Privacy Policy

As of October 2026

Please note: This is a courtesy translation. Only the German version is legally binding. In case of any discrepancy, the German text prevails. Read the German version.

This website is deliberately frugal: it uses no analytics or advertising services, loads no external fonts, and only ever contacts a third party after you have explicitly asked it to.

1. Controller

The controller for data processing on this website is:

Thetaris GmbH
Südliche Münchner Str. 24a
82031 Grünwald, Germany
Represented by: Dr. Andreas Grau
Phone: +49 89 208039480
Email: info@thetaris.com

The controller is the natural or legal person who alone or jointly with others determines the purposes and means of processing personal data.

2. Hosting

This website runs on our own server, rented from Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. The server is located in a German data centre. Data is processed exclusively within the European Union.

A data processing agreement pursuant to Art. 28 GDPR is in place with Hetzner Online GmbH. The provider processes the resulting data solely on our instructions.

The legal basis for using the host is our legitimate interest in providing this website securely and reliably (Art. 6(1)(f) GDPR).

3. Server log files

When you access this website, data your browser transmits is recorded automatically: the address requested, the date and time of access, the volume of data transferred, the server status message, the page previously visited, and your browser and operating system identifiers.

We keep two separate logs:

  • Statistics log: the IP address is truncated before storage (the final segment for IPv4, correspondingly for IPv6), so it can no longer be linked to a person. We use this log for reach analysis.
  • Security log: contains the full IP address and serves solely to defend against attacks, in particular automated login attempts. It is deleted automatically after seven days.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in secure operation and in defending against abusive access. This data is not merged with other data sources.

4. Cookies

This website sets exactly one cookie for visitors:

  • thetaris_lang — stores nothing but the value de or en. It is written only when you actively switch language using the language toggle, and it ensures you are not redirected to your browser language again on your next visit. Lifetime: one year. It contains no identifier and permits no conclusions about you as a person.

Because this cookie is strictly necessary to provide a function you expressly requested, no consent is required under § 25(2) no. 2 TDDDG. You can delete it at any time in your browser settings; the site will then simply fall back to your browser language again.

Beyond this, cookies are set only if someone logs in to the editorial area; those are technically necessary for the login to work.

No consent banner is therefore required, as no non-essential information is stored on or read from your device.

5. Language detection

On your first visit, this website reads the language preference your browser transmits with every request (the Accept-Language header) in order to show you the German or English version. This happens in the moment of the request only; the value is not stored, not logged and not passed on. As soon as you choose a language yourself, that choice takes precedence and the browser setting is no longer evaluated.

The legal basis is Art. 6(1)(f) GDPR, our legitimate interest in presenting content in a comprehensible language.

6. Fonts

The fonts used on this website are served from our own server. No connection is made to third-party servers, in particular not to Google Fonts. Your IP address is not transmitted to anyone.

7. Appointment booking via Calendly

For scheduling conversations we use Calendly, provided by Calendly LLC, 271 17th St NW, Atlanta, GA 30363, USA.

The service is only loaded once you actively click the “Load calendar” button. Until you do, no connection to Calendly is established and no data is transmitted.

After you click, your IP address along with browser and device information is transmitted to Calendly, and Calendly may set cookies. If you book an appointment, Calendly additionally processes the details you provide (name, email address and any message) on our behalf.

The legal basis for loading the service is your consent, given by that click (Art. 6(1)(a) GDPR, § 25(1) TDDDG). You may withdraw this consent at any time with effect for the future by leaving the page without clicking the button. Transfer to the USA takes place on the basis of the Standard Contractual Clauses and the provider’s certification under the EU-US Data Privacy Framework.

Further details are in Calendly’s privacy policy: calendly.com/privacy.

8. Contacting us by email or phone

This website contains no contact form. If you contact us by email or phone, we process your details solely in order to handle your enquiry.

The legal basis is Art. 6(1)(b) GDPR where your enquiry relates to the initiation or performance of a contract, and otherwise Art. 6(1)(f) GDPR on the basis of our legitimate interest in answering enquiries. We delete the data once the matter is concluded and no statutory retention obligations apply.

9. Encryption

This website is transmitted exclusively over an encrypted connection (TLS). You can recognise this by the address bar of your browser beginning with “https://” and by the padlock symbol. Data you transmit to us cannot be read by third parties.

10. Your rights

You have the right at any time to obtain information free of charge about your stored personal data, its origin and recipients, and the purpose of processing (Art. 15 GDPR). You also have the right to rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and a right to object (Art. 21 GDPR).

Where processing is based on your consent, you may withdraw it at any time with effect for the future. The lawfulness of processing carried out before withdrawal remains unaffected.

Please contact info@thetaris.com to exercise these rights.

11. Right to lodge a complaint

If you believe the processing of your data infringes the GDPR, you have the right to lodge a complaint with a supervisory authority. The authority responsible for us is:

Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 18, 91522 Ansbach, Germany
www.lda.bayern.de

12. Objection to promotional emails

We hereby object to the use of contact data published in the imprint for sending unsolicited advertising. We expressly reserve the right to take legal action in the event of unsolicited advertising being sent.