Privacy Notice — Software Kitchen GmbH

I. Information about us as the controller

The controller within the meaning of data protection law, in particular the EU General Data Protection Regulation (GDPR), is:

Software Kitchen GmbH
Georg-Aichinger-Str. 12
93055 Regensburg
Germany

Managing Director: Miroslaw Szega
Phone: +49 941 463 91 187
Email: info@software-kitchen.com

We have not appointed a data protection officer, as the statutory requirements for doing so are not met. For any data protection matter, please reach us using the contact details above.

II. Rights of users and data subjects

With regard to the data processing described below, you have the right as a data subject:

to obtain confirmation as to whether data concerning you is being processed, together with access to that data and further information about the processing (Art. 15 GDPR);
to have inaccurate data rectified or incomplete data completed (Art. 16 GDPR);
to have data concerning you erased without undue delay (Art. 17 GDPR) or, where erasure conflicts with a legal obligation, to have its processing restricted (Art. 18 GDPR);
to receive data concerning you in a structured, commonly used and machine-readable format and to have it transmitted to another controller (Art. 20 GDPR);
to withdraw a consent you have given, with effect for the future (Art. 7 (3) GDPR);
to lodge a complaint with a supervisory authority (Art. 77 GDPR).

Right to object: Under Art. 21 GDPR you have the right to object to the future processing of data concerning you where we process it on the basis of legitimate interests pursuant to Art. 6 (1) (f) GDPR. Where your data is processed for direct marketing purposes, you may object at any time without giving reasons.

The supervisory authority responsible for us, to which you may address a complaint, is:

Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 18
91522 Ansbach

III. Server data and hosting

For technical reasons, in particular to ensure secure and stable operation, your browser transmits data to us and to our hosting provider when you access our website. This data is stored in so-called server log files and comprises:

type and version of the browser used
operating system used
the previously visited page (referrer URL)
the IP address of the accessing device
date and time of access, plus the name and size of the file requested

The legal basis is Art. 6 (1) (f) GDPR. Our legitimate interest lies in the security, stability and error-free operation of our website. This data is not merged with other data sources, nor evaluated for marketing purposes. It is processed by our hosting provider as part of operating the platform and deleted in line with that provider's retention periods; we do not access individual server log files ourselves, nor do we derive any analysis from them.

This website is delivered as a static site via Microsoft Azure. The service provider and processor is:

Microsoft Ireland Operations Limited
One Microsoft Place, South County Business Park
Leopardstown, Dublin 18, D18 P521
Ireland

We have selected the Azure region West Europe as the deployment region. A data processing agreement pursuant to Art. 28 GDPR is in place with Microsoft in the form of the “Microsoft Products and Services Data Protection Addendum” (DPA). Under the EU Data Boundary, Microsoft commits to storing and processing customer data and pseudonymised personal data falling within the scope of the GDPR inside the EU or EFTA.

For technical reasons the service delivers content via a globally distributed network of edge locations. A request may therefore be served from a location outside Germany, and processing in a third country — in particular by the parent company Microsoft Corporation (One Microsoft Way, Redmond, WA 98052, USA) — cannot be entirely ruled out. For such cases the EU Standard Contractual Clauses have been agreed as safeguards; Microsoft Corporation is additionally certified under the EU-US Data Privacy Framework. Further information: privacy.microsoft.com.

All transmission is encrypted via HTTPS (TLS). You can recognise active encryption by the padlock symbol in your browser's address bar.

IV. No cookies, no tracking

This website sets no cookies and uses neither local storage nor session storage. A cookie banner is therefore not required.

We use no analytics, tracking or audience-measurement services (such as Google Analytics, Matomo or comparable tools) and we do not create usage profiles. Google reCAPTCHA and similar bot-detection services are not used.

All fonts, images, logos and scripts are served from our own domain. No resources are loaded from content delivery networks or external font services such as Google Fonts or Adobe Fonts. Consequently, simply viewing our pages transmits no data to third parties.

V. Contacting us

You can reach us via the contact form on this website, by email or by telephone. When you contact us, the data you provide — in the contact form your name, your email address, optionally your company, and your message — is processed in order to handle your enquiry.

The legal basis is Art. 6 (1) (b) GDPR where the enquiry relates to the conclusion or performance of a contract, and otherwise Art. 6 (1) (f) GDPR based on our legitimate interest in responding to enquiries. Providing your name, email address and message is necessary for us to answer your enquiry; all other details are voluntary.

The contact form runs entirely on this domain; no external form service is embedded. To guard against automated submissions, your browser solves a computational puzzle that our own server issues and verifies — no captcha provider is involved, no cookies are set, and no IP address is passed to third parties.

Delivery of form messages to our mailbox is handled by Azure Communication Services — a service from the same provider that hosts this website (section III). No additional processor is involved; the service's data storage location is set to Germany, so delivery entails no third-country transfer.

Your data is deleted once your enquiry has been conclusively dealt with, provided no statutory retention obligations — in particular commercial and tax law retention periods — prevent deletion. Your data is not passed on to third parties for advertising purposes.

VI. Links to WhatsApp, LinkedIn and map services

We include references to external services on this website — as plain links and as QR codes. The QR codes are generated when the page is built and embedded directly into it; displaying them establishes no connection to third parties. Data is transmitted only once you click a link, or scan a QR code and confirm the action it contains. The legal basis for offering these contact channels is Art. 6 (1) (f) GDPR; our legitimate interest lies in making contact simple and low-friction.

WhatsApp — The WhatsApp link and its QR code (https://wa.me/4994146391187) open a chat with us. The operator is WhatsApp Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland. When you use it, WhatsApp processes your phone number and the content of the communication; transfer to third countries, in particular the USA, is possible. We have no influence over the nature or extent of this processing. For details see WhatsApp's privacy policy: whatsapp.com/legal/privacy-policy-eea. If you wish to avoid this, please use email, telephone or the contact form instead.

LinkedIn — The LinkedIn link and its QR code lead to our company profile (https://www.linkedin.com/company/software-kitchen-gmbh). The operator is LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland. This is a plain link only; no LinkedIn plug-ins, tracking pixels or scripts are used on our website. Data is transmitted to LinkedIn only when you click. Further information: linkedin.com/legal/privacy-policy.

Map service — Our address is linked to Google Maps so that you can conveniently open directions in your map app. No map is embedded; a connection to Google is established only when you click the link. The operator is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Further information: policies.google.com/privacy.

VII. Retention period

Data processed when you use our website is deleted, or its processing restricted, as soon as the purpose of storage ceases to apply. Storage beyond that point occurs only where provided for by EU or national legislation — in particular commercial and tax law retention periods.

VIII. Changes to this privacy notice

We update this privacy notice when the data processing on this website changes — for instance through new features — or when the legal situation requires it. The version published here applies in each case. Last updated: July 26, 2026.