Legal

Privacy policy

1. Controller

MARCODES GmbH
Lena-Christ-Str. 2
82031 Grünwald
Germany

Managing director: Marco Hochmuth
Email: hi@marcodes.com
Phone: +49 89 244 19 0 19

2. This website

This website sets no cookies, uses no analytics or tracking services and loads no content from third-party servers. Fonts and graphics are stored on our own server. It has no contact form and no newsletter. A cookie notice is therefore not required.

Hosting

This website runs on a server of Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. The server is located in a data centre in Germany. Hetzner processes the data arising from operating the website solely on our behalf and according to our instructions. We have concluded a data processing agreement with Hetzner pursuant to Art. 28 GDPR.

To manage the server (for example setup, security updates, SSL certificates and deploying new versions of the website) we use the service Laravel Forge of Laravel Holdings Inc., USA. Forge accesses the server via an encrypted connection. Your visits to this website do not pass through Forge, and we do not transmit any visitor data to Forge. Because Forge has administrative access to the server, access to data stored there, such as the server log files, cannot be technically ruled out.

Server log files

Each time this website is accessed, the web server automatically stores the following information in so-called server log files:

  • IP address of the requesting device
  • date and time of the request
  • requested page or file and type of request
  • HTTP status code and amount of data transferred
  • previously visited page (referrer), if your browser sends it
  • browser and operating system used (user agent)

We need this data to deliver the website, detect errors and keep the server secure, for example to detect and fend off attacks. It is not combined with other data sources. We do not analyse it for marketing purposes and do not create user profiles.

The legal basis is Art. 6 (1) (f) GDPR. Our legitimate interest lies in the secure and error-free operation of the website.

The log files are rotated daily and automatically deleted after 15 days at the latest. Data whose further retention is necessary to investigate a specific security incident is deleted as soon as the incident has been fully resolved.

3. Contact by email or phone

If you contact us by email or phone, we process your details (for example name, email address, phone number and the content of your message) to handle and answer your enquiry.

The legal basis is Art. 6 (1) (b) GDPR if your enquiry relates to a contract or serves to prepare a contract. In all other cases the legal basis is Art. 6 (1) (f) GDPR. Our legitimate interest lies in answering the enquiries addressed to us.

For our email mailboxes we use Microsoft 365 of Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. Microsoft processes the emails on our behalf. The basis is Microsoft's data processing agreement (Microsoft Products and Services Data Protection Addendum) pursuant to Art. 28 GDPR. A transfer of data to Microsoft Corporation in the USA cannot be ruled out. Microsoft Corporation is certified under the EU-US Data Privacy Framework. For these transfers to the USA there is therefore an adequacy decision of the EU Commission (Art. 45 GDPR). In addition, Microsoft has agreed to the EU Commission's standard contractual clauses (Art. 46 (2) (c) GDPR).

We delete your enquiry as soon as it has been fully handled and no further retention is necessary. If a business relationship results from the enquiry, we keep the related correspondence in accordance with statutory retention obligations (as a rule six years for commercial and business letters under § 257 HGB and up to ten years for tax-relevant documents under § 147 AO).

4. The Gesynd app

This privacy policy applies only to the website. The Gesynd app has its own privacy policy. We will link it here as soon as the app is released.

5. Recipients of your data

We only pass on your data if this is necessary for the purposes described or if we are legally obliged to do so. Recipients are the service providers named above who act on our behalf (Hetzner Online GmbH for hosting, Laravel Holdings Inc. for server management, Microsoft for email). We do not sell data and do not pass it on for advertising purposes.

6. Your rights

Within the statutory requirements you have the following rights:

  • Access to the data we process (Art. 15 GDPR)
  • Rectification of inaccurate data (Art. 16 GDPR)
  • Erasure of your data (Art. 17 GDPR)
  • Restriction of processing (Art. 18 GDPR)
  • Data portability (Art. 20 GDPR)

An informal message to the contact details above is sufficient to exercise your rights.

Right to object under Art. 21 GDPR

Where we process your data on the basis of Art. 6 (1) (f) GDPR (legitimate interest), you have the right to object to this processing at any time on grounds relating to your particular situation. We will then no longer process your data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to establish, exercise or defend legal claims.

Right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), in particular in the member state of your habitual residence, place of work or place of the alleged infringement. The authority responsible for us is:

Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 18
91522 Ansbach
Germany

7. Obligation to provide data and automated decisions

You are neither legally nor contractually obliged to provide us with personal data. Without the technically necessary access data, however, the website cannot be displayed, and without contact details we cannot answer your enquiry. There is no automated decision-making, including profiling, under Art. 22 GDPR.

8. Changes to this privacy policy

We update this privacy policy when the website, our service providers or the legal situation change. The version published here applies.

Last updated: 6 November 2026