Please note: This English version is provided for convenience only. The legally binding version is the German Datenschutzerklärung under German law.
1. Controller
Marc Iridon
Sovratis Consulting
Schulstraße 14A
54597 Wallersheim
Germany
Email: info@sovratis.de
2. Principles of data processing
We process personal data only where a legal basis under Art. 6 GDPR exists:
- Art. 6(1)(a) GDPR – consent (e.g. analytics tracking, contact form)
- Art. 6(1)(b) GDPR – performance of a contract or pre-contractual measures
- Art. 6(1)(f) GDPR – legitimate interest (e.g. server logs for security and error analysis)
3. Data collected when visiting the website
3.1 Server log files
Each time you visit our website, your browser automatically transmits the following data, which may be stored in server log files:
- IP address (anonymised)
- Date and time of access
- Requested URL
- Referrer URL (the referring page)
- Browser type and operating system
- Amount of data transferred / HTTP status code
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in system security and error analysis). The data is not used to identify users.
4. Cookies & localStorage
This website does not use marketing or advertising cookies. We only use technically necessary browser storage (localStorage) and – only with your consent – analytics cookies:
- localStorage “sovratis-locale”: Stores your language preference (DE/EN). No expiry date; can be deleted in your browser at any time.
- localStorage “sovratis-consent”: Stores your cookie choice (categories, time and version). No consent is required for this (§ 25(2) TDDDG).
Analytics is disabled by default and is only loaded after your active consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG). You can change or withdraw your choice at any time via “Cookie settings” in the footer.
5. External services & analytics tools
5.1 Google Fonts
This website loads fonts from Google Fonts (fonts.googleapis.com). In doing so, your IP address is transmitted to Google servers. Legal basis: Art. 6(1)(f) GDPR. Further information: Google Privacy Policy.
5.2 Google Analytics 4
This website uses Google Analytics 4 (GA4), a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. GA4 is used to statistically evaluate the use of the website and to improve our offering.
Legal basis: Art. 6(1)(a) GDPR (consent). Tracking is activated only if you actively consent via the cookie banner. Without consent, no analytics data is transmitted to Google.
Consent Mode V2: We use Google's Consent Mode V2. By default, analytics_storage is set to denied. Tracking is only enabled after your active consent via the banner.
Data processed: Anonymised IP address (IP anonymisation enabled), page URLs visited, referrer URL, browser type, device category, session duration, interactions. No directly personal data such as name or email address is transmitted.
Third-country transfer: Data may be transferred to servers of Google LLC in the USA. Google is certified under the EU-US Data Privacy Framework. Further information: Google Privacy Policy · GA4 privacy information.
Withdrawing consent: You can withdraw your consent at any time with effect for the future: . Alternatively: Google Analytics opt-out browser add-on.
6. Contact form
When you use the contact form, we process the following data:
- Name (required)
- Email address (required)
- Company and company size (optional)
- Topic and your message
Legal basis: Art. 6(1)(a) GDPR (consent by submitting the form) or Art. 6(1)(b) GDPR (pre-contractual measures).
6.1 Data processor: Web3Forms
The technical delivery of the contact form is handled by the Web3Forms service (Web3Creative). The form data you enter is not sent directly to our server, but first to Web3Forms' infrastructure and forwarded from there to us by email. A data processing agreement (DPA) pursuant to Art. 28 GDPR is in place with Web3Forms.
Data processed: The data entered in the form (name, email address, company, message) as well as technical metadata (including IP address) for spam prevention.
Infrastructure: Web3Forms operates its service via Amazon Web Services (hosting, database, email delivery via Amazon SES), Cloudflare (CDN/security) and Hetzner (application infrastructure). For spam detection, the sender's IP and email address are additionally transmitted to the CleanTalk and Akismet services.
Third-country transfer: Web3Forms/Web3Creative is based outside the EU, and the infrastructure used (in particular AWS) may also process data in the USA. The transfer is based on EU standard contractual clauses pursuant to Art. 46(2)(c) GDPR, as set out in Web3Forms' data processing agreement.
Further information: Web3Forms privacy policy · Data processing agreement (DPA).
7. Contact by email or phone
If you contact us by email or phone, we process your details exclusively in order to handle your enquiry.
8. Your rights
You have the following rights regarding your personal data:
- Access (Art. 15 GDPR): What data we have stored about you.
- Rectification (Art. 16 GDPR): Correction of inaccurate data.
- Erasure (Art. 17 GDPR): Deletion of your data, provided no retention obligations exist.
- Restriction of processing (Art. 18 GDPR)
- Data portability (Art. 20 GDPR): Receiving your data in a common format.
- Objection (Art. 21 GDPR): To processing based on legitimate interests.
- Withdrawal of consent (Art. 7(3) GDPR): At any time with effect for the future.
To exercise your rights, please contact: info@sovratis.de
9. Right to lodge a complaint with a supervisory authority
You have the right to lodge a complaint with a data protection supervisory authority. As a rule, the supervisory authority of your federal state or of the federal state in which we are based is responsible. A list of German supervisory authorities can be found at: bfdi.bund.de
10. Changes to this privacy notice
We reserve the right to adapt this privacy notice in the event of changes to the legal situation or to our data processing operations. The current version is always available on this page. Last updated: September 2026.