Privacy at Steinborn IT
Only the data we need. Nothing more.
The controller is Steinborn IT GmbH, represented by Pascal Eric Steinborn, Scheidter Str. 13, 66123 Saarbrücken, Germany. We keep the public site first-party and process personal data only as far as necessary.
No advertising or profiling
The website uses no analytics, no advertising trackers, no profiling pixels, no Web Storage and no third-party scripts. IP addresses, times and security events are processed only as necessary to operate and protect the service.
Cookies for preferences only
The first-party preference cookies __Host-sit-config and __Host-sit-navigation remember your language, interface choices and navigation state for at most one year. None carries tracking data. Strictly necessary functions use Section 25(2)(2) TDDDG.
Only for the business relationship
Where applicable, contract preparation, licensing, business communication and invoicing are based on Article 6(1)(b) GDPR. Legal duties are based on Article 6(1)(c). Website security and business-contact handling are based on Article 6(1)(f). Data reaches contracted providers, professional advisers or authorities only where required. We process no card or payment-provider data. Customer work uses only the data needed for the agreed task. Where we process personal data on the customer’s instructions, the general DPA and engagement description apply. Reports and analysis results are handed over to the customer. Working copies are deleted when unnecessary and are not kept as a project archive.
Access, correction, deletion and objection
Subject to statutory conditions, data subjects may request access, rectification, erasure, restriction and portability, object to legitimate-interest processing and complain to the competent supervisory authority. Privacy requests go to info@steinborn.it.
Business contacts are retained only while needed for the business purpose. Statutory retention is normally 8 years for invoices and accounting vouchers, 10 years for books and financial statements, and 6 years for commercial or business correspondence. Periods generally start at calendar-year end. Mandatory legal extensions apply. We retain only the records actually required and restrict their use to the relevant obligation. We do not maintain a general archive of customer content.