Privacy Policy

Last updated: July 2026

1 · Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

Christian Schappeit
protagx — CRM & Digital Systems
Nußbaumallee 27, 14050 Berlin, Germany
E-mail: hello@protagx.com · Phone: +49 (152) 070-30802

2 · Hosting & server logs

This website is hosted by Netlify (Netlify, Inc., 512 2nd Street, Suite 200, San Francisco, CA 94107, USA). On every request the host automatically records information in so-called server log files, transmitted by your browser:

• anonymised / truncated IP address
• date and time of access
• name and URL of the file retrieved
• amount of data transferred and HTTP status code
• referrer URL (the previously visited page)
• browser and operating system used

This data serves the technical delivery of the site and the safeguarding of stability and security; it also forms the basis of the server-side, cookie-free reach measurement (see section 4). It is not merged with other sources, and no profiling or marketing analysis takes place.

Retention: log data is generally deleted or anonymised after 7 days at the latest, unless it is exceptionally needed longer to investigate a specific security incident.

Legal basis: Art. 6 (1)(f) GDPR — legitimate interest in the secure, stable and trouble-free operation of the website.

Processing & third-country transfer: a data-processing agreement pursuant to Art. 28 GDPR is in place with the host. As the provider is based in the USA, processing may take place outside the EU/EEA; this is based on the EU-U.S. Data Privacy Framework or on Standard Contractual Clauses under Art. 46 GDPR.

3 · Cookies

This website uses no cookies — neither first-party nor third-party, neither strictly necessary nor analytical.

Local display preference (localStorage)

If you use the light/dark display toggle, your choice (the value “light” or “dark”) is stored solely in your browser's local storage, and only in response to your active action. No personal data is stored in the process, and the setting is never transmitted to us or to third parties — it stays on your device and can be cleared at any time via your browser settings.

4 · Reach measurement with Netlify Analytics (server-side, cookie-free)

To determine aggregated usage statistics — such as page views, most-visited pages, data transferred and referrer sources — we use Netlify Analytics. The evaluation takes place exclusively server-side, on the basis of the server log data that arises anyway (see section 2).

• No cookie is set, no tracking JavaScript is loaded, and no value is stored in or read from your browser — no access to your device takes place.
• No individual user profiles are created; the evaluation serves aggregated reach and performance measurement.
• The evaluation takes place at the host (Netlify) as processor; the same data-processing agreement and the same third-country basis (EU-U.S. Data Privacy Framework or Standard Contractual Clauses) apply as under section 2.

Retention: the statistical evaluation covers a rolling 7-day window.

Legal basis: Art. 6 (1)(f) GDPR — legitimate interest in a data-minimal statistical evaluation and optimisation of the website. As this does not access your device (no cookies, no client storage), no consent under § 25 TDDDG is required.

No further analytics or tracking services — in particular Google Analytics or Plausible — are used.

5 · Fonts (self-hosted)

The typeface used (JetBrains Mono) is served locally from this website's own server. No external font services such as Google Fonts are embedded; therefore no data is transmitted to third-party servers for font delivery when the page loads.

6 · Contact by e-mail

If you contact us by e-mail, we process your details (e-mail address, message content) solely to handle your request. Legal basis: Art. 6 (1)(f) GDPR (answering your enquiry) or (b) where the enquiry concerns a contract. We delete this data as soon as it is no longer needed for the purpose and no statutory retention obligations apply.

7 · Transport security (SSL/TLS)

For security reasons this site uses TLS encryption (recognisable by “https://” and the padlock in your browser's address bar). This prevents the data transmitted between your browser and the server from being read by third parties.

8 · Your rights

Within the statutory framework you have the right at any time to:

• access to the data processed about you (Art. 15 GDPR)
• rectification of inaccurate data (Art. 16 GDPR)
• erasure (Art. 17 GDPR)
• restriction of processing (Art. 18 GDPR)
• data portability (Art. 20 GDPR)
• objection to processing (Art. 21 GDPR)

An informal message to hello@protagx.com is sufficient to exercise these rights.

9 · Right to lodge a complaint

You have the right to lodge a complaint with a data-protection supervisory authority. The competent authority at the controller's seat is in particular:

Berliner Beauftragte für Datenschutz und Informationsfreiheit
Alt-Moabit 59–61, 10555 Berlin, Germany
www.datenschutz-berlin.de

10 · Updates to this policy

This privacy policy reflects the status stated above. As the website develops — for instance if analytics tools are added in future — an update may become necessary. The current version is always available on this page.

This English version is provided for convenience; the German version is legally binding.