Privacy Notice
This Privacy Notice explains how personal data is processed when you visit this website or contact the company.
1. Controller
- Controller
- IGCFE UG (haftungsbeschränkt)
- Address
- Wassertorstraße 65
10969 Berlin
Germany - contact@igcfe.com
2. Hosting through Netlify
This static website is delivered through Netlify, Inc., USA. Netlify provides the hosting, delivery and security infrastructure and processes technical access data to transmit requested content, maintain service stability and security, and detect abuse or technical errors.
The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is the secure, reliable and efficient provision of the website. Where Netlify processes customer personal data on our behalf, Netlify describes itself as a processor in its published Data Processing Agreement.
3. Server log files
Website access may involve the processing of the IP address, time of access, requested URL or resource, HTTP method, response status, request ID, referrer (if sent by the browser), user-agent and browser or operating-system information derived from it, and technical performance data. Netlify documents the server-side HTTP request data it processes and retention periods that may vary by service plan.
The data is used to deliver the site, analyse errors, manage capacity, and defend against attacks or misuse. The legal basis is Article 6(1)(f) GDPR. Recipients are Netlify and the subprocessors it uses. Log data is deleted or anonymised when it is no longer required for these purposes, unless legal obligations or a security incident require longer retention.
4. Contact form
The “igcfe-contact” form processes full name, optional company or organisation, business email, optional country or target market, subject and message. The form also contains a hidden spam-prevention field (“bot-field”) used to identify automated submissions. Name, email, subject and message are required; the other visible fields are optional.
The purpose is to review, handle and respond to business inquiries. Where an inquiry concerns entering into or preparing a contract, the legal basis is Article 6(1)(b) GDPR. Other business communication is based on Article 6(1)(f) GDPR; the legitimate interest is handling relevant corporate inquiries.
The form is processed through Netlify Forms. Authorised people at IGCFE and Netlify as the platform provider may receive the data. Consent is not required merely to process an inquiry initiated by the visitor.
Ordinary contact inquiries are deleted no later than 12 months after the last substantive communication. Spam, irrelevant messages and launch-test submissions are deleted as soon as they are no longer required. If information becomes part of a contract, accounting, tax, litigation or other legally relevant business record, it is transferred to the appropriate record system and retained for the applicable statutory period or for as long as required by a legal hold.
5. Contact by email
If you contact contact@igcfe.com directly, we process your email address, message content, communication metadata and any other information you choose to provide to handle and respond to the inquiry. The legal basis is Article 6(1)(b) GDPR for pre-contractual communication and otherwise Article 6(1)(f) GDPR.
Recipients are the responsible people at IGCFE and the technical providers used for email delivery. Emails are deleted under the same necessity and statutory-retention criteria that apply to other business communication.
7. Fonts and assets
Fonts, images, icons and graphic elements are delivered from the website itself. There are no runtime requests to Google Fonts or other external font or media providers. Decorative graphics are local resources or are embedded in the website code.
8. Recipients and processors
- Netlify, Inc. as the hosting and form platform, together with its contractually engaged subprocessors.
- Authorised people at IGCFE where access is necessary to handle an inquiry.
- The provider of the email mailbox and any notification delivery.
- Technical support providers only where access is necessary in a specific case and subject to appropriate contractual and organisational controls.
9. International transfers
Netlify is a provider established in the United States. Access or processing outside the European Economic Area may therefore occur. Netlify states that transfers to the United States may rely on the EU–US Data Privacy Framework and, where applicable, the European Commission’s Standard Contractual Clauses under Implementing Decision (EU) 2021/914.
10. Storage duration
Ordinary contact inquiries are deleted no later than 12 months after the last substantive communication. Spam, irrelevant messages and launch-test submissions are deleted as soon as they are no longer required. If information becomes part of a contract, accounting, tax, litigation or other legally relevant business record, it is transferred to the appropriate record system and retained for the applicable statutory period or for as long as required by a legal hold.
11. Your GDPR rights
Subject to the applicable legal conditions, you have rights of access, rectification, erasure, restriction of processing, data portability and objection. Where processing is based on consent, you may withdraw that consent with effect for the future. To exercise your rights, contact contact@igcfe.com.
You also have the right to complain to a data-protection supervisory authority. The exercise of a right may depend on statutory conditions and exceptions; we may request reasonable proof of identity to avoid unauthorised disclosure.
12. Right to object
Where we process personal data on the basis of Article 6(1)(f) GDPR, you may object at any time on grounds relating to your particular situation under Article 21 GDPR. We will then stop processing the affected data unless we demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing is required for the establishment, exercise or defence of legal claims.
14. Data security
The website is transmitted using HTTPS encryption. Appropriate technical and organisational measures are also used to protect personal data against loss, misuse and unauthorised access. Absolute security of transmission or storage cannot be guaranteed.
This translation is provided for ease of reference. The German original is the legally authoritative version.