Legal

Privacy Policy

Deutsche Fassung

This privacy policy informs you, in accordance with Art. 13 GDPR, which personal data is processed when you visit this website, for what purposes and on what legal basis.

1. Controller

Sven König
Am Feldkamp 4
48488 Emsbüren
Germany

Email: info@micgram.de

No data protection officer has been appointed, as there is no legal obligation to do so.

2. Summary

  • This website does not set cookies and does not use any analytics or tracking tools.
  • No external content is loaded – no fonts, scripts, maps or videos. Visiting this website therefore does not transfer any data to third parties.
  • The connection is encrypted via HTTPS (TLS).
  • We process technical access data to provide and protect the website, and the information you send us when you contact us by email.

3. Provision of the website and server log data

Each time this website is accessed, our server automatically processes the following data transmitted by your browser:

  • IP address of the requesting device
  • date and time of access
  • requested host name, page or file and HTTP method
  • HTTP status code, amount of data transferred and response time
  • browser identification (user agent) and, if transmitted, the previously visited page (referrer)

Purpose: delivering the website, ensuring stable and secure operation, and detecting and defending against attacks. Legal basis: Art. 6(1)(f) GDPR. Our legitimate interest lies in the technical provision and security of our systems.

4. Security analysis of access data

To protect against attacks, we analyse the access data with our own software Draxeno – on our own server and without disclosure to third parties. Requests are automatically checked for attack patterns (e.g. failed login attempts, injection attempts, vulnerability scans). The country, city and network operator of an IP address are determined using a locally stored database (DB-IP); the IP address is not transmitted for this purpose.

Retention:

  • Individual requests are deleted automatically after 30 days at the latest.
  • Aggregated statistics, including per IP address and day, are deleted after 400 days at the latest.
  • If an attack is detected, we store the requests concerned as evidence in a security incident. We delete this data as soon as the incident is closed and the data is no longer needed to defend against, investigate or prosecute the attack.
  • IP addresses that we block because of an attack are stored for the duration of the block.

Blocks are only ever imposed manually by us. No automated decision-making within the meaning of Art. 22 GDPR takes place. Legal basis: Art. 6(1)(f) GDPR (protecting our systems against attacks and misuse).

5. Contact and requests for an offer by email

If you contact us by email, for example to request an offer, we process your email address, your name and the information in your message in order to answer your request and, where applicable, to prepare an offer. Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures) or Art. 6(1)(f) GDPR for other enquiries.

We delete your request once it has been dealt with. If a contract is concluded, we retain the business correspondence in accordance with statutory retention obligations (generally 6 years under § 257 HGB, up to 10 years for tax-relevant documents under § 147 AO).

6. Recipients

We only disclose personal data as described in this policy. Recipients are:

  • the hosting provider that technically operates the server of this website,
  • the email provider that operates our mailbox.

7. Your rights

You have the right to

  • access the data we hold about you (Art. 15 GDPR),
  • rectification of inaccurate data (Art. 16 GDPR),
  • erasure (Art. 17 GDPR) and restriction of processing (Art. 18 GDPR),
  • data portability (Art. 20 GDPR).

Right to object (Art. 21 GDPR): Where we process data on the basis of Art. 6(1)(f) GDPR, you may object at any time on grounds relating to your particular situation. We will then no longer process the data unless we can demonstrate compelling legitimate grounds that override your interests, or the processing serves the establishment, exercise or defence of legal claims.

For all requests, an email to info@micgram.de is sufficient.

Right to lodge a complaint: You may lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), in particular in the Member State of your habitual residence. The authority responsible for us is:

Die Landesbeauftragte für den Datenschutz Niedersachsen
(State Commissioner for Data Protection of Lower Saxony)
Prinzenstraße 5
30159 Hannover, Germany

8. Obligation to provide data

You are not obliged to provide us with personal data. However, without the technical data listed in section 3, the website cannot be delivered, and without the information in your email we cannot answer your request.

9. Changes

We update this privacy policy when the website or the legal situation changes. The version published here applies.

Last updated: 13 November 2026. In case of doubt, the German version prevails.