SITEFUSION / Privacy
Privacy
Information about how this website processes personal data and about your rights.
1. Controller
The controller for this website is SiteFusion GmbH, Küstriner Straße 14, 94315 Straubing, Germany. Managing directors: Mario Kandler and Thomas Weinberger. Telephone: +49 9421 7847-0. Email: info@sitefusion.com.
This notice applies to this website and its contact and media features. The respective providers’ privacy notices also apply to linked external services.
2. Data protection contact
For questions about the processing of your data and to exercise your rights, contact our data protection officer: Gerald Lill, Projekt 29 GmbH & Co. KG, Ostengasse 14, 93047 Regensburg, Germany. Telephone: +49 941 2986930. Email: gl@projekt29.de. You may also contact SiteFusion directly.
3. Hosting and server logs
The website is hosted by cyberstack GmbH in the same server environment as the previous SiteFusion website. Requests involve processing your IP address, date and time, requested file, volume of data transferred, access status, referring page, browser and operating system information. These data enable delivery, stability and protection against attacks. The legal basis is Article 6(1)(f) GDPR; our legitimate interest is a secure and functioning website.
IP addresses in server logs are truncated and anonymised within seven days. Anonymised access data may be used for aggregate server statistics. We do not combine them with other data sources or analyse them for personalised advertising. cyberstack processes hosting data to provide and secure the website.
4. Contact and demo enquiries
When you contact us by email, telephone or the demo form, we process your contact details and the content of your enquiry. The demo form requires your company, first and last name, and email address. You may optionally provide a company website, topics, occasion, preferred appointment and message. The details are emailed to the relevant contacts to handle your enquiry and arrange an appointment.
Where your enquiry concerns entering into or performing a contract with you, processing is based on Article 6(1)(b) GDPR. For business contacts and other enquiries, the basis is Article 6(1)(f) GDPR; our interest is handling your request and business communication. The form cannot be submitted without its required fields. You can instead contact us by email or telephone.
5. User Group registration
For registration with the customer-only User Group, we process company, first and last name, email address, position, selected session or general registration, and type of request. A proposed talk also requires a topic; further questions and comments are optional. We use the information to verify customer affiliation, organise participation and communicate about sessions or proposed topics. Registration details are emailed to the relevant contacts. Registration does not automatically subscribe you to a newsletter or grant access to customer content.
The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is professional exchange with customers and organising the participation you requested. Article 6(1)(b) GDPR applies where processing is necessary to perform a contract with you.
6. Cookies, language preference and form protection
We do not use our own analytics or marketing cookies. When a security token is requested, the forms set the session cookie “sitefusion_demo” or “sitefusion_user_group”. It contains a random session identifier and links the submission to a token that protects against forged requests (CSRF). The cookies last for the browser session; associated security data are held in the server-side session. Access to the device is necessary for the secure form submission you requested (section 25(2)(2) TDDDG). Personal security data are processed under Article 6(1)(f) GDPR to prevent abuse.
After you explicitly select a language using the language switch, your browser saves “de” or “en” in local storage under “sitefusion-language”. This lets the neutral website entry point remember your chosen language on a later visit. The entry contains no user identifier and remains until you delete the website data in your browser. You can remove it in your browser settings or replace it by choosing another language. Storage serves your selected language feature; where personal data are processed, we rely on Article 6(1)(f) GDPR to provide a website in the appropriate language.
To limit abusive form requests, the server also stores a hash derived from the IP address and request timestamps in temporary files. Rate limiting evaluates a one-hour window. These files contain no form contents. A hash does not amount to full anonymisation. The legal basis is Article 6(1)(f) GDPR; the purpose is to protect the forms and email delivery against abuse.
7. YouTube videos
Our video pages initially use locally stored preview images. Only when you press a play button or “Load video here” is the selected video embedded through youtube-nocookie.com. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google then receives information including your IP address, browser and device information, the page visited and playback activity. Google may use its own cookies or other storage technologies. Privacy-enhanced mode does not mean playback involves no data transfer.
By activating the video after reading the notice beside it, you consent to this embedding. The legal bases are Article 6(1)(a) GDPR and, where information is stored on or read from your device, section 25(1) TDDDG. Activation applies only to the individual video on the open page and is not stored persistently by us. You can end the embedding by reloading or leaving the page; a player will then load again only after you activate it. This does not affect the lawfulness of processing before withdrawal. Browser data already stored by Google can be removed through your browser settings.
Google may process data outside the European Union, including in the United States. Google’s privacy information explains recipients, retention periods and its transfer mechanisms, including adequacy decisions and standard contractual clauses. You can use the rest of the website without activating videos.
8. Local content and external links
Fonts, graphics, scripts, PDF downloads and audio content are served locally. Requests generate the technical access data described under hosting. Audio playback starts only when you operate the player; it does not embed an external audio or tracking service. Checklist downloads require no registration. This website does not embed Google reCAPTCHA, external Google Fonts or Microsoft Bookings.
Links to LinkedIn, YouTube, partners or external event registration open the respective providers’ services. Following such a link takes you away from our website and transmits request data to the destination provider. We do not control that processing through this website; please read the provider’s privacy notice.
9. Recipients, retention and security
Access is limited to the contacts handling your request and the service providers needed for hosting, IT operations and email delivery, to the extent necessary for their tasks. Your form data are not intended for third parties’ independent advertising purposes. Statutory disclosure obligations remain unaffected.
We retain enquiry and registration data for as long as needed to handle the request, organise and follow up participation, or meet statutory retention obligations. For a general User Group registration, retention serves the ongoing exchange you requested; you can tell us at any time that you no longer wish to participate. Data are deleted when the purpose ends unless retention obligations or necessary legal claims require otherwise. The periods and deletion options described above apply to server logs and browser storage.
We use technical and organisational measures to protect your data. The public website transmits data using HTTPS encryption. This cannot guarantee absolute protection against every risk. Our website does not make solely automated decisions with legal or similarly significant effects, including profiling.
10. Your rights
Subject to the statutory conditions, you have rights of access (Article 15 GDPR), rectification (Article 16), erasure (Article 17), restriction of processing (Article 18) and data portability (Article 20). Where processing is based on consent, you can withdraw it at any time with future effect; processing before withdrawal remains lawful. Use the contacts above to exercise your rights.
Right to object: You may object to processing under Article 6(1)(f) GDPR on grounds relating to your particular situation (Article 21 GDPR). We will stop processing unless compelling legitimate grounds or requirements for establishing, exercising or defending legal claims override the objection. You may object to processing for direct marketing at any time without giving a reason.
You may lodge a complaint with a supervisory authority, particularly in the country of your habitual residence, place of work or the alleged infringement. The Bavarian State Office for Data Protection Supervision (BayLDA) supervises private companies in Bavaria. You do not have to contact us first.
11. Changes to this notice
We update this notice when the website or its processing of personal data changes. Last updated: 11 October 2026.