Legal
Privacy policy
Last updated: 6 November 2026
This policy is governed by German and EU law. The German version is the authoritative text.
1. Controller
The controller within the meaning of the GDPR is:
ISM Schirbaum, Andreas Schirbaum, Obere Dorfstr. 36, 50829 Cologne, Germany. Email: contact@proexa.de
We have not appointed a data protection officer; the legal requirements for one do not apply.
2. Overview
This policy describes which personal data are processed when you visit proexa.de, for what purpose and on which legal basis. It applies to all language versions of the site.
3. Visiting the website and server log files
When you open a page, our hosting provider processes technically necessary connection data: your IP address, the time of access, the address requested, the amount of data transferred and browser information. The page cannot be delivered without this processing.
- Purpose: technical operation, security, prevention of misuse
- Legal basis: Art. 6(1)(f) GDPR (legitimate interest in the secure operation of the website)
- Recipient: Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA, as the operator of the infrastructure on which the site runs. Transfers to the USA rest on a data processing agreement with standard contractual clauses (Art. 46(2)(c) GDPR) and Cloudflare’s certification under the EU-US Data Privacy Framework.
- Retention: the provider deletes log data according to its own rules. We do not store access logs ourselves.
4. Cookies and locally stored settings
We set the following cookies. There are no advertising or third-party tracking cookies.
| Name | Purpose | Duration | Consent required |
|---|---|---|---|
preferredLanguage |
Stores the language you choose yourself | 1 year | No, because you choose the language yourself (§ 25(2) no. 2 TDDDG) |
consent |
Stores your decision on the consent banner | 1 year | No, it records your decision |
countryHint |
Suggests a language based on your country (only as a hint, never as a redirect) | 1 day | Yes, set only after you consent |
Legal basis for consent: § 25(1) TDDDG and Art. 6(1)(a) GDPR. You accept or decline on the banner on your first visit. Both options are equally prominent. You can withdraw your decision at any time by deleting the cookies in your browser; the banner will then appear again.
Country hint: if you consent, the start page uses your country (determined by Cloudflare from your IP address) to show a language suggestion. There is no automatic redirect based on country.
5. Contact
proexa.de currently has no contact form. If you write to us by email, we process the details in your message (name, email address, content) to answer your enquiry.
- Legal basis: Art. 6(1)(b) GDPR where pre-contractual steps or a contract are concerned, otherwise Art. 6(1)(f) GDPR (effective communication)
- Retention: as long as needed to handle the enquiry and as long as statutory retention obligations apply
6. Audience measurement (in preparation)
This section applies only once measurement is active. Until then, no audience measurement takes place.
We plan to measure use of the site with Umami. Umami is open-source software that we operate ourselves on a server in Germany. Umami sets no cookies and does not store IP addresses; visitors are counted with a daily rotating, non-identifying identifier.
- Purpose: analysis of page views to improve the content
- Legal basis: Art. 6(1)(a) GDPR and § 25(1) TDDDG. The measurement script is loaded only after you have consented.
- Retention: event data are deleted after [DECISION PENDING: retention period].
7. Recipients and third countries
Apart from Cloudflare (section 3), we do not pass personal data to third parties. A transfer takes place only where you trigger it or where we are legally obliged to make it.
8. Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20) and objection (Art. 21 GDPR). You can withdraw consent at any time with effect for the future.
To exercise these rights, contact contact@proexa.de.
You also have the right to lodge a complaint with a data protection supervisory authority. The competent authority for our seat is the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen.
9. Changes
We update this policy when the processing changes. The current version is always published on this page.