Privacy policy

1. Controller

2. Hosting and server logs

This website and the applications behind it (including form processing and the database) are hosted on a dedicated server operated by us and rented from Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. This is pure infrastructure hosting (server rental) without any analytics or tracking services on Hetzner's part.

When you access the website, our web server processes technically necessary access data, in particular:

• the previously visited website (referrer),
• the requested page or file,
• browser type and browser version,
• operating system and device type used,
• time of access, and
• the IP address in shortened or truncated form.

This processing serves the secure, stable and technically reliable provision of this website and the prevention of attacks and misuse. The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in providing our website securely and without disruption.

These access logs are processed exclusively for the technical purposes mentioned, are not combined with other data sources and are deleted automatically on a regular basis.

A data processing agreement pursuant to Art. 28 GDPR is in place with Hetzner. According to Hetzner, no data is transferred to third countries outside the EU/EEA as part of this processing.

3. Email delivery

For receiving and sending emails (info@tran-digital.com) we currently use the email service of IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany. If you contact us by email, IONOS processes the message content and the technical metadata (including sender address and timestamp) on our behalf in order to deliver it. The automatic confirmation emails you receive after submitting the contact form or booking an appointment are also sent via IONOS; in doing so, IONOS processes your email address, your name and the content of the confirmation.

A data processing agreement pursuant to Art. 28 GDPR is in place with IONOS. According to IONOS, data is not passed on to third parties beyond the contractually agreed processing.

This website itself is no longer hosted by IONOS (see section 2) – IONOS is now responsible solely for domain registration and email delivery.

4. Contact by email, phone or contact form

If you contact us by email or phone, we process the data you provide, in particular your name, your contact details and the content of your enquiry. This processing takes place in order to answer your enquiry and to handle further communication.

If your enquiry relates to the initiation or performance of a contract, the legal basis is Art. 6(1)(b) GDPR. For all other enquiries, processing is based on Art. 6(1)(f) GDPR, on the basis of our legitimate interest in handling business enquiries and communicating reliably.

We also provide a contact form on this website. When you use it, we collect the data you enter (first name, last name, email address, optionally your phone number, and your message) and, for technical reasons, your IP address and the time of the request. The IP address and the time are processed exclusively to protect the form against abusive, automated use (for example to limit the number of requests per sender and to detect automated access) and are not used for any other purpose; the legal basis for this is Art. 6(1)(f) GDPR (legitimate interest in protection against misuse).

This website is available in a German and an English version. When you submit the contact form, we also transmit which of the two versions you are using, so that you receive the automatic confirmation in the appropriate language. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in clear communication).

The data entered via the form is stored in a database operated by us, running on the same server as this website (see section 2). We are also notified of the submission via a push notification; the notification service used for this is likewise operated by us (self-hosted) and runs on our own infrastructure. At no point is your data transferred to an external service provider or to a third country in this process.

The data is deleted as soon as it is no longer required to handle the enquiry and there are no statutory retention obligations or other legitimate reasons for further storage.

Spam protection by captcha

The contact form and the appointment booking are protected against automated mass requests by a captcha. For this we use the open-source solution Cap, which we run on our own server (see section 2); it is not a third-party service.

The procedure gives your browser a small computational task, which it solves automatically in the background. You do not have to type anything or select images, and you are not tracked. Only your IP address, the time of the request and a randomly generated, short-lived identifier used to check whether the task was solved are processed. No cookies are set, no usage behaviour is analysed, no device profile is created and no data is transferred to third parties.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in protecting our forms against abusive, automated use. The data mentioned is deleted automatically after a short time.

Contacting us is voluntary. Without the required contact details we may not be able to answer your enquiry. Please do not send sensitive data unencrypted by email or via the contact form.

5. Booking an initial consultation

Direct appointment booking is only available on the German version of this website. The following information applies to bookings made there.

On this website you can book an appointment for a free, no-obligation initial consultation directly. In doing so, we process the data you enter (first name, last name, email address, optionally your phone number, and what your enquiry is about) as well as the selected appointment. For technical reasons, your IP address and the time of the request are also processed, exclusively to protect against abusive, automated use (legal basis Art. 6(1)(f) GDPR).

This processing serves to arrange and hold the consultation you requested. The legal basis is Art. 6(1)(b) GDPR (steps taken at your request prior to entering into a contract).

Your details are stored in the same database operated by us as enquiries submitted via the contact form (see sections 2 and 4). The appointment booking is also protected against automated use by the self-hosted captcha described in section 4.

Availability check and video conferencing (Google)

To display available appointments and for the video conference, we use Google Calendar and Google Meet, services of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. A transfer to Google LLC in the USA cannot be ruled out.

We have deliberately designed this integration to use as little data as possible: only the booked time slot and the technical creation of a video conference room are transmitted to Google. Your name, email address, phone number and the description of your enquiry are not transmitted to Google and are not written into the calendar entry. Google does not add you as a participant and does not send you an invitation; you receive the access link exclusively from us by email.

If you take part in the video call, Google processes the data that arises technically in the process (such as IP address and connection data) under its own responsibility. You can find information on this in Google's privacy policy at policies.google.com/privacy. Taking part in the video call is voluntary; on request we can hold the conversation by phone instead.

Cancelling your appointment

With the booking confirmation you receive a personal link that lets you cancel the appointment yourself. For this we assign a random, non-guessable identifier used solely for this purpose. If you cancel the appointment, the corresponding calendar entry is deleted.

6. Cookies and external content

This website does not set any cookies itself. It does not use externally loaded fonts, embedded videos, map services, social media feeds or analytics and advertising services. The contact form and the captcha protection transmit data exclusively to infrastructure operated by us (see section 4); the captcha is also served from our own server and does not set any cookies. When an appointment is booked, data is transmitted to Google to the limited extent described in section 5 (time slot and conference room only). A cookie consent banner is not required for the current range of functions.

7. Recipients and storage period

Recipients of personal data under our data processing agreements pursuant to Art. 28 GDPR are Hetzner Online GmbH (hosting, see section 2) and IONOS SE (receiving and sending emails, including the automatic confirmation emails after contact form submissions and appointment bookings, see section 3).

For appointment bookings, Google Ireland Limited is an additional recipient, but only to the limited extent described above (time slot and video conference room, without your contact details – see section 5).

Beyond this, we only pass on personal data if this is necessary to perform a contract, if there is a legal obligation to do so, or if another legal basis permits it.

We store personal data only for as long as is necessary for the respective purpose. It is then deleted, unless statutory retention periods, the establishment, exercise or defence of legal claims or other legally permissible reasons require further storage.

8. Your rights

Subject to the statutory requirements, you have in particular the following rights:

• access to the personal data we process about you (Art. 15 GDPR),
• rectification of inaccurate data (Art. 16 GDPR),
• erasure of your data (Art. 17 GDPR),
• restriction of processing (Art. 18 GDPR),
• data portability (Art. 20 GDPR), and
• objection to processing based on Art. 6(1)(e) or (f) GDPR (Art. 21 GDPR).

You can withdraw any consent you have given at any time with effect for the future. The lawfulness of processing carried out before the withdrawal remains unaffected.

To exercise your rights, a message to info@tran-digital.com is sufficient.

9. Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for our place of business is in particular:

10. Status of this policy

This privacy policy reflects the functionality of the website as of September 2026. It will be updated in the event of technical or legal changes.