipients and purpose of the personal data stored about you. You also have a right to request that this data be corrected or erased. If you have given consent to data processing, you can withdraw that consent at any time with effect for the future. You also have the right, in certain circumstances, to request that the processing of your personal data be restricted, and you have a right to lodge a complaint with the competent supervisory authority.

2. General information and mandatory disclosures

Data protection

The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with statutory data protection provisions and this privacy policy.

When you use this website, various items of personal data are collected. This privacy policy explains what data we collect and what we use it for. It also explains how and for what purpose this happens.

We point out that data transmission over the internet (for example when communicating by email) can have security gaps. Complete protection of data against access by third parties is not possible.

Information on the controller

The controller for data processing on this website is:

The controller is the natural or legal person who alone or jointly with others determines the purposes and means of processing personal data (such as names, email addresses and similar).

Retention period

Unless a more specific retention period is stated within this privacy policy, your personal data will remain with us until the purpose for processing it no longer applies. If you make a legitimate request for erasure or withdraw your consent to data processing, your data will be deleted unless we have other legally permissible grounds for storing it (for example retention periods under tax or commercial law); in the latter case the data will be deleted once those grounds no longer apply.

General information on the legal bases for data processing on this website

Where you have consented to data processing, we process your personal data on the basis of Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR. Where you have expressly consented to the transfer of personal data to third countries, processing is additionally based on Art. 49(1)(a) GDPR. Where processing is necessary for the performance of a contract or in order to take steps prior to entering into a contract, we process your data on the basis of Art. 6(1)(b) GDPR. We further process your data where this is necessary to comply with a legal obligation, on the basis of Art. 6(1)(c) GDPR. Processing may also take place on the basis of our legitimate interest pursuant to Art. 6(1)(f) GDPR.

Recipients of personal data and international transfers (South Korea)

In the course of our business we work with external parties and partner companies. In doing so, data is in part also transferred to recipients in third countries outside the European Union (EU) or the European Economic Area (EEA).

Working with development partners in South Korea

For the technical implementation of projects, we work with development partners in the Republic of Korea (South Korea). Whether and which personal data these partners receive depends on the project in question.

The European Commission has adopted an adequacy decision for the Republic of Korea pursuant to Art. 45 GDPR. We base transfers on this decision where the respective recipient falls within its scope. Otherwise, we transfer personal data only if the requirements of Art. 44 et seq. GDPR are met in another way.

The type and scope of data processing, the involvement of our development partners, their access and the safeguards are determined for each project. The agreements required under data protection law, such as on processing on behalf of a controller pursuant to Art. 28 GDPR, must be in place before the processing concerned begins.

Withdrawing your consent to data processing

Many data processing operations are only possible with your express consent. You may withdraw consent you have already given at any time. The lawfulness of the processing carried out up to the point of withdrawal remains unaffected.

Right to object to data collection in particular cases and to direct marketing (Art. 21 GDPR)

Where data processing is based on Art. 6(1)(e) or (f) GDPR, you have the right at any time to object, on grounds relating to your particular situation, to the processing of your personal data; this also applies to profiling based on those provisions. If your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for such marketing.

Right to lodge a complaint with the competent supervisory authority

In the event of infringements of the GDPR, data subjects have a right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, their place of work or the place of the alleged infringement. This right exists without prejudice to any other administrative or judicial remedy.

The competent authority for Bavaria is:

SSL / TLS encryption

For security reasons, and to protect the transmission of confidential content such as orders or enquiries you send to us as the site operator, this site uses SSL or TLS encryption. You can recognise an encrypted connection by the fact that the address bar of your browser changes from "http://" to "https://" and by the padlock symbol in your browser bar.

3. Data collection on our website

Hosting and infrastructure services

We use the services of the following external providers to operate our website and digital infrastructure:

Domain, DNS and email delivery (IONOS)

Domain registration and DNS management are handled by:

When you access our website, IONOS may process technical data (for example DNS queries and server logs) in order to ensure that the domain remains reachable. For details please see the IONOS privacy policy: https://www.ionos.de/schutz-berechtigung/datenschutz.

Emails from the contact form and the order form are sent via the email system of IONOS SE. The data processing agreement concluded with IONOS also covers this (see “Legal basis and data processing agreements”).

Server infrastructure and application hosting (Hetzner)

Our server infrastructure, application environments and databases are hosted at:

When you visit our website or use our services, all incoming requests together with your IP address and technical log files are processed on Hetzner servers in certified data centres within the European Union (Germany). Further information can be found in the Hetzner privacy policy: https://www.hetzner.com/de/legal/privacy-policy.

Legal basis and data processing agreements

IONOS and Hetzner are used on the basis of Art. 6(1)(f) GDPR. We have a legitimate interest in providing our website and IT infrastructure in a technically sound, secure and fast manner.

Data processing agreements pursuant to Art. 28 GDPR are in place with both providers.

Server log files

The provider of these pages automatically collects and stores information in server log files, which your browser transmits to us automatically. These are:

• browser type and browser version
• operating system used
• referrer URL (the page visited previously)
• host name of the accessing computer
• time of the server request
• IP address (shortened / anonymised)

This data is not merged with other data sources. It is collected on the basis of Art. 6(1)(f) GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimisation of its website, which requires server log files to be collected.

Contacting us (email, telephone or contact form)

If you send us enquiries by email, telephone or via a contact form, your details including the contact data you provide there will be stored by us in order to process the enquiry and in case of follow-up questions. We do not pass this data on to third parties without your consent.

This data is processed on the basis of Art. 6(1)(b) GDPR where your enquiry relates to the performance of a contract or is necessary in order to take steps prior to entering into a contract. In all other cases, processing is based on our legitimate interest in effectively handling the enquiries addressed to us (Art. 6(1)(f) GDPR) or on your consent (Art. 6(1)⁠(a) GDPR).

The data you send us remains with us until you ask us to erase it, withdraw your consent to its storage, or the purpose for storing it no longer applies (for example once your enquiry has been dealt with). Mandatory statutory provisions — in particular statutory retention periods — remain unaffected.

Contact form

When you send us an enquiry via the contact form, we process the data you enter: name, company, email address, telephone number (if provided) and your message. Your details are received on our server at Hetzner Online GmbH in Germany and sent from there as an email to anfrage@seovantis.de via the email system of IONOS SE. The email also contains the time of the enquiry and the language of the page. The enquiry is not stored in a database on the server.

The legal basis is Art. 6(1)(b) GDPR where your enquiry is aimed at concluding a contract (steps prior to entering into a contract), and otherwise our legitimate interest in dealing with the enquiries addressed to us (Art. 6(1)(f) GDPR).

The enquiry remains in our mailbox until it has been dealt with, you ask us to erase it, or the purpose of storing it no longer applies; statutory retention periods remain unaffected. It is not passed on to third parties. Hetzner and IONOS act as processors on our behalf (see “Hosting and infrastructure services”).

Ordering accessibility audits

When you order an audit via the order form, the data you enter is processed: company, address, VAT ID, name of the contact person, email address, phone number, the web addresses to be tested, your comments, as well as package, price, time of the order, language and your confirmations. Processing serves to initiate and perform the contract (Art. 6 (1) (b) GDPR).

The data is stored on a server of Hetzner Online GmbH in Germany. The acknowledgement of receipt is sent from the address noreply@seovantis.de via the email system of IONOS SE. For protection against misuse, see “Protection against misuse (spam protection and rate limiting)”.

If no contract is concluded, the data is deleted after 90 days. If a contract is concluded, it is stored for the duration of the statutory retention periods (Art. 6 (1) (c) GDPR).

Email marketing (information about further services)

If you consented via an earlier form on this website to receive information by email about further services and offers from Seovantis Solutions, we process your email address for this purpose. We do not currently collect new consents via the website.

Legal basis: Your consent, Art. 6(1)(a) GDPR.

Voluntary: Consent is voluntary and is not required in order to process your enquiry.

Proof of consent: Because Art. 7(1) GDPR requires us to be able to demonstrate that and what you consented to, we store your email address, the time of consent, and the exact wording of the text displayed to you at that time.

Retention: Until you withdraw consent, after which we delete or restrict this data unless a statutory retention obligation applies.

Withdrawal: You may withdraw your consent at any time with effect for the future, e.g. by email to datenschutz@seovantis.de or via the unsubscribe link in the emails we send.

Protection against misuse (spam protection and rate limiting)

To protect the contact form, the order form and the login area against automated bulk requests (for example bots or spam), we use the following measures.

Invisible field and time check: The contact form and the order form contain a field that is invisible to visitors and is only filled in by automated programs, and they check whether a plausible amount of time has passed between opening the form and submitting it. Nothing is stored for these two checks.

Limiting requests (rate limiting): When a form is submitted and with every login attempt, we process your IP address; for IPv6 addresses only the network part (/64). What is stored in the database on our server is not the address itself but a hash value generated with a secret key (HMAC-SHA256), from which the address cannot be reconstructed, together with the time and the area concerned (contact form, order form or login). We use this to count requests per sender within 15 minutes.

Legal basis: Legitimate interest, Art. 6(1)(f) GDPR. Our interest lies in protecting our systems and forms against misuse, automated attacks and spam.

Retention: The entries are deleted automatically once the 15 minutes have passed, at the latest 16 minutes after they were recorded; no storage or evaluation beyond that takes place.

No profiling: The data is used solely to limit the frequency of requests technically, not to identify individual people and not for marketing purposes.

4. Plugins and tools

Web fonts (self-hosted)

This site uses web fonts to display typefaces consistently. These fonts are hosted exclusively on our own servers (or on the servers of our host Hetzner in Germany). No connection to third-party servers (for example Google Fonts) is made when a page is loaded.

The use of self-hosted web fonts serves the consistent and appealing presentation of our online offering. This constitutes a legitimate interest within the meaning of Art. 6(1)⁠(f) GDPR.

As of 17 October 2026