Privacy Policy

1. General Information

The following information explains the nature, scope and purposes of the processing of personal data when you visit this website. Personal data is any data by which you can be personally identified.

Protecting your privacy when you visit our website is an important concern for us and of crucial importance for the future of doing business on the internet. Personal data is collected on our website only to the extent that is technically and organizationally necessary.

Our website can be visited without registration. We do not use any analytics or tracking services and do not statistically evaluate your behavior on this website. Personal data, in particular your name, address or email address, is collected only if you provide it to us yourself – for example, via the contact form. Your data is not passed on to third parties without your consent; the only exception is the technical dispatch of emails via the email account of AUPOS IQ GmbH (Section 8.1).

2. Controller

The controller responsible for data processing on this website is:

CSG AUPOS Software Solutions GmbH
Zur Steinkuhle 8
48341 Altenberge
Phone: +49 2505 93877-00
Email: info@aupos.de

Further information about the company can be found in the Legal Notice.

3. Data Protection Officer

No data protection officer has been appointed, as the legal requirements for doing so are not met. For data protection questions, please contact the controller named in Section 2 or email us directly at datenschutz@aupos.de.

4. Types of Data Processed and Purposes of Processing

4.1 Categories of Personal Data

• ›Access data and server logs (such as IP address, date and time of the request, referrer URL, browser identifier)
• ›Communication data (such as email address, phone number), if you provide it in the contact form or when subscribing to the newsletter
• ›Content data (what you enter in the form), if you provide it
• ›Usage data (pages visited), to the extent recorded in the server logs

4.2 Purposes of Processing

• ›Provision of the website as well as its stability and security
• ›Communication and processing of your inquiries
• ›Sending our newsletter, if you have subscribed to it
• ›Compliance with legal obligations

5. Hosting and Server Log Files

This website is operated on a rented server (VPS) at a hosting provider based in Germany. A data processing agreement pursuant to Art. 28 GDPR is in place with the hosting provider.

When you access this website, the web server processes technical access data. This includes the IP address of your device, the date and time of access, the requested page or file, the status code transmitted and information about your browser and operating system.

This data is technically required to operate the website: it enables the page to be delivered, technical faults to be detected and fixed, and abusive access to be prevented. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in the technically error-free provision and the security of the website. The data is not combined with other data or evaluated for advertising or analysis purposes. The access logs are automatically deleted after 30 days.

6. Use of Cookies and Local Storage

6.1 Technically Necessary Cookies

This website sets only technically necessary cookies, and only where a function needs them: on the pages with a form (contact, newsletter) and with the internal access link for pages that have not yet been published. The cookies contain no personal information whatsoever, cannot be read by scripts and are not used for analysis or advertising purposes.

Legal basis for setting these cookies: Section 25(2) no. 2 TDDDG – they are strictly necessary to provide the function you are using (a form or internal access).

6.2 Local Storage (localStorage)

If you change the site's color scheme (light or dark), your browser remembers this choice in local storage under the key auposiq-theme.

Only your display preference is stored – nothing that relates to you personally and no identifier that would make you recognizable. The entry remains on your device and is not transmitted to us or to third parties. If you keep the default “System” setting, nothing is stored at all. You can delete the entry at any time in your browser settings.

Legal basis for storing this entry on your device: Section 25(2) no. 2 TDDDG (German Telecommunications Digital Services Data Protection Act) – the storage is strictly necessary to provide the service you have explicitly requested (the display you have chosen).

6.3 Tracking and Marketing Cookies

No tracking, analytics or marketing cookies are used. Nor do we integrate any third-party services that would set such cookies.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in a functional and user-friendly website).

7. External Resources and Links

All files required to display the site – stylesheets, JavaScript and fonts – are loaded exclusively from our own server. We do not use any external CDN services; the Inter typeface we use is self-hosted, so no external font servers are accessed.

In a few places, we link to external services, for example to a map service to display our address, to our LinkedIn profile, to the download page of our remote support provider or to the German federal government's funding database (Förderdatenbank des Bundes). These are exclusively links, not embedded content: as long as you do not click on such a link, no data whatsoever is transmitted to the respective provider. Only when you click do you leave this website; from that point on, the privacy policy of the respective provider applies.

8. Contact Form and Newsletter

8.1 Contact Form

If you send us inquiries via the contact form, your details are transmitted to us by email solely for the purpose of processing your inquiry and in case of follow-up questions. To protect against automated submissions, we use a technical verification method (not an external service). If you also select the newsletter in the form, Section 8.2 applies; the subscription only takes effect once you confirm it.

The email through which your inquiry reaches us is sent via the email account of AUPOS IQ GmbH, Zur Steinkuhle 8, 48341 Altenberge, Germany (sender address info@aupos-iq.de), which is held with an email provider based in Germany. From there it is forwarded to our mailbox info@aupos.de. AUPOS IQ GmbH acts as our processor (Art. 28 GDPR); it only handles the technical dispatch and does not use your data for its own purposes. Beyond that, your data is not passed on to third parties.

8.2 Newsletter

If you subscribe to our newsletter – via the “Newsletter” page or via the contact form –, we use your email address to send you information about our software solutions and services from time to time. Subscribing is voluntary; the legal basis is your consent (Art. 6(1)(a) GDPR).

We use the double opt-in procedure: after subscribing, you receive an email with a confirmation link. Only once you confirm the subscription through it do we add your address to our mailing list; this way, nobody can subscribe someone else’s address. The website itself does not store anything in the process. The confirmed subscription is transmitted to us by email, together with the language of the page, the page through which you subscribed and the times of subscription and confirmation. We keep this information in order to be able to prove your consent (Art. 6(1)(f) GDPR; our legitimate interest lies in proving that consent was properly given). You will receive the confirmation email from the sender address info@aupos-iq.de; as described in Section 8.1, it is sent via the email account of AUPOS IQ GmbH. The same applies to the notification of your confirmed subscription that is sent to us. We send the newsletter ourselves by email; no external newsletter service is used.

You can withdraw your consent at any time with effect for the future: via the Unsubscribe page, via the unsubscribe notice in every newsletter or informally by email to info@aupos.de. The lawfulness of the processing carried out until the withdrawal remains unaffected. After you unsubscribe, we remove your address from the mailing list promptly.

9. Legal Bases for Processing

• ›Art. 6(1)(a) GDPR – consent: for the newsletter (Section 8.2). You can withdraw your consent at any time with effect for the future.
• ›Art. 6(1)(b) GDPR – performance and initiation of contracts: where processing is necessary for the performance of a contract with you, for example in the case of contact inquiries.
• ›Art. 6(1)(f) GDPR – legitimate interests: for the technically necessary provision and the security of this website, in particular the server log files, and for proving newsletter consent.

10. Duration of Data Storage

• ›Server log files: 30 days, followed by automatic deletion.
• ›Contact inquiries: until processing is complete, for a maximum of twelve months; thereafter, statutory retention periods apply where relevant.
• ›Newsletter: your email address, until you unsubscribe from the newsletter. We keep the proof of your consent (times of subscription and confirmation) for up to three years thereafter. Unconfirmed subscriptions are not stored; the confirmation link expires after seven days.
• ›Form cookies: until the browser is closed or until the confirmation is displayed.
• ›Cookie aupos_intern: seven days.

11. Recipients of Data

As a rule, your personal data is not transferred to third parties unless this is necessary to comply with legal obligations. We send the emails from the contact form and the newsletter sign-up via the email account of AUPOS IQ GmbH, which is contractually bound as our processor (Art. 28 GDPR) (see Section 8.1). Beyond that, for technical reasons, only our hosting provider and the provider of our email delivery service have access to the data required in each case; both are contractually bound as processors. No data is transferred to countries outside the European Union.

12. Your Rights

Within the scope of the applicable legal provisions, you have the following rights:

• ›Access to information about your data stored by us (Art. 15 GDPR)
• ›Rectification of inaccurate data or completion of incomplete data (Art. 16 GDPR)
• ›Erasure of your data (Art. 17 GDPR)
• ›Restriction of processing (Art. 18 GDPR)
• ›Data portability (Art. 20 GDPR)
• ›Objection to processing based on Art. 6(1)(f) GDPR (Art. 21 GDPR)
• ›Withdrawal of consent given, with effect for the future (Art. 7(3) GDPR)

To exercise your rights, please use the contact details provided in Section 15.

Right to lodge a complaint: You have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR). The supervisory authority responsible for us is:

Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia)
Kavalleriestraße 2–4
40213 Düsseldorf
www.ldi.nrw.de

13. Obligation to Provide Data

The provision of personal data is required neither by law nor by contract, nor is it necessary for concluding a contract. You are not obliged to provide personal data. Without this information, however, you cannot use our contact form or receive our newsletter.

14. Data Security

We take technical and organizational measures to protect your data against loss, destruction, manipulation and unauthorized access. Data is transmitted exclusively over a TLS-encrypted connection (HTTPS). Our security measures are continuously improved in line with technological developments.

15. Contact for Data Protection Inquiries

For questions about data protection, to exercise your rights as a data subject, or in the case of complaints, please contact:

16. Last Update and Changes to This Privacy Policy

Last updated: October 2026. We reserve the right to amend this privacy policy if the legal situation or the services we use change.