Legal
Privacy policy
This English text is a translation provided for convenience. The legally binding version is the German original. We take the protection of your data seriously and collect as little as possible. This website deliberately avoids cookies and external services. To improve our offering we use cookieless audience measurement on our own server (section 5).
1. Controller
The controller within the meaning of the General Data Protection Regulation (GDPR) is:
Roadex UG (haftungsbeschränkt)
Robin Mühlhoff
Biemser Weg 47
32052 Herford
Germany
E-mail: info@roadex.eu
2. Hosting and server log files
This website is hosted on a server in a German data centre of our infrastructure provider (netcup GmbH, Nuremberg), acting as our processor under Art. 28 GDPR strictly on our instructions. With every request, the web server automatically records information transmitted by your browser and stores it in so-called server log files. The following data is recorded:
- the IP address of the requesting device,
- the date and time of access,
- the page or file accessed,
- the browser and operating system used,
- the previously visited page (referrer), if transmitted.
This processing is based on our legitimate interest in the technically error-free and secure operation of the website (Art. 6(1)(f) GDPR). The log files are evaluated solely for this purpose and deleted after 14 days at the latest, unless in individual cases they are needed longer to investigate or prevent a specific security-related incident. Security logs of automatically blocked attack and scan attempts are kept for up to 30 days.
For data backups we use Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany, as a further processor under Art. 28 GDPR. The backups are encrypted and stored in a data centre in Falkenstein, Germany. Backup copies are overwritten automatically by the retention levels, at the latest after six months. Until then they may still contain data that has already been deleted in day-to-day operation.
3. Cookies
This website does not use cookies. The exceptions to the principle that nothing is stored on your device are three purely functional flags in your browser's local storage, each set only after your active choice (§ 25(2) no. 2 TDDDG): your display preference (light/dark), the dismissal of the language notice, and - if set - your objection to audience measurement (section 5). These flags contain no identifier of your person, are used for no other purpose and are read only to honour your choice. A cookie banner is therefore not required.
4. Fonts
The fonts used on this website are served locally from our own server. No connection to third-party servers (such as Google Fonts) is established in the process. Loading the fonts therefore transmits no data to third parties.
5. Audience measurement (OpenPanel)
We want to understand how our website is used so we can improve it. For this we use OpenPanel - analytics software that we run on our own server in Germany. No data is shared with third parties and no data is transferred to third countries; we do not use services such as Google Analytics.
For audience measurement we store nothing on your device (no cookies, no local storage, no session storage) and - apart from an objection flag you may have set yourself (see below) - read no information stored there. That is why it requires no consent and why we show no cookie banner.
What data is processed: When you open a page, your browser technically transmits certain information to our server. From this we derive: the page visited, the referrer source (e.g. a search engine or campaign parameters in the URL), clicks on external links (target address and link label), individual interactions we have explicitly marked (e.g. contact click - never any input content), the duration and extent of the visit (session-based, 30-minute window), device type, operating system and browser, and the approximate origin (country, region, city). Your IP address is processed only transiently in memory - to determine the approximate origin and to compute a technical counting value - and is never stored. The counting value is derived from the IP address, the browser signature and a secret key that changes every day. Recognition is therefore technically limited to at most two consecutive days; no user profiles are created and there is no cross-device tracking.
Legal basis: Art. 6(1)(f) GDPR. Our legitimate interest is the statistical analysis of usage in order to improve our content, technology and services and to ensure the stability of our offering. Your interests do not override this because the analysis is purely statistical, no profiles are created, no data reaches third parties and nothing is stored on your device.
Retention: The pseudonymous statistics are automatically deleted after 14 months.
Your right to object: You can object to this audience measurement at any time. Using the button below, this takes effect immediately and without giving reasons - independently of the statutory right to object under Art. 21(1) GDPR, which requires grounds relating to your particular situation. Use the button below; your objection takes effect immediately and can be revoked there at any time. To honour your objection permanently we store a technical flag in your browser - for no other purpose (§ 25(2) no. 2 TDDDG).
6. Contact by email
If you contact us by email, we process the data you transmit (in particular your email address and the content of your message) solely to handle your request. The legal basis is our legitimate interest in responding to your inquiry (Art. 6(1)(f) GDPR) or, where your inquiry is aimed at concluding a contract, Art. 6(1)(b) GDPR. We do not pass this data on to third parties and delete it as soon as it is no longer required and no statutory retention obligations prevent deletion.
7. External links
This website links to our product pages roadex.app and schatzbox.app, and where applicable to other external websites. The respective providers are solely responsible for their content and their data processing. The privacy notices published there apply.
8. SSL/TLS encryption
For security reasons, this website uses SSL/TLS encryption. You can recognize an encrypted connection by the “https://” in your browser’s address bar.
9. Your rights
Within the scope of the statutory provisions, you have the right at any time to:
- access to the data processed about you (Art. 15 GDPR),
- rectification of inaccurate data (Art. 16 GDPR),
- erasure of your data (Art. 17 GDPR),
- restriction of processing (Art. 18 GDPR),
- data portability (Art. 20 GDPR), and
- objection to processing (Art. 21 GDPR).
To exercise your rights, an informal message to info@roadex.eu is sufficient.
Necessity of providing data: You are neither legally nor contractually obliged to provide us with data. The connection data described in section 2 is transmitted by your browser for technical reasons; without it a page cannot be requested. Contacting us by e-mail is voluntary - without your details, however, we cannot deal with your request.
Automated decision-making including profiling within the meaning of Art. 22 GDPR does not take place.
10. Right to object
Where we process your data on the basis of our legitimate interest (Art. 6(1)(f) GDPR - this concerns sections 2, 5 and 6), you have the right to object at any time on grounds relating to your particular situation (Art. 21(1) GDPR). An informal message to info@roadex.eu is sufficient. We will then no longer process the data concerned unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms. Independently of this, you can object to the audience measurement at any time using the button in section 5.
11. Right to lodge a complaint with a supervisory authority
If you believe that the processing of your data infringes data protection law, you have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is:
Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW)
Kavalleriestraße 2–4
40213 Düsseldorf
Germany