Privacy Policy

1. Controller

fusionDev GmbH

Hauptstraße 101, 79297 Winden im Elztal, Germany

Represented by the managing director Daniel Bucher

E-Mail: kontakt@fusiondev.info

No data protection officer has been appointed, as the legal requirements for a mandatory appointment are not met.

2. Enquiries via contact form and project wizard

Via the contact form we collect your name, email address, and your message, plus optionally your company and project type. The project wizard additionally asks for company size, project context, timeline, and product-specific requirements. We process these details solely in order to handle your enquiry and to reply to you.

The legal basis is Art. 6(1)(b) GDPR insofar as your enquiry is aimed at entering into or performing a contract, and otherwise Art. 6(1)(f) GDPR. Our legitimate interest lies in answering enquiries.

Your name and email address are required so that we can reply, and in the contact form your message as well. Without these details we cannot process your enquiry. All other details are voluntary, and omitting them has no disadvantages for you.

Your enquiry is stored in our project system and additionally delivered by email, so that it is not lost if one of the systems fails.

Retention: Enquiries submitted via the contact form are deleted automatically no later than 30 days after receipt, unless a business contact arises from them. Wizard enquiries, and enquiries that turn into a collaboration, are kept until the contract has been completed or until you object, for a maximum of 24 months. Statutory retention obligations remain unaffected.

3. Appointment booking

When you book an appointment we collect your name, email address, and the selected time slot. We process these details in order to arrange and hold the appointment.

The legal basis is Art. 6(1)(b) GDPR.

Name and email address are required. Without them we cannot arrange the appointment. Additional details such as notes on the appointment are voluntary.

Retention: until six months after the appointment.

4. Protection against automated bulk submissions

When our forms are opened and submitted, we process your IP address briefly and exclusively in memory in order to limit the submission rate. The IP address is not stored. In addition, your browser solves a computational puzzle issued and verified by our own server, which takes the place of a conventional captcha. No third-party service is embedded, no cookie is set, and no characteristic of your device is read.

We also automatically check every enquiry for typical patterns of machine-generated bulk submissions. Besides the details from the form, this evaluates the time span between opening the form and submitting it. Enquiries classified as automated are not accepted.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in preventing abuse of the forms for automated bulk sending.

5. Email logs

Our servers log the sending and receipt of emails. The logs record sender and recipient address, time, and delivery result.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in being able to trace delivery problems and detect abuse, such as unauthorised login attempts against our mail server.

Retention: 14 days, followed by automatic deletion.

6. Audience measurement

We use Plausible Analytics on our own infrastructure. It works without cookies and without cross-device recognition.

We record page view, referrer, device type, browser, operating system, and country, plus individual events: opening the wizard, submitting an enquiry, and clicks on links to external websites including the target address. Beyond that, we store for these events only the selected topic and the page language, no name, no email address, and no free text.

Counting runs via our own domain. Your browser does not connect to any third-party server in the process. Your IP address is not stored: it is used solely to determine the country and to recognise repeat visits within a single day, and is then discarded. We cannot link the data to you personally.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in designing our website to meet actual needs.

Retention: The statistics derived from visits contain no personal data and are stored permanently. The intermediate values used to recognise repeat visits are discarded after 24 hours at the latest.

7. Server log files

When you access our website, our web server automatically processes access data: IP address, date and time, requested resource, HTTP status code, amount of data transferred, referrer, and user agent.

The IP address is written to the log file in truncated form only: the last group of digits is replaced by a zero, so the entry can no longer be traced to an individual connection. Only the network the request came from remains visible.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure and stable operation of the website and in detecting and defending against attacks and malfunctions.

Retention: The log files are limited to a fixed total size and are rotated continuously, overwriting the oldest entries. There is no fixed retention period, as the truncated entries can no longer be attributed to any person.

8. Recipients and storage location

We operate the mail server, project system, appointment booking, and audience measurement ourselves on a dedicated server in Germany.

The server is provided by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. Hetzner Online GmbH processes personal data as a processor under a contract pursuant to Art. 28 GDPR, exclusively on our instructions. There are no other recipients.

No data is transferred to third countries outside the European Union.

Within our company, access to your data is limited to the people who need it in order to handle your enquiry.

9. Storage on your device

This website sets no cookies, neither for marketing nor for tracking or analytics. A consent banner is therefore not required.

If you manually switch the display to light or dark, only that choice is stored locally in your browser (localStorage, key "theme"). It is not transmitted to us and contains no personal data. It is deleted as soon as you clear your browser's site data.

This storage is strictly necessary for the function you explicitly requested and is therefore exempt from consent under Sec. 25(2) no. 2 TDDDG.

10. Your rights

You have the right to obtain access to the data stored about you (Art. 15 GDPR), to rectification of inaccurate data (Art. 16 GDPR), to erasure (Art. 17 GDPR), to restriction of processing (Art. 18 GDPR), and to data portability (Art. 20 GDPR).

An informal message to kontakt@fusiondev.info is sufficient to exercise these rights.

11. Right to object

You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is based on Art. 6(1)(f) GDPR (Art. 21(1) GDPR).

For us this concerns the audience measurement, the server log files, the email logs, and the protection against automated bulk submissions, as well as the handling of enquiries insofar as it is based on Art. 6(1)(f) GDPR.

If you object, we will no longer process the data concerned unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms.

An informal message to kontakt@fusiondev.info is sufficient to object.

12. Right to lodge a complaint

You have the right to complain to a data protection supervisory authority about the processing of your personal data. The authority responsible for us is:

The State Commissioner for Data Protection and Freedom of Information Baden-Württemberg (LfDI BW), Lautenschlagerstraße 20, 70173 Stuttgart, Germany

13. Automated decision-making

No automated decision-making, including profiling, takes place that produces legal effects concerning you or similarly significantly affects you (Art. 22 GDPR).

Last updated: August 2026