Privacy policy

1. Controller

The entity responsible for the processing of personal data on this website is:

Spectral World GmbH
Imberstraße 10
76227 Karlsruhe
Germany
Email: info@spectralworld.io

2. Server log files and analytics

When a page is requested, our server records the requested path, the timestamp, and, where available, the referring URL. These records serve the technical operation, security, and improvement of the website and are retained indefinitely.

In addition, we run our own cookieless analytics on our server. For each page view we store a shortened IP address (truncated to /24 for IPv4 and /48 for IPv6; the full IP is not stored), the user agent and the device type, operating system and browser derived from it, the approximate country and city derived from the IP address via a local database (the full IP is not stored for this either), the referring URL, any campaign (UTM) parameters, the language setting, and the requested path, HTTP status, and processing time. A session identifier that changes daily is derived from the shortened IP and the user agent via a one-way function; the random value used for it is regenerated each day and not stored. This data is retained indefinitely.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in the stable, secure operation and in privacy-preserving analytics to improve this website).

3. Hosting (data processing)

This website is hosted on servers operated by netcup GmbH, Emmy-Noether-Straße 10, 76131 Karlsruhe, Germany. netcup processes the technically required data on our behalf, in particular the server log entries described in section 2. We have a data processing agreement with netcup pursuant to Art. 28 GDPR: netcup-avv.pdf.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in a reliable and securely operated web presence).

4. Contact form and email

When you write to us via the contact form or by email, the details you provide (name, email address, subject, message) are stored so we can process your request. They are deleted once the reason for the correspondence no longer applies, provided no statutory retention obligations require otherwise.

Legal basis: Art. 6(1)(b) GDPR where your request relates to a contract; otherwise Art. 6(1)(f) GDPR (legitimate interest in handling inquiries effectively).

5. Your rights

You have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and to object (Art. 21 GDPR), as well as the right to lodge a complaint with a supervisory authority (Art. 77 GDPR).

6. Changes

We reserve the right to adapt this policy; the updated version applies from your next visit.