Privacy Policy

1. Data Controller

BackupExperts
Owner: Ananda Bhatta
Lugauer Str. 53
09376 Oelsnitz/Erz.
Germany

Phone: +49 37298 909061
Email: info@backupexperts.de
Website: www.backupexperts.de

2. Overview of Data Processing

The following overview summarizes the key points of this privacy policy and serves as guidance:

2.1 Types of Data Processed

• Contact data (email address, name, phone number)
• Content data (inquiries, messages)
• Usage data (visited web pages, duration of visit)
• Meta/communication data (IP addresses, device information)

2.2 Categories of Data Subjects

• Website visitors
• Users of our services
• Communication partners

2.3 Purposes of Processing

• Providing our website and services
• Contact inquiries and communication
• Security measures
• Analytics/marketing

3. Legal Basis

We process personal data only when one of the following legal bases applies:

• Consent (Art. 6(1)(a) GDPR): for cookie usage and marketing
• Contract (Art. 6(1)(b) GDPR): for service delivery
• Legitimate Interest (Art. 6(1)(f) GDPR): for website operation and security
• Legal Obligation (Art. 6(1)(c) GDPR): for statutory retention requirements

4. Website Visit and Hosting

4.1 Automatic Data Collection

When visiting our website, the following information is automatically collected:

• IP address of the accessing computer
• Date and time of access
• Name and URL of the retrieved file
• Website from which access occurs (referrer URL)
• Browser used and operating system if applicable
• Name of the access provider

Legal basis: Legitimate interest (Art. 6(1)(f) GDPR) for providing and securing the website.

Retention: Log files are automatically deleted after 7 days.

4.2 Hosting

Our website is hosted by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. The data centres are located in Germany and Finland (EU). The access data mentioned in this section is processed there. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in the secure and efficient operation of the website). A data processing agreement (DPA) pursuant to Art. 28 GDPR is in place with Hetzner.

5. Cookies and Similar Technologies

5.1 What are Cookies?

Cookies are small text files stored on your device when you visit our website. They help us make the website functional and improve your user experience.

5.2 Cookie Categories

Necessary Cookies

• cookieConsent: Stores your cookie preferences
• session: Ensures basic website functions

Legal basis: Legitimate interest (Art. 6(1)(f) GDPR)

Retention: Session cookies until browser closure, persistent cookies up to 1 year

Analytics Cookies (only with consent)

• Matomo (self-hosted at emp.backupexperts.de): Web analytics only after consent; IP addresses are anonymized; Do Not Track is honored; no cookies before consent.
• Retention: By default up to 13 months (anonymized statistical data)

Legal basis: Consent (Art. 6(1)(a) GDPR)

5.3 Cookie Management

You can adjust your cookie settings at any time through our cookie banner or change them in your browser settings. Disabling cookies may affect website functionality.

6. Contact

6.1 Contact Form and Email

When contacting us via our contact form or email, we process:

• Name and email address
• Phone number (optional)
• Message content
• Time of message

Legal basis: Legitimate interest (Art. 6(1)(f) GDPR) for processing inquiries

Retention: Contact data is deleted after completion of processing, at latest after 3 years

Your inquiries are processed exclusively on our own infrastructure. No data is passed on to external third parties in this process.

7. External Services and Third Parties

7.1 Google Fonts

The fonts used on this website (Google Fonts) are embedded locally. When you visit the website, no connection to Google's servers is established.

7.2 Content Delivery Network (CDN)

External CDN services may be used to optimize loading times. Your IP address is transmitted in this process.

Legal basis: Legitimate interest (Art. 6(1)(f) GDPR) for website optimization

7.3 Appointment Booking (Microsoft Bookings)

For online appointment booking we use Microsoft Bookings, a service of Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA. No data is transferred to Microsoft simply by visiting our booking page. Only when you click "Book a call" are you redirected, in a new tab, to the booking page hosted by Microsoft. There, your personal data (name, email address, phone number where applicable) and your IP address are transmitted to Microsoft and processed.

Microsoft is a US company. Our Microsoft 365 tenant is assigned to the EU Data Boundary; booking data is stored in data centres in the EU/EFTA (Exchange Online, "European Union\EFTA" region). However, a transfer to third countries, in particular the USA (for example for support, diagnostics or security purposes under Microsoft's documented EU Data Boundary exceptions), cannot be fully excluded. Microsoft is certified under the EU-US Data Privacy Framework; in addition, Standard Contractual Clauses pursuant to Art. 46 GDPR are in place as appropriate safeguards for such transfers.

Legal basis: Art. 6(1)(b) GDPR (taking steps prior to entering into a contract). A data processing agreement pursuant to Art. 28 GDPR is in place with Microsoft. Further information: privacy.microsoft.com/en-us/privacystatement

8. Remote Access Services

For our remote access services, a separate Remote Access Privacy Policy applies in addition to this general privacy policy.

9. Data Security

9.1 Technical Measures

• SSL/TLS encryption for all data transmissions
• Regular security updates
• Access restrictions and user controls
• Regular backups

9.2 Organizational Measures

• Employee training on data protection
• Confidentiality agreements
• Regular security audits
• Incident response procedures

10. Your Rights

You have the following rights regarding your personal data:

• Right of access (Art. 15 GDPR): Information about processed data
• Right to rectification (Art. 16 GDPR): Correction of incorrect data
• Right to erasure (Art. 17 GDPR): Deletion under certain conditions
• Right to restriction (Art. 18 GDPR): Restriction of processing
• Right to data portability (Art. 20 GDPR): Transfer to another controller
• Right to object (Art. 21 GDPR): Objection to processing
• Withdrawal of consent (Art. 7 GDPR): Possible at any time

10.1 Exercising Your Rights

To exercise your rights, contact us at:

• Email: info@backupexperts.de
• Phone: +49 37298 909061

11. Right to Lodge a Complaint

You have the right to lodge a complaint with a data protection supervisory authority about our processing of personal data.

Competent authority: The state data protection authority responsible for your place of residence

Supervisory authority responsible for us: Saxon Data Protection and Transparency Officer (Sachsische Datenschutz- und Transparenzbeauftragte), Bernhard-von-Lindenau-Platz 1, 01067 Dresden, Germany, www.datenschutz.sachsen.de.

12. International Data Transfer

Transfer of your data to third countries outside the EU/EEA only occurs:

• With your explicit consent
• For contract performance
• When an adequacy decision exists
• With appropriate safeguards (e.g., standard contractual clauses)

13. Data Protection Impact Assessment

For processing operations with high risk to the rights and freedoms of data subjects, we conduct data protection impact assessments.

14. Automated Decision-Making

We do not use automated decision-making or profiling within the meaning of Art. 22 GDPR.

15. Changes to the Privacy Policy

• This privacy policy may be updated due to legal changes
• The current version is always available on our website
• We will inform you separately of significant changes
• Date of last change: June 12, 2026

16. Contact Data Protection Officer

For questions about data protection, you can contact us:

• Email: datenschutz@backupexperts.de
• Phone: +49 37298 909061
• Mail: BackupExperts, Data Protection, Lugauer Str. 53, 09376 Oelsnitz/Erz., Germany