Privacy policy
Updated: 23 October 2026 · Website: madebyinfinitec.com
1. Controller and contact
Infinitec GmbH, Matzenberg 171, 66115 Saarbrücken, Germany. For questions about your data or to exercise your rights, contact newproject@madebyinfinitec.com or +49 681 988 003 06.
2. Website, hosting and technical logs
Our website, WordPress database and project mailbox are hosted by STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany. When you access the site, the infrastructure processes your IP address, time, requested content, browser and connection information, and potentially the referring page. This supports delivery, troubleshooting and attack prevention. The legal basis is Article 6(1)(f) GDPR: our legitimate interest in secure and functional operation.
STRATO states that IP addresses used for attack detection are retained for no more than seven days. Access logs available to us contain obscured IP addresses or hostnames and are provided for six weeks according to the provider. See STRATO's information about data protection and logs. Fonts and website images are served from our own hosting space.
3. Project enquiries and contact
The short form requires a company or brand, email address, product interest and description. The detailed brief may include additional contact, market, quantity, packaging and development information, and files you choose to attach. We use these details to review your enquiry, ask follow-up questions, prepare a project and, where applicable, work with you. Without the required details we cannot meaningfully process a form enquiry; email and telephone remain alternative contact routes.
Records are stored privately in our WordPress database. Our project team receives a notification. Relevant internal personnel and the technical hosting or email provider have access as necessary. Article 6(1)(b) GDPR applies to pre-contractual steps you request or a contract with you; Article 6(1)(f) applies to handling company enquiries through business contacts. Acknowledging the privacy notice is not marketing consent.
A detailed brief may receive preliminary internal prioritisation based on its contents. People carry out the final review; there is no solely automated decision to accept or reject a project. Any optional marketing choice is separate and is not required for an enquiry. Submitting the form does not automatically subscribe you to a newsletter.
4. Necessary browser functions and abuse prevention
Your measurement choice is stored locally so that we can respect it. Following a successful enquiry, its technical receipt reference is stored in the tab's session storage to display confirmation and prevent duplicate counting. Form contents are not included in these measurement stores. Session storage ends with the relevant browser session or tab. A receipt is considered for conversion counting for no more than one hour. Necessary WordPress login cookies may additionally be used for signed-in administrators.
To limit abuse, the server uses a keyed identifier derived from the IP address in a temporary rate counter. It is not used for visitor analysis and expires after one hour. The basis is Article 6(1)(f) GDPR for form security. Storage or access strictly necessary for expressly requested browser functions is based on section 25(2)(2) of the German TDDDG.
5. Optional usage and advertising measurement
Only after you choose “Allow measurement” do we count page views, topic and resource clicks, form starts, unsuccessful submissions, and email or telephone clicks on our server. These counters contain no visitor identifier or form contents. They are event totals, not recordings of individual people or screens. Source and campaign information is included where available and may be stored with an enquiry. An email or telephone click does not establish that an enquiry occurred.
After consent, source and campaign information is held in session storage and used for attribution for no more than 24 hours from capture. Your consent choice remains until you change it or clear browser storage. Aggregate counts may be retained for comparisons over time.
With the same optional measurement permission we load the Google Ads tag, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google receives technical information such as IP address, browser or device information, the visited page and, where present, advertising click identifiers. A successfully stored enquiry can be reported as a conversion with a technical reference to avoid duplicate counting. We do not send email addresses, message texts, briefing contents or files to Google. Enhanced conversions and ad personalisation are disabled in our integration.
Google may use cookies for this purpose and states a 90-day lifespan for cookies beginning with _gcl_. Processing by Google LLC in the USA is possible. Google describes the EU-US Data Privacy Framework and supplementary standard contractual clauses as transfer mechanisms. See Google Privacy, Google cookies and transfer safeguards.
The bases for optional measurement are your consent under Article 6(1)(a) GDPR and section 25(1) TDDDG for device storage or access. You can change your choice at any time through “Privacy settings” in the footer. Enquiries work without measurement consent. Withdrawal does not affect the lawfulness of processing before withdrawal.
6. Retention and recipients
Enquiry retention depends on how long the details are needed to handle the enquiry, pursue resulting cooperation, comply with statutory retention duties or resolve outstanding claims. Data no longer needed must be erased unless there is such a basis for continued storage. An ended enquiry does not justify indefinite retention for advertising. Contact us about the specific retention of your project. Technical browser and log periods are described separately above.
Disclosure is limited to relevant internal functions, the described technical providers, or recipients where required on a legal basis. Linked external websites have their own privacy notices.
7. Your rights
Subject to the applicable legal conditions, you have rights of access, rectification, erasure, restriction and portability. You may object to processing based on legitimate interests for reasons relating to your situation. Consent can be withdrawn at any time. Use the contact details above to exercise these rights.
You may complain to a data protection authority, particularly where you live, work or believe an infringement occurred. The Independent Data Protection Centre Saarland, Fritz-Dobisch-Str. 12, 66111 Saarbrücken, Germany, is a contact for our registered location.