# Privacy policy

> URL: https://maxanoo.com/privacy-policy/

How maxanoo handles your data: server log files, cookieless Matomo analytics, contact form.

## 1. General information and controller

Protecting your personal data is important to us. This privacy policy explains which data is processed when you visit this website. Personal data is any information relating to an identified or identifiable natural person.

The controller within the meaning of the General Data Protection Regulation (GDPR) is:
Sebastian Keutmeier – IT Consulting
Norddeutsche Straße 7, 24143 Kiel, Germany
Email: <contact@maxanoo.com>

## 2. Hosting and server log files

This website runs on a dedicated server operated by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany, in a data centre in Germany. A data processing agreement pursuant to Art. 28 GDPR is in place with Hetzner.

Each request automatically collects and stores access data (server log files): IP address, time, requested address, browser identification and referring page. This data is used to operate the website and to defend against attacks, and is deleted after 6 months. The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in providing the website in a stable and secure manner).

## 3. No cookies, no third-party services

This website does not set any cookies for visitors and does not store anything in your browser.

All parts of the website – including fonts and images – are delivered from our own server. No content from other providers is embedded. Links to other websites (for example YouTube) are plain links: data is only transferred when you follow a link, in which case the privacy policy of that provider applies.

Only in the administration area is a technically necessary session cookie set for logged-in editors.

## 4. Web analytics with Matomo

We use Matomo, an open-source web analytics tool that runs on our own servers. Matomo does not use cookies. Anonymised usage data (e.g. pages viewed, time spent) is collected to evaluate the use of the website statistically. Your IP address is anonymised immediately; the data is not passed on to third parties. The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in improving our website).

## 5. Contact form and email

When you write to us using the contact form, we process your name, your email address, your message and the page on which you submitted the form. The message is stored on our server and forwarded to our email inbox. We use this information solely to answer your request; it is not passed on to third parties.

The legal basis is Art. 6 (1) (b) GDPR insofar as your request relates to a contract or pre-contractual measures, otherwise Art. 6 (1) (f) GDPR (legitimate interest in answering enquiries). Stored messages are deleted automatically after 12 months, or earlier on request.

To protect against automated spam, the form contains a field that is invisible to humans, and the number of messages per connection is limited. For this purpose, a non-reversible hash of your IP address is cached for one hour. The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in preventing abuse).

If you email us directly, we likewise process your details only to answer you. We run our email inboxes ourselves on our own servers.

## 6. Your rights

Under the GDPR you have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). To exercise your rights, please contact the controller (contact details above).

You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Unabhängiges Landeszentrum für Datenschutz Schleswig-Holstein (ULD), Kiel, Germany.

## Last updated

October 2026
