Privacy
This is a translation for convenience. The German version is legally binding.
Last updated: 24 October 2026
1. Controller
The controller responsible for processing personal data on this website is:
CASTOR.IO
Owner: Christoph Castor
Am Industriepark 38
46562 Voerde
Germany
Email: datenschutz@castor.io
2. General information on data protection
We take the protection of your personal data seriously. We process personal data exclusively within the framework of the applicable data protection regulations, in particular the General Data Protection Regulation (GDPR) and the German Telecommunications Digital Services Data Protection Act (TDDDG).
Our website provides information about our company and our services.
We do not use tracking, web analytics, personalised advertising or user profiling.
Personal data is only processed insofar as this is necessary for the technical provision and secure operation of the website or for handling direct contact.
3. Hosting
Our website is hosted by:
Hetzner Online GmbH
Industriestr. 25
91710 Gunzenhausen
Germany
Website: https://www.hetzner.com
As part of hosting, technically necessary data that is transmitted to the server when you access our website is processed.
The processing serves the secure, stable and reliable provision of our website.
The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the technically error-free provision and protection of our website.
Insofar as Hetzner processes personal data on our behalf, this is done on the basis of a data processing agreement pursuant to Art. 28 GDPR.
4. Server log files
When you visit our website, the web server may automatically process technical information and store it in server log files.
This may include in particular:
- IP address of the accessing device
- Date and time of access
- Pages and files accessed
- Browser type and version
- Operating system used
- Amount of data transferred
- HTTP status code
- Referrer URL, if transmitted by the browser
This data is processed exclusively for technical operation, error analysis and ensuring the security of our website.
It is not combined with other data sources to create user profiles.
The legal basis is Art. 6(1)(f) GDPR.
Retention period: The web server log files are rotated daily and automatically deleted after 7 days.
The data is deleted after the defined retention period unless further storage is necessary to investigate security incidents.
5. Cookies and local storage
According to the current technical configuration, our website does not use cookies or comparable storage technologies for analytics, advertising or tracking purposes.
No personal user profiles are created and no marketing or tracking information is stored on your device.
Insofar as strictly necessary storage or access operations are used to operate the website, this is done within the statutory exceptions pursuant to § 25(2) TDDDG.
6. No web analytics or tracking services
We do not use any web analytics or tracking services.
In particular, we do not use services such as Google Analytics, Google Tag Manager, Meta Pixel or comparable analytics and marketing technologies.
Individual usage behaviour is not evaluated for advertising, marketing or profiling purposes.
7. No embedded external services
Our website does not use externally embedded services such as Google Fonts, Google Maps, YouTube or external analytics and advertising networks.
The resources required to display the website are provided via our own hosting infrastructure.
When the website is accessed normally, no personal data is therefore transferred to external platforms as a result of such third-party integrations.
8. Contact by email
There is no contact form on our website.
If you voluntarily contact us by email, we process the information you provide, in particular your email address and the content of your message, exclusively to handle and answer your enquiry.
The legal basis is Art. 6(1)(b) GDPR insofar as the contact serves the initiation or performance of a contract.
For other enquiries, processing is based on Art. 6(1)(f) GDPR. Our legitimate interest lies in handling incoming enquiries.
The data is deleted as soon as it is no longer required for the respective purpose and no statutory retention obligations apply.
9. Encrypted data transmission
Our website uses SSL/TLS encryption.
This protects the data transmitted between your browser and our web server against unauthorised reading during transmission.
You can recognise an encrypted connection by "https://" in your browser's address bar.
10. Recipients of personal data
Personal data is only passed on insofar as this is necessary for the technical operation of the website, to fulfil legal obligations or to handle your enquiries.
As part of hosting, Hetzner Online GmbH may process personal data as a processor.
Personal data is not passed on to advertising networks, tracking providers or data brokers.
11. Transfers to third countries
We do not use any external tracking, analytics or marketing services on our website that would cause personal data to be transferred to countries outside the European Union or the European Economic Area.
Our web server and our email server are operated in data centres of Hetzner Online GmbH in Germany. Personal data is not transferred to third countries.
12. Your rights as a data subject
Within the framework of the applicable statutory provisions, you have the following rights:
Right of access (Art. 15 GDPR)
You can request information about whether and which personal data we process about you.
Right to rectification (Art. 16 GDPR)
You have the right to have inaccurate personal data corrected.
Right to erasure (Art. 17 GDPR)
You can request the erasure of your personal data under the statutory conditions.
Right to restriction of processing (Art. 18 GDPR)
You can request the restriction of processing under the statutory conditions.
Right to data portability (Art. 20 GDPR)
Where the statutory requirements are met, you have the right to receive your personal data in a structured, commonly used and machine-readable format.
Right to object (Art. 21 GDPR)
Insofar as we process personal data on the basis of Art. 6(1)(f) GDPR, you have the right to object to this processing at any time on grounds relating to your particular situation.
Withdrawal of consent (Art. 7(3) GDPR)
Insofar as processing is based on your consent, you can withdraw it at any time with effect for the future.
To exercise your rights, please contact datenschutz@castor.io.
13. Right to lodge a complaint with a supervisory authority
Pursuant to Art. 77 GDPR, you have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data violates applicable data protection law.
The supervisory authority responsible for our place of business is:
Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW)
Postfach 20 04 44
40102 Düsseldorf
Germany
Website: https://www.ldi.nrw.de
14. Automated decision-making
Automated decision-making, including profiling pursuant to Art. 22 GDPR, does not take place on our website.
15. Changes to this privacy policy
We reserve the right to amend this privacy policy if this becomes necessary due to legal, technical or organisational changes.
The version published on our website at any given time applies.