Privacy Policy
Last updated: September 4, 2026 · Pursuant to GDPR and BDSG · Draft, subject to legal review before publication
Controller
The controller within the meaning of the General Data Protection Regulation (GDPR) and other national data protection laws and other data protection provisions is:
Invictix Systems — Felix Urban
Krähnockenstraße 35
58091 Hagen, Germany
Phone: 0151 524 00 254
Email: info@invictix.de
Website: www.invictix.de
General Information on Data Processing
We take the protection of your personal data very seriously and treat it confidentially and in accordance with statutory data protection regulations and this privacy policy. Personal data is any information relating to an identified or identifiable natural person.
We collect, process and use personal data only where a legal basis exists or you have consented to the processing. The legal bases arise in particular from:
- Art. 6(1)(a) GDPR — Consent of the data subject
- Art. 6(1)(b) GDPR — Performance of a contract or pre-contractual measures
- Art. 6(1)(c) GDPR — Compliance with a legal obligation
- Art. 6(1)(f) GDPR — Legitimate interests
Hosting and Technical Infrastructure
This website is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA, and delivered as a static site (no application server or database behind the website). Vercel operates a global edge network with server locations including the EU. Data transfer to the USA is based on Standard Contractual Clauses (Art. 46(2)(c) GDPR) and the EU-U.S. Data Privacy Framework. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in secure and efficient provision).
SSL/TLS Encryption
All data transfers between your browser and our servers are encrypted via HTTPS (TLS 1.2 or higher). This applies to both the homepage and the platform. You can recognise an encrypted connection by the lock symbol in your browser address bar and the "https://" prefix.
Cookies
We currently use only technically necessary cookies on this website (e.g. storing the selected language DE/EN and the cookie settings themselves). We do not currently integrate any analytics tool (no Google Analytics or comparable) or advertising cookies.
Cookies used:
- Language cookie — storage of the selected language (DE/EN)
- Cookie settings — storage of your choice made in the cookie banner
We nevertheless display a cookie banner with the categories Necessary, Analytics and Marketing so that consent can be obtained if we introduce additional, non-essential cookies in the future. The Analytics and Marketing categories are currently inactive.
Server Log Files
The provider of these pages automatically collects and stores information in server log files, which your browser automatically transmits to us:
- Browser type and version
- Operating system used
- Referrer URL (previously visited page)
- Hostname of the accessing device
- Time of the server request
- IP address (anonymised after 7 days)
These data cannot be attributed to specific persons and are not merged with other data sources. Storage is based on Art. 6(1)(f) GDPR (legitimate interest in the smooth operation and security of the website). Log files are automatically deleted after 30 days.
Contact Form and Email Contact
The contact form on this website is technically handled via the service Formspree (Formspree, Inc., USA). If you use the form or contact us by email, the data you provide (name, company, email address, phone number, topic, message content) is transmitted to Formspree and delivered to us as an email in order to process your enquiry and for any follow-up questions.
The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures) and Art. 6(1)(f) GDPR (legitimate interest in responding to enquiries and in operating a technically reliable form). The transfer of data to Formspree in the USA is based on Standard Contractual Clauses (Art. 46(2)(c) GDPR). Data is deleted once the purpose ceases to apply and no statutory retention obligations exist.
Newsletter
If you subscribe to our newsletter, your email address will be stored and used exclusively for sending the newsletter. The legal basis is your consent pursuant to Art. 6(1)(a) GDPR.
- Registration via the registration form on this website (simple opt-in)
- You can unsubscribe at any time via the unsubscribe link in each email or by writing to us
- After unsubscription, your email address is deleted immediately
Processors and Third-Party Providers
We use the following processors with whom data processing agreements (DPA) pursuant to Art. 28 GDPR have been concluded:
Vercel Inc. (Website Hosting)
Purpose: Hosting and provision of the website invictix.de
Location: USA (EU edge locations available)
Safeguard: Standard Contractual Clauses + EU-U.S. Data Privacy Framework
STRATO GmbH (Domain, Email Infrastructure)
Purpose: Domain management for invictix.de, DNS
Location: Germany
Safeguard: Data processing agreement pursuant to Art. 28 GDPR, processing within Germany
Microsoft Ireland Operations Limited (Microsoft 365 — Email)
Purpose: Business email mailboxes under invictix.de
Location: EU (Ireland)
Safeguard: Data processing agreement pursuant to Art. 28 GDPR with Microsoft
Formspree, Inc. (Contact Form)
Purpose: Technical delivery of contact form messages by email
Location: USA
Safeguard: Standard Contractual Clauses (Art. 46(2)(c) GDPR)
Disclosure of Personal Data
Your personal data is generally not transmitted to third parties, except:
- You have given your express consent (Art. 6(1)(a) GDPR)
- Disclosure is necessary for contract performance (Art. 6(1)(b) GDPR)
- There is a legal obligation to disclose (Art. 6(1)(c) GDPR)
- Disclosure is necessary for legitimate interests and your interests do not override (Art. 6(1)(f) GDPR)
Retention Period and Deletion Deadlines
Personal data is deleted or blocked as soon as the purpose of storage ceases to apply. In addition, the following retention periods apply:
Your Rights as a Data Subject
You have the following rights with regard to personal data concerning you:
Right of access (Art. 15 GDPR)
You may request information about your personal data processed by us, including the processing purpose, data category, recipients and planned retention period.
Right to rectification (Art. 16 GDPR)
You may request the correction of inaccurate or the completion of incomplete personal data.
Right to erasure (Art. 17 GDPR)
You may request the deletion of your personal data, provided no statutory retention obligations exist.
Right to restriction (Art. 18 GDPR)
You may request restriction of processing, e.g. where you dispute the accuracy of data or processing is unlawful.
Right to data portability (Art. 20 GDPR)
You may request that we provide your personal data in a structured, commonly used and machine-readable format.
Right to object (Art. 21 GDPR)
You have the right to object at any time, on grounds relating to your particular situation, to processing based on Art. 6(1)(e) or (f) GDPR. We will then no longer process your data unless we can demonstrate compelling legitimate grounds.
Right to withdraw consent (Art. 7(3) GDPR)
You may withdraw consent given at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.
To exercise your rights, please contact: info@invictix.de
Right to Lodge a Complaint
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, your place of work or the place of the alleged infringement, if you consider that the processing of personal data relating to you infringes the GDPR.
Competent supervisory authority:
The competent authority depends on the federal state of the company headquarters. An overview can be found at:
www.bfdi.bund.deChanges to this Privacy Policy
We reserve the right to amend this privacy policy so that it always complies with current legal requirements or to implement changes to our services. The new privacy policy will then apply to your next visit.
Last updated: September 4, 2026