1. Controller
ITandFactory GmbH
Auf der Krautweide 32
65812 Bad Soden am Taunus
Germany
Telephone: +49 (0) 6196 93490-0
E-mail:
info@itandfactory.com
2. Data protection officer
Boris Koppenhöfer
Koppenhöfer & Werner Beratungsgesellschaft mbH
Nikolausstraße 11
65343 Eltville am Rhein
E-mail: datenschutz@itandfactory.com
3. Hosting and server log files
When you visit our website, the hosting provider processes data that is technically required. This may include the following information:
- Browser type and version
- Operating system used
- Referrer URL
- Hostname of the accessing device
- Date and time of access
- IP address
The processing is carried out to provide our website securely and reliably and to maintain technical security.
The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is the secure, stable and technically correct provision of our website.
4. Contact and contact forms
If you contact us via a contact form or by e-mail, we process the data you provide in order to handle your enquiry.
This may include:
- Your name
- Your e-mail address
- Information you provide voluntarily in the message field
The data is used only to handle your enquiry and any subsequent communication with you. It is used for newsletters or other marketing purposes only if you have provided separate consent.
Depending on the content of your enquiry, processing is based on Article 6(1)(b) GDPR for pre-contractual measures or on our legitimate interest in handling enquiries under Article 6(1)(f) GDPR.
The data is deleted once your enquiry has been fully processed, provided that no statutory retention obligations prevent its deletion.
5. Cookies and consent management with Complianz
Our website uses cookies and similar technologies. We use the consent management tool Complianz to manage your consent.
When you first visit our website, you can choose which categories of cookies and services you wish to accept. Technically necessary cookies may be used without consent where they are required to provide functions you have expressly requested. For non-essential technologies, we obtain your prior consent.
The storage of or access to information on your device is governed by Section 25 TDDDG. As a general rule, non-essential technologies may only be used after consent has been given.
You can change your selection or withdraw your consent at any time via the cookie settings on our website.
6. Google Analytics
If you have provided consent via our cookie banner, we use Google Analytics for statistical analysis and to improve our website.
Google Analytics allows us, for example, to understand how visitors use our website, which pages they view and how they reach our website.
The provider is Google.
Google Analytics is activated only after you have provided the corresponding consent. The legal basis for processing personal data is Article 6(1)(a) GDPR. Section 25(1) TDDDG applies to the storage of or access to information on your device.
You can withdraw your consent at any time via the cookie settings.
German data protection supervisory authorities generally take the view that the use of Google Analytics requires effective prior consent and that Google must be identified transparently as a recipient.
7. YouTube
Videos from the YouTube platform may be embedded on our website.
When you open a page containing an embedded YouTube video, personal data may be transmitted to YouTube or Google. This may include your IP address, technical device information and information about your use of the embedded content.
Embedded content is loaded only after you have provided the corresponding consent through our consent management tool.
The legal basis is your consent under Article 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG.
You can withdraw your consent at any time via the cookie settings.
8. Links to social networks
Our website contains links to our profiles on platforms such as LinkedIn and YouTube.
These are external links and not social media plugins. Only when you click one of these links do you leave our website. The privacy policy of the respective platform operator then applies.
Simply displaying these links on our website does not transmit any data to the relevant social networks.
9. Google Maps
Our website may contain links to Google Maps.
Google Maps is not embedded directly in our website. Only when you click the relevant link are you redirected to Google Maps. From that point onwards, further data processing is carried out by Google in accordance with its own privacy policy.
10. Newsletter
If you subscribe to our newsletter, we process your e-mail address and, where applicable, any additional information you provide voluntarily.
The newsletter is sent only after you have provided your express consent. The legal basis is Article 6(1)(a) GDPR.
We use Mailchimp to send our newsletter.
A double opt-in process should be used to confirm your subscription. You can withdraw your consent at any time via the unsubscribe link included in each newsletter or by contacting us.
After you withdraw your consent, your data will be deleted from the newsletter distribution list unless another legal basis permits its continued storage.
11. Web fonts
Fonts used on this website are hosted locally. Loading these fonts therefore does not establish a connection to external font providers.
12. SSL/TLS encryption
For security purposes and to protect confidential content, our website uses SSL or TLS encryption.
You can recognise an encrypted connection, among other things, by the website address beginning with “https://”.
13. Your rights
Subject to the applicable statutory requirements, you have the following rights:
- Access to the personal data we process
- Rectification of inaccurate data
- Erasure of your data
- Restriction of processing
- Objection to certain processing activities
- Data portability
If processing is based on your consent, you may withdraw that consent at any time with effect for the future.
These information and data subject rights arise in particular from the GDPR. Article 13 GDPR also requires information about matters such as storage periods, recipients and existing data subject rights.
14. Right to lodge a complaint with a supervisory authority
You have the right to lodge a complaint with a data protection supervisory authority regarding the processing of your personal data.
For a company based in Hesse, the competent data protection supervisory authority is generally the Hessian Commissioner for Data Protection and Freedom of Information.
15. Currency of this Privacy Policy
We reserve the right to amend this Privacy Policy if legal requirements, our website or the services we use change.
Last updated: August 2026