Privacy policy

This is a courtesy translation. Only the German version is legally binding. German version

1. At a glance

This website sets no cookies, uses no tracking or analytics tools, and loads no third-party content. Fonts, images and the map are served exclusively from our own server. Personal data is processed only as far as technically necessary to deliver the site (section 4), or if you contact us on your own initiative (section 5).

2. Controller

Further details are in the legal notice.

3. Hosting

This website runs on a server provided by STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany. The host processes the data listed below solely on our behalf and on our instructions, under a data processing agreement pursuant to Art. 28 GDPR.

4. Server log files

Whenever you access this website, your browser necessarily transmits data to our server. The web server stores the following in log files:

• IP address, truncated (last byte set to zero for IPv4, last 80 bits for IPv6)
• date and time of access
• requested address (URL), HTTP status code and amount of data transferred
• previously visited page (referrer), if your browser sends it
• browser type and version, operating system (user agent)

Error logs, which are only written when technical problems occur, may contain the full IP address.

Purpose: delivering the website, ensuring its operation and security (for example defending against attacks), and troubleshooting. Legal basis is Art. 6 (1) (f) GDPR; our legitimate interest is the secure and stable operation of the website. Retention: log files are deleted automatically after 14 days. They are not combined with other data sources or analysed with regard to individuals.

5. Contact by form or email

If you write to us through the contact form or by email, we process the details you provide: name, email address, the topic you selected, your message, and the language in which you use the site. The sole purpose is to answer your enquiry. The legal basis is Art. 6 (1) (f) GDPR (answering your enquiry), or Art. 6 (1) (b) GDPR for enquiries aimed at entering into a contract. We delete the data once your enquiry has been dealt with, unless statutory retention obligations apply.

Contact form: your entries are transmitted to our server over an encrypted connection, assembled into an email there and sent immediately to kontakt@insy.group. The web server stores neither the content of the form nor your IP address; it only records that a message was sent, or why sending failed. To protect against automated abuse, the form asks a simple arithmetic question, checks that it was not submitted immediately after loading, and the web server limits the number of requests per IP address. For this it keeps your IP address in memory for a few minutes without logging it (Art. 6 (1) (f) GDPR, legitimate interest in protection against spam and abuse). No third-party services such as captcha providers are used.

Email to kontakt@insy.group: this address is received by our own mail server, which runs on the same server at the host named in section 3. The mail server does not store incoming messages but forwards them immediately to a mailbox at the University of Rostock, from where we answer your enquiry. Forwarded messages are transmitted through the University of Rostock's systems and processed there in accordance with its data protection policy.

6. Links to social networks

This website contains plain links to our presence on Instagram, LinkedIn and WhatsApp. These are not embedded content or "like" buttons: visiting this website sends no data to these providers. Only when you click one of the links do you leave this website. Processing on the providers' sites (Meta Platforms Ireland Ltd. for Instagram and WhatsApp, LinkedIn Ireland Unlimited Company for LinkedIn) is governed by their own privacy policies.

7. Encryption

Connections to this website are encrypted with TLS (HTTPS), recognisable by the padlock icon and "https://" in your browser's address bar.

8. Your rights

With regard to your personal data, you have the following rights:

• access (Art. 15 GDPR)
• rectification (Art. 16 GDPR)
• erasure (Art. 17 GDPR)
• restriction of processing (Art. 18 GDPR)
• data portability (Art. 20 GDPR)
• objection to processing based on Art. 6 (1) (f) GDPR on grounds relating to your particular situation (Art. 21 GDPR)

To exercise these rights, simply write to the email address above. You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is: Thuringian State Commissioner for Data Protection and Freedom of Information, Häßlerstraße 8, 99096 Erfurt, https://www.tlfdi.de/.

9. Obligation to provide data, automated decisions

You are not obliged to provide us with any data. Without the technical data listed in section 4, however, the website cannot be delivered. No automated decision-making, including profiling, takes place.

Last updated: 15 October 2026