Privacy Policy

Controller

The controller responsible for processing personal data on tractura.de is:

Email: contact@tractura.de
Phone: +49 1575 6165 672

This policy covers the TRACTURA Systems parking page and contact through the details provided above. You can use these details for privacy questions and to exercise your rights.

Website and access data

This page provides information about the TRACTURA Systems website relaunch. You do not need to register or provide contact details to visit it.

When you access the website, your browser sends technical data to the infrastructure delivering it. This includes your IP address, the requested address or file, the date and time, the HTTP method, and browser and system information supplied by your browser. Your browser may also send the referring page. Processing a request also produces information such as the response status, the amount of data transferred and, where applicable, security events.

These data are needed to deliver content, establish connections, detect errors and protect the website against abuse and attacks. Necessary delivery and security processing is based on Article 6(1)(f) of the General Data Protection Regulation (GDPR). Our legitimate interest is to operate a reliable and secure website.

The website cannot be delivered without the data required to establish the connection. You have no statutory or contractual obligation to visit the website or provide further personal information.

Cloudflare Pages and Traffic Analytics

We use Cloudflare Pages to host and deliver the website. The provider is Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA. Cloudflare processes the connection and access data needed to transmit and handle requests, including IP addresses. Files are delivered through Cloudflare's network.

Cloudflare also provides Traffic Analytics. These infrastructure statistics include requests, data volumes, visitor metrics and countries of origin. Cloudflare uses IP-related request data, among other information, to produce country and visitor metrics. The display of aggregated statistics does not mean that no personal data are processed beforehand.

We use these statistics to assess the load, availability and use of our website. The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is to provide a reliable service suited to demand and to protect the website. Traffic Analytics is distinct from Cloudflare Web Analytics, which uses an additional analytics beacon in the browser.

Recipients include Cloudflare and the affiliated companies and subprocessors used to provide the service. Cloudflare publishes information about its subprocessors. Disclosure to competent authorities may also be required by binding legal obligations.

For processing on behalf of customers, Cloudflare publishes a Data Processing Addendum covering processor obligations and technical and organisational measures. Cloudflare describes its responsibilities for processing for its own purposes in its Privacy Policy.

International data processing

Cloudflare and Namecheap, the email provider described in the Contact section, are based in the USA. Personal data may be processed in the USA or other countries outside the European Economic Area when these services are provided.

Cloudflare's published data processing agreement provides for the EU-US Data Privacy Framework for transfers within its scope and EU Standard Contractual Clauses for other restricted transfers. Namecheap's published data processing agreement also provides for EU Standard Contractual Clauses for relevant transfers.

An adequacy decision under Article 45 GDPR covers only transfers that meet its requirements. Other transfers require appropriate safeguards under Article 46 GDPR. You may request information about the applicable safeguards and a copy using the controller's contact details. The providers' published contractual terms are linked in their respective sections.

Retention

Connection data are initially needed to process the individual request. Further storage for infrastructure statistics, error diagnosis and security is a separate processing activity.

Since 2 October 2026, Cloudflare has described a retention period of at least 31 days for certain adaptive analytics datasets, including HTTP requests, security events and DNS analytics, also on the Free plan. A single query can cover up to 30 days. This query window is not a deletion deadline. Separate aggregated datasets have their own dataset-specific and plan-specific limits.

The 31-day minimum does not mean that data are deleted after exactly 31 days. It is not a general retention period for all access data, security logs, exports or backups. The duration and extent of storage depend on the processing purpose, service-specific retention rules and applicable legal obligations. A specific security incident or necessary legal action may require longer retention for that purpose.

We retain messages and contact details from enquiries for as long as they are needed to handle the enquiry and, where applicable, the underlying matter. Further retention is limited to applicable legal obligations or what is necessary to establish, exercise or defend legal claims. The data are then deleted.

Further information: Cloudflare's announcement on analytics retention.

Cookies and browser storage

The parking page does not store a preference or visitor identifier in cookies, LocalStorage or SessionStorage. We do not embed tracking pixels or additional analytics beacons in the page. The reduced-motion preference is used only to adjust presentation in your browser.

Your browser may cache downloaded files such as images, fonts and styles. This supports the page display you requested and avoids repeated transfers. Cache retention depends on HTTP and browser settings. It is not used to create an individual visitor identifier.

Where storage or access serves only to transmit a communication or is strictly necessary to deliver the page you expressly requested, the exception in section 25(2) of the German Telekommunikation-Digitale-Dienste-Datenschutz-Gesetz (TDDDG) applies. Processing of personal data must also comply with the GDPR. Additional storage or access that is not necessary would require prior consent.

Contact

If you contact us by email or phone, we process the contact details you provide, the content of your enquiry and communication metadata. This allows us to handle and answer your enquiry. You decide which information to provide. We may be unable to deal with your enquiry without the information needed to respond.

We use Namecheap Private Email for the mailbox contact@tractura.de. The provider is Namecheap, Inc., 4600 East Washington Street, Suite 300, Phoenix, AZ 85034, USA. Namecheap processes the email data needed to receive, store, make available and send messages. This may include sender and recipient addresses, timestamps, technical message headers, message content and attachments you send.

Provider information is available in the Namecheap Privacy Policy and Namecheap Data Processing Addendum. Simply visiting this website does not open Namecheap webmail or send an email to us.

General enquiries are processed under Article 6(1)(f) GDPR. Our legitimate interest is to communicate appropriately with interested people and respond to enquiries. If your enquiry concerns a contract or steps you request before entering into one, Article 6(1)(b) GDPR applies. Statutory retention obligations are fulfilled under Article 6(1)(c) GDPR.

Fonts, images and links

Fonts, the logo, favicon, images, styles and website JavaScript are delivered under the same website address through the hosting infrastructure. Loading them does not require a separate font or image service.

Linked websites are opened only when you select the relevant link. The other providers' privacy information applies to your subsequent use of their websites. Email and phone links open your chosen application; they do not send a message from this website.

Your rights

Subject to the applicable legal requirements, you may request access to your personal data, rectification, erasure and restriction of processing under Articles 15 to 18 GDPR. The right to data portability under Article 20 GDPR applies in particular to automated processing based on consent or a contract, where its other requirements are met.

Where processing is based on consent, you may withdraw it at any time with effect for the future. Withdrawal does not affect the lawfulness of processing before it was withdrawn.

Please address requests to the controller using the contact details above. We normally respond within one month. If a legally permitted extension is necessary, we will explain the reasons. Exercising your rights is generally free of charge. If we have reasonable doubts about your identity, we may request the additional information necessary to confirm it.

This parking page does not involve automated decision-making that produces legal or similarly significant effects within the meaning of Article 22 GDPR.

Complaints

If you believe your personal data are being processed unlawfully, you may lodge a complaint with a supervisory authority under Article 77 GDPR. You may do so, in particular, where you habitually live, where you work or where the alleged infringement occurred. You do not have to contact us first.

For the controller's stated location in Berlin, you may contact:

Email: mailbox@datenschutz-berlin.de
Phone: +49 30 13889-0
How to lodge a complaint with the supervisory authority