Privacy Policy

• You can read every page of this site without giving us anything. No account, no sign-up, no tracking cookies unless you say yes.
• If you fill in the contact form, we get what you typed and use it to answer you.
• Analytics and advertising cookies stay switched off until you accept them, and you can withdraw that at any time from the footer of any page.
• We do not sell personal data, and we do not share it for anyone else's advertising.
• You can ask us for a copy of what we hold, ask us to correct it, or ask us to delete it, and we have a month to answer.

The rest of this page is the detail behind those five points.

The controller for the personal data described here, within the meaning of Art. 4(7) GDPR, is:

Controller

IvB Digital Services GmbH

Address

Goebenstraße 10, 10783 Berlin, Germany

Email

info@techavtar.com

Full company details are on our Impressum. We have not appointed a data protection officer: we are below the threshold in §38 BDSG and our core activity is not large-scale monitoring or processing of special category data. Privacy questions go to the address above and reach a person.

When you simply read the site

Our web server records each request: your IP address, the time, the page requested, the referring page, and your browser's user agent string. This is how a web server works, and it is what lets us keep the site available and spot abuse. Legal basis: our legitimate interest in a secure, working website (Art. 6(1)(f) GDPR). These logs are kept for 14 days and then deleted.

Fonts are served from our own server, so rendering a page sends your IP address to nobody but us. Nothing else loads from a third party unless you have consented to it.

When you use the contact form

We receive what you type: your name, email address, and message, plus phone number, company, service interest and budget range if you choose to give them. We use it to answer you and to discuss the work you are asking about. Legal basis: taking steps at your request before entering a contract (Art. 6(1)(b) GDPR), and our legitimate interest in responding to business enquiries (Art. 6(1)(f) GDPR).

Giving us this is voluntary, but without at least a name, an email address and a message we cannot reply.

When you email, call or message us

We keep the correspondence and whatever it contains, for the same purpose and on the same basis. Choosing WhatsApp means Meta processes the message too, under their terms — email or the form if you would rather they did not.

If you accept analytics or marketing cookies

Google Analytics 4 receives a pseudonymous identifier, the pages you view, and a shortened IP address, so we can count visits and see which pages are useful. Advertising measurement tells us whether an ad led to an enquiry. Both run only on your consent (Art. 6(1)(a) GDPR, §25(1) TTDSG) and stop the moment you withdraw it.

What we never collect here

No payment or card details — this site sells nothing. No visitor accounts. No precise location. No special category data under Art. 9 GDPR. No session recording or heatmaps. We run no mobile app that feeds this site.

Named individually, with their retention periods, in our Cookie Policy. In summary: three strictly necessary items (your theme, your cookie decision, and an admin sign-in token that ordinary visitors never receive), plus analytics and advertising cookies only if you accept them.

We do not sell personal data and do not disclose it for anyone else's marketing. These are the processors and recipients involved in running this site:

Each processor works under a data processing agreement under Art. 28 GDPR. Beyond them, we disclose personal data only where the law requires it, or to our professional advisers where necessary to establish or defend a legal claim.

Some of the recipients above are in the United States. Those transfers rely on the European Commission's Standard Contractual Clauses, and for Google additionally on its certification under the EU–US Data Privacy Framework. You may ask us for a copy of the safeguards that apply to a particular transfer. We are also part of a group with companies in India and the UAE; where a colleague there works on your enquiry, the same clauses apply.

Web server logs

14 days

Contact form submissions and correspondence

Up to 24 months after our last contact, unless the enquiry becomes a project

Records relating to an actual engagement

Up to 10 years, where German commercial and tax law requires it (§257 HGB, §147 AO)

Your cookie decision

12 months, then we ask again

Analytics data

14 months in Google Analytics

When a retention period ends we delete the data, or anonymise it so it can no longer be linked to you.

Under the GDPR you can ask us to:

• Tell you what we hold and give you a copy (Art. 15)
• Correct anything inaccurate or incomplete (Art. 16)
• Delete it, where we have no overriding reason to keep it (Art. 17)
• Restrict what we do with it while a dispute about it is resolved (Art. 18)
• Hand it over in a portable, machine-readable form (Art. 20)
• Object to processing based on our legitimate interests, on grounds relating to your situation — and to direct marketing at any time, with no reason needed (Art. 21)
• Withdraw consent at any time, which does not affect what was lawful before you withdrew it (Art. 7(3))

Write to info@techavtar.com. We answer within one month, and tell you if we need longer. It is free unless a request is manifestly unfounded or excessive. We may ask you to confirm your identity, but only what is needed to be sure we are not disclosing your data to someone else.

You also have the right to complain to a supervisory authority — for us, the Berliner Beauftragte für Datenschutz und Informationsfreiheit, or the authority where you live or work. We would rather you told us first and gave us a chance to fix it.

We make no decisions about you by automated means alone, and we do no profiling within the meaning of Art. 22 GDPR. An enquiry that arrives through this site is read by a person.

The site is served over HTTPS with HSTS, a content security policy and the related protective headers. Database access is governed by row-level security so a visitor's browser can submit the contact form but cannot read anyone's submission. The administration area is restricted to named accounts, and changes to content are recorded in an audit log with the account that made them.

No system is perfectly secure. If a breach occurs that is likely to result in a high risk to your rights, we will tell you, and the supervisory authority within 72 hours as Art. 33 GDPR requires.

This is a business-to-business site and is not directed at children. We do not knowingly collect data from anyone under 16. If you believe a child has sent us personal data, tell us and we will delete it.

We update this page when what we do changes — adding a processor, or a new way of collecting data, means updating this page as part of the change rather than afterwards. The date at the top is the version in force. Where a change materially affects you, or relies on your consent, we will ask again rather than assume.

Anything about this policy or your data: info@techavtar.com, or IvB Digital Services GmbH, Goebenstraße 10, 10783 Berlin, Germany.