Privacy Policy

1. Data protection at a glance

The protection of your personal data is important to us. Below, we inform you about which personal data is processed when you visit our website and when you contact us, and for what purposes this occurs.

Personal data is any data that can be used to identify you personally.

2. Controller

The controller responsible for data processing on this website is:

AWAG IT & KI Lösungen
Yuliia Ptitsyna
Ziegelweg 12
01640 Coswig
Germany

Email: office@awag-it.de

The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data.

3. General information on data processing

We process personal data only to the extent necessary to provide a functional website, to handle inquiries, to carry out pre-contractual measures, or to fulfil contractual obligations, or where you have consented to processing beyond this scope.

Depending on the type of processing, this takes place in particular on the basis of:

• Art. 6(1)(a) GDPR – consent,
• Art. 6(1)(b) GDPR – performance of a contract and pre-contractual measures,
• Art. 6(1)(c) GDPR – compliance with a legal obligation,
• Art. 6(1)(f) GDPR – protection of legitimate interests.

Insofar as consent is required for storing information on your device or accessing information already stored there, this takes place on the basis of § 25(1) TDDDG (German Telecommunications-Digital-Services-Data-Protection Act). Technically strictly necessary processes may take place on the basis of § 25(2) TDDDG.

4. Hosting and server log files

When you access our website, the web server processes technically required information. This may include in particular:

• IP address,
• date and time of access,
• page or file accessed,
• referrer URL,
• browser used,
• operating system,
• HTTP status code, and
• amount of data transferred.

This processing takes place to ensure the secure and technically error-free provision of the website, as well as to detect and defend against attacks and technical malfunctions.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure, stable and technically proper provision of our website.

Server log data is stored only for as long as necessary for the stated purposes, unless legal obligations or specific security incidents require longer storage.

5. Cookies and consent management

Our website uses technically necessary cookies and comparable technologies that are required for the operation and basic functions of the website.

Technologies going beyond this, in particular for statistics or analytics, are only used if you have previously given your consent via our consent management tool.

You may change or revoke your consent at any time with effect for the future.

Insofar as consent is required, processing takes place on the basis of Art. 6(1)(a) GDPR in conjunction with § 25(1) TDDDG. Technically necessary storage or access takes place pursuant to § 25(2) TDDDG.

A separate list of purely technically necessary session or functional cookies is not provided, insofar as these exclusively serve to provide the website functions you have requested.

6. Contacting us

If you contact us via the contact form, email or telephone, we process the information you provide in order to handle your inquiry and any follow-up questions.

This may include, in particular, your name, company, email address, telephone number, and the messages and information you provide.

If your inquiry is related to an existing contract or serves to initiate a contract, processing takes place on the basis of Art. 6(1)(b) GDPR.

For other inquiries, processing takes place on the basis of our legitimate interest in efficient communication with prospective customers, customers and business partners pursuant to Art. 6(1)(f) GDPR.

The data is deleted once it is no longer required to process the inquiry and no statutory retention obligations preclude deletion.

7. Appointment scheduling via Calendly

We may use the Calendly service for online appointment scheduling.

If you book an appointment, the data you provide is processed for the purpose of planning and carrying out the appointment. This may include, in particular, your name, email address, company, requested appointment, and other information you provide voluntarily.

Processing takes place to carry out pre-contractual measures or to perform a contract pursuant to Art. 6(1)(b) GDPR. Insofar as use is based on consent, Art. 6(1)(a) GDPR is the legal basis.

The provider is Calendly LLC, USA.

Where personal data is transferred to the USA, the applicable data protection safeguards are taken into account.

Further information on data processing by Calendly can be found in the provider's own privacy information.

8. Newsletter and Brevo

We use Brevo to send our newsletter.

If you subscribe to our newsletter, we process, in particular, your email address and, where applicable, other information you provide voluntarily.

Subscription generally takes place via a double opt-in procedure. This means that your subscription is verified by an additional confirmation of the email address provided.

Processing takes place on the basis of your consent pursuant to Art. 6(1)(a) GDPR.

You may revoke your consent at any time with effect for the future, in particular via the unsubscribe link in every newsletter.

For the purposes of sending, technical provisioning and — insofar as corresponding consent has been given — statistical analysis, Brevo may process information on delivery, receipt, opens and interactions.

The provider is Sendinblue GmbH, Köpenicker Straße 126, 10179 Berlin, Germany.

9. Google Tag Manager

We use Google Tag Manager for the technical management of website tags.

The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Tag Manager serves the central management and triggering of other services and tags. Which personal data is processed depends, in particular, on the services integrated via Tag Manager.

We use Google Tag Manager in particular to control our analytics tags.

Insofar as consent is required for this, the corresponding tags are only activated after you have given your consent.

10. Google Analytics 4

We use Google Analytics 4 for the statistical analysis of the use of our website.

The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics allows us, in particular, to analyse how visitors use our website, which pages are accessed, how users navigate through the website, and how our content is used both technically and in terms of content.

This may involve the processing of, among other things:

• pages accessed,
• time and duration of the visit,
• interactions with the website,
• approximate location information,
• device and browser information,
• referrer information, and
• technical usage data.

Google Analytics is only activated once you have given your consent to analytics via our consent management tool.

The legal basis is your consent pursuant to Art. 6(1)(a) GDPR in conjunction with § 25(1) TDDDG.

You may revoke your consent at any time with effect for the future via the cookie or privacy settings of our website.

In connection with the use of Google services, processing of data by companies within the Google group, as well as transfer to third countries — in particular the USA — cannot be ruled out. Applicable data protection safeguards are taken into account for data transfers.

11. Google Maps

Insofar as Google Maps is embedded on our website, this serves to display maps and locations.

The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Maps is only loaded once you have consented to the corresponding data processing. When it is loaded, your IP address, device information and other technical information may, in particular, be transmitted to Google.

The legal basis is your consent pursuant to Art. 6(1)(a) GDPR in conjunction with § 25(1) TDDDG.

Consent may be revoked at any time with effect for the future.

12. Google reCAPTCHA

Insofar as we use Google reCAPTCHA, the service serves to determine whether entries on our website are made by a natural person or in an automated manner. This is intended, in particular, to prevent spam and abusive access.

The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

When it is used, technical information about your device and your use of the website may be processed and transmitted to Google.

Insofar as reCAPTCHA is only activated following your consent, processing takes place on the basis of Art. 6(1)(a) GDPR in conjunction with § 25(1) TDDDG.

13. Google Fonts

Fonts from Google Fonts may be used on our website.

Insofar as these fonts are integrated locally on our server, no connection to Google's servers is made when the fonts are loaded.

In this case, no transmission of personal data to Google occurs merely as a result of displaying these locally hosted fonts.

14. External links and social networks

Our website may contain links to external websites as well as to our profiles on social networks.

Simply visiting our website does not, in principle, result in any personal data being transmitted to the respective provider on account of a normal external link. Only once you actually follow such a link do you leave our website, and the privacy policy of the respective provider applies.

The respective platform operator is generally responsible for the processing of personal data on its platform.

15. Customer, project and contract data

In the course of our business relationships, we process personal data of customers, prospective customers, service providers and business partners.

This may include, in particular:

• contact and master data,
• company data,
• communication data,
• quotation and contract data,
• project information,
• billing and payment data, and
• documentation and support information.

Processing takes place, in particular, for the preparation of quotations, contract performance, project handling, customer communication, billing, and the fulfilment of legal obligations.

The legal bases are, in particular, Art. 6(1)(b) and (c) GDPR. Where necessary, processing may also be based on Art. 6(1)(f) GDPR.

Documents relevant under commercial and tax law are stored in accordance with statutory retention periods.

16. Recipients and processors

We partially use external service providers to provide our website and to carry out our business processes.

This may include, in particular, hosting providers, IT service providers, communication providers, newsletter service providers, analytics providers, and providers of scheduling and collaboration solutions.

Insofar as these companies process personal data on our behalf, this takes place on the basis of corresponding data processing agreements pursuant to Art. 28 GDPR, where legally required.

Personal data is only disclosed where there is a legal basis for doing so, where this is necessary for the performance of a contract, or where you have given your consent.

17. Data transfer to third countries

When certain services are used, personal data may be processed outside the European Union or the European Economic Area.

Any such transfer takes place only in compliance with the requirements of Art. 44 et seq. GDPR.

Insofar as an adequacy decision by the European Commission exists for the third country in question, the transfer may be based on this. Otherwise, EU standard contractual clauses or other legally recognised safeguards may be used, among other things.

18. Storage period

Unless a more specific storage period is stated within this privacy policy, we store personal data only for as long as it is necessary for the respective processing purpose.

Statutory retention obligations remain unaffected by this.

If the purpose of processing no longer applies, or a statutory retention period expires, the relevant data is deleted, unless there is another legal basis for its continued storage.

19. Your rights

Within the scope of the statutory requirements, you have, in particular, the following rights:

• right to information pursuant to Art. 15 GDPR,
• right to rectification pursuant to Art. 16 GDPR,
• right to erasure pursuant to Art. 17 GDPR,
• right to restriction of processing pursuant to Art. 18 GDPR,
• right to data portability pursuant to Art. 20 GDPR,
• right to object pursuant to Art. 21 GDPR.

Insofar as processing is based on your consent, you may revoke this consent at any time with effect for the future.

The lawfulness of processing carried out up until the revocation remains unaffected by this.

Right to object

Insofar as we process personal data on the basis of Art. 6(1)(f) GDPR, you have the right to object at any time to such processing for reasons arising from your particular situation.

Where personal data is processed for direct marketing purposes, you may object to such processing at any time.

20. Right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint with a data protection supervisory authority regarding the processing of your personal data.

The data protection supervisory authority responsible for our company is, in particular, that of the Free State of Saxony:

Saxon Data Protection and Transparency Commissioner (Sächsische Datenschutz- und Transparenzbeauftragte)

Independent of this, you may also generally contact any other data protection supervisory authority responsible pursuant to Art. 77 GDPR.

21. Security

We take appropriate technical and organisational measures to protect personal data against loss, manipulation, unauthorised access and other unlawful processing.

Our website uses an encrypted HTTPS connection. This means that data transmitted between your browser and our server is transmitted in encrypted form.

22. AI-assisted content

This website partially uses content that was created or edited with the assistance of artificial intelligence (AI). This applies in particular to texts as well as individual images and graphic representations.

The content is reviewed prior to publication and is the responsibility of AWAG IT & KI Lösungen.

23. Currency of this privacy policy

We adapt this privacy policy whenever our website, the services we use, or the legal requirements change.

Last updated: September 2026