DEEN
Free assessment

Privacy policy

This English version is provided for convenience. Only the German version is legally binding.

Last updated: October 2026

1. Data protection at a glance

General information

The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to identify you personally.

Data collection on this website

Data processing on this website is carried out by the website operator. You will find the operator's contact details under "Controller" and in the Imprint. Some of your data is collected when you provide it to us, e.g. via the contact form. Other data is collected automatically by the server when you visit the website (mainly technical data such as browser, operating system or the time the page was accessed).

No third-party services when pages are loaded

This website does not load any content from external servers when it is accessed. Fonts, scripts and images are delivered exclusively from our own web server. No analytics, tracking or marketing services are used.

2. Hosting

This website is hosted by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany (hereinafter "Hetzner"). The servers are located in Germany or the EU. Hetzner processes, on our behalf, the data generated when the website is visited (in particular server log files, see below). The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in the secure, fast and reliable provision of the website. A data processing agreement (DPA) pursuant to Art. 28 GDPR is in place with Hetzner.

E-mail

Our e-mail server runs on our own server rented from Hetzner in Germany. E-mails you send us, as well as enquiries submitted via the contact form, are stored there. This processing is covered by the data processing agreement with Hetzner.

3. General information and mandatory information

Controller

Jeremias Manas
Triq Ir-Rabat 3, Munxar, Gozo, Malta
Phone: +49 176 32368943
E-mail: info@dabois.de

The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data.

Storage period

Unless a more specific storage period is stated in this policy, your personal data will remain with us until the purpose of the processing no longer applies. If you assert a legitimate request for erasure or withdraw your consent, your data will be erased unless we have other legally permissible grounds for storing it (e.g. retention periods under tax or commercial law). In the latter case, the data will be erased once these grounds no longer apply.

Your rights

Within the framework of the applicable statutory provisions, you have the following rights at any time:

  • Access to your stored personal data (Art. 15 GDPR)
  • Rectification of inaccurate data (Art. 16 GDPR)
  • Erasure ("right to be forgotten", Art. 17 GDPR)
  • Restriction of processing (Art. 18 GDPR)
  • Data portability (Art. 20 GDPR)
  • Withdrawal of consent given, with effect for the future (Art. 7(3) GDPR)

To exercise these rights, simply contact us at the e-mail address given above.

Right to object (Art. 21 GDPR)

Where data processing is based on Art. 6(1)(e) or (f) GDPR, you have the right to object to the processing of your personal data at any time on grounds relating to your particular situation. If you object, we will no longer process the personal data concerned unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims. Where your personal data is processed for direct marketing purposes, you have the right to object to such processing at any time; the data will then no longer be used for this purpose.

Right to lodge a complaint with a supervisory authority

Without prejudice to any other remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, your place of work or the place of the alleged infringement (Art. 77 GDPR). The supervisory authority responsible for us is the Information and Data Protection Commissioner (IDPC), Malta.

SSL/TLS encryption

For security reasons and to protect the transmission of confidential content, such as the enquiries you send us via the contact form, this site uses SSL/TLS encryption. You can recognise an encrypted connection by the fact that the browser's address bar begins with "https://" and by the padlock symbol in your browser bar.

4. Data collection on this website

Cookies and local storage

This website does not set any cookies and does not use any analytics or tracking technologies. The only exception: if you close the "No cookies here" notice, this is recorded in your browser's session storage (sessionStorage) so that the notice does not reappear on every page. This entry contains no personal data, is not transmitted to us and is deleted automatically when you close the browser tab. This storage is technically necessary (§ 25(2) no. 2 TDDDG, German Telecommunications Digital Services Data Protection Act). Should cookies or comparable technologies that are not technically necessary (e.g. for analytics or advertising) be used in future, this will only take place with your express consent pursuant to § 25(1) TDDDG and Art. 6(1)(a) GDPR. In that case, this policy will be supplemented accordingly.

Server log files

The hosting provider automatically collects and stores information in so-called server log files, which your browser transmits automatically: browser type and version, operating system used, referrer URL, host name of the accessing computer, time of the server request and IP address. This data serves to ensure the trouble-free operation and security of the website; the legal basis is Art. 6(1)(f) GDPR. This data is not merged with other data sources. The log files are deleted automatically after a short period unless they are needed to investigate a security incident.

Contact form and enquiries by e-mail or phone

If you contact us via the contact form, by e-mail or by phone, we process the data you provide in order to handle your enquiry and any follow-up questions. Via the contact form, this data is: name, company, e-mail address, your request and, if provided, your phone number and the topics you have selected. Mandatory fields are marked; without them we cannot process your enquiry.

The legal basis is Art. 6(1)(b) GDPR, insofar as your enquiry is related to the performance of a contract or is necessary for taking pre-contractual steps. In all other cases, the processing is based on our legitimate interest in the effective handling of enquiries addressed to us (Art. 6(1)(f) GDPR).

We do not pass this data on to third parties without your consent. It is technically processed exclusively by our hosting provider Hetzner (see above). The data remains with us until you ask us to erase it or the purpose of storage no longer applies (e.g. once your enquiry has been fully dealt with). Mandatory statutory provisions, in particular retention periods, remain unaffected.

Transmission of form enquiries

Enquiries from the contact form are delivered by our web server via an encrypted connection (TLS) through our own e-mail server to our mailbox. Both run on our server at Hetzner in Germany. The data does not leave Germany or the EU in the process. No external mailing service is used.

5. Data processing in the context of client projects

This section does not concern visitors to this website, but processing that we carry out on behalf of our clients. We disclose it for reasons of transparency. In each case, it is based on a data processing agreement (DPA) pursuant to Art. 28 GDPR with the client.

Platforms used

Depending on the project, we use the following platforms, among others:

  • n8n: workflow automation, operated on servers in Germany or the EU
  • Make (Celonis group): cloud automation for standard applications
  • Retool: internal tools and dashboards
  • Bubble: web applications and customer portals
  • FlutterFlow: mobile apps
  • Supabase / Xano: backend and database services

Where necessary, data processing agreements are concluded with the providers used in each project. We prefer providers with server locations in Germany or the EU. Server locations and data flows are documented for each project and agreed with the client.

Use of AI services

Where AI services are used in client projects (e.g. for pre-qualifying enquiries or in customer service), we determine for each project which data is transmitted to which provider. We prefer services operated in compliance with the GDPR with data processing in the EU and only transmit the data that is necessary for the task in question. Where offered by the provider, the use of the data for training AI models is contractually excluded.