Privacy notice

The controller within the meaning of the General Data Protection Regulation (GDPR) and other data protection provisions is:

Emmy Solutions GmbH
Neubrückstraße 1
40213 Düsseldorf
Germany
Phone: +49 211 54 230 600
Email: info@emmysoft.com

You can reach our data protection officer at:

Krüger Rechtsanwaltsgesellschaft mbH
Bahnhofstraße 44–46
65185 Wiesbaden
Germany
Phone: +49 (0) 611 23 60 176–0
Email: kanzlei@legal-krueger.de

Legal bases for processing personal data

As Art. 13 GDPR requires, we would like to inform you of the legal bases of our data processing:

• Where we ask for your consent, we rely on Art. 6(1)(a) in conjunction with Art. 7 GDPR.
• Where we process your data to provide our services, perform contracts or respond to your enquiries, we rely on Art. 6(1)(b) GDPR.
• To comply with our legal obligations, we rely on Art. 6(1)(c) GDPR.
• Where processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller, the legal basis is Art. 6(1)(e) GDPR.
• Sometimes we need to process your data to protect the legitimate interests of our company or of a third party – of course only where your rights do not override them. In such cases our basis is Art. 6(1)(f) GDPR.
• Should the vital interests of the data subject or of another natural person require the processing of personal data, we use Art. 6(1)(d) GDPR as the basis.

Erasure of data and storage period

We follow the principles of data minimisation under Art. 5(1)(c) GDPR and storage limitation under Art. 5(1)(e) GDPR. We store your personal data only for as long as is necessary to achieve the purposes stated here or as required by the retention periods laid down by law. Once the respective purpose no longer applies or these retention periods have expired, the data concerned is deleted as soon as possible.

External links

This website may contain links to third-party websites or to other websites for which we are responsible. If you follow a link to a website outside our responsibility, please note that such websites have their own privacy information. We accept no responsibility or liability for these third-party websites and their privacy notices. Before using these websites, please therefore check whether you agree with the privacy policies there.

You can recognise external links either because they are shown in a slightly different colour from the rest of the text or underlined. Your cursor indicates an external link when you move it over one. Only when you click an external link is your personal data transferred to the link target. The operator of the other website receives in particular your IP address, the time at which you clicked the link, the page on which you clicked it and further information that you can find in the respective provider's privacy notice.

Please also note that individual links may lead to data being transferred outside the European Economic Area. This could give foreign authorities access to your data, and you may have no legal remedies against such access. If you do not want your personal data to be transferred to the link target, or to be exposed to unwanted access by foreign authorities, please do not click on links.

We would like to explain which rights you have with regard to your personal data. These rights are laid down in the General Data Protection Regulation (GDPR):

• Right of access (Art. 15 GDPR): You may find out which data we hold about you, why we store it and to whom it is disclosed. For a request for access that is not made in writing, we ask for your understanding that we may require evidence from you that you are the person you claim to be.
• Right to rectification (Art. 16 GDPR): If something about your data is incorrect, you can ask us to correct it.
• Right to erasure (Art. 17 GDPR): You can demand that we delete your data if there is no longer a good reason to store it.
• Right to restriction of processing (Art. 18 GDPR): Sometimes you may not want us to delete your data completely, but not to actively use it either. In that case you can ask us to restrict the processing of your data.
• Right to object (Art. 21 GDPR): If we use your data for certain purposes, you can object to this. Particularly in the case of direct marketing, you always have the right to say no.
• Right to data portability (Art. 20 GDPR): You can receive your data in a commonly used format and have it transferred to another service.
• Right to lodge a complaint with a supervisory authority: If you believe that we are not handling your data properly, you can complain to a data protection authority, in particular in the member state of your habitual residence, your place of work or the place of the alleged infringement.
• Right to withdraw consent: If you have allowed us to use your data, you can withdraw this permission at any time.

Our website is hosted by:

cyberwebhosting.de
Grevenweg 72
20537 Hamburg
Germany

When you visit our website, we automatically collect and store information in so-called server log files, which your browser transmits automatically to our server or to the server of our hosting company. These are:

• IP address of the visitor's device
• Device used
• Host name of the accessing computer
• Visitor's operating system
• Browser type and version
• Name of the file retrieved
• Time of the server request
• Amount of data
• Whether the retrieval was successful

This data is not combined with other data sources.

The processing is necessary to provide the website technically, to ensure its security and stability and to trace technical faults. The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in providing our website securely and in working order.

Where the website is accessed in order to enter into contract negotiations with us or to conclude a contract, Art. 6(1)(b) GDPR serves as an additional legal basis.

Insofar as the hosting company processes personal data on our behalf, it does so on the basis of a data processing agreement pursuant to Art. 28 GDPR.

On our website we use only the local storage and session storage entries described below. No third parties are involved.

The entries are only set when the visitor actively changes the language or display mode using the function provided for it. They are not used for analytics, marketing or advertising purposes and are not transmitted to third parties.

Storing the entries is necessary to provide the language or display function expressly requested by the visitor (Section 25(2) no. 2 TDDDG). Insofar as personal data is processed in the process, the processing is based on Art. 6(1)(f) GDPR. The legitimate interest lies in providing the website in a user-friendly and technically reliable way.

Consent via a consent tool is not required for this.

As required by law, we have provided a phone number and an email address on our website. Data transmitted to us by these means is stored automatically so that we can handle the enquiry or contact the person making it. We do not pass this data on to third parties without consent.

If you contact us by phone or by email for pre-contractual or contractual purposes, the processing of personal data is based on Art. 6(1)(b) GDPR. For all other contacts on your part, our processing of personal data is based on our legitimate interest pursuant to Art. 6(1)(f) GDPR.

You can get in touch with us through a contact form on our website. In doing so, we process the data you provide, in particular:

• name,
• company,
• business email address,
• optionally your phone number,
• your interest in our services and
• the content of your message.

The processing serves to handle and answer your enquiry. Insofar as your enquiry is aimed at concluding or performing a contract, the processing is based on Art. 6(1)(b) GDPR. Otherwise the processing is based on Art. 6(1)(f) GDPR. Our legitimate interest lies in handling contact enquiries and in initiating and maintaining business relationships.

The details in the contact form are required insofar as they are marked as mandatory fields. Without them we may not be able to handle your enquiry.

The data is deleted as soon as your enquiry has been dealt with conclusively and no statutory retention obligations prevent deletion.

We have a profile on LinkedIn. When you visit our profile, your IP address and further information about the devices you use are processed, among other things, which makes it possible to attribute IP addresses to individual users. We have no influence on this data processing. Please note that you use our profile on the social network and its functions on your own responsibility. Details of the data processing can be found in the operator's privacy notice.

The provider is LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland. LinkedIn uses advertising cookies.

Detailed information on the handling of personal data can be found in LinkedIn's privacy policy: https://www.linkedin.com/legal/privacy-policy.

The purpose of our LinkedIn profile is to extend our presence on the internet and so to become better known. The legal basis is therefore legitimate interest pursuant to Art. 6(1)(f) GDPR. For the processing carried out by the social networks themselves, please refer to their own legal bases (e.g. consent pursuant to Art. 6(1)(a) GDPR), which you can find in their respective privacy notices.

In principle we are jointly responsible with the social media platform for the data processing triggered when you visit our profile. You can therefore assert your data subject rights under Art. 15 et seq. GDPR both against the social media platform and against us. Please note, however, that we have no influence on the data processing by the social media platform.

Using the service may involve a transfer of data to a third country (USA). LinkedIn is certified under the Data Privacy Framework and is therefore covered by an adequacy decision of the European Commission.

This privacy notice is currently valid and dated 9 November 2026.

As our website and the offers on it evolve, or because of changed legal or regulatory requirements, it may become necessary to amend this privacy notice.