legal

Privacy policy

This policy covers the websites and services of Michler IT at michlerit.de and torbenmichler.de and their subdomains (except the personal website torbenmichler.de itself, which has its own policy): the website, the cloud (cloud.michlerit.de), the email services, the customer site management (sites.michlerit.de) and previews and customer sites such as mk.michlerit.de.

1. Controller

Email: unternehmen@michlerit.de · Owner and further details: Legal notice

Michler IT is not required to appoint a data protection officer (Section 38 of the German Federal Data Protection Act, BDSG).

2. Hosting with netcup

All websites, the cloud, the mailboxes and the content of customer sites are stored on a server that Michler IT rents from netcup GmbH, Daimlerstraße 25, 76185 Karlsruhe, Germany. The server is located in a netcup data centre in Germany. Michler IT operates and administers the server itself; netcup provides the hardware, power and network connection and can technically access the stored data. A data processing agreement pursuant to Art. 28 GDPR is in place with netcup.

The legal basis is Art. 6(1)(f) GDPR: Michler IT has a legitimate interest in running its services reliably and securely on its own server in Germany rather than through third-party providers based outside the EU.

3. Server logs

When you open a page, the server processes technically necessary data and writes it to logs:

• IP address of the requesting device
• date and time
• requested address, method and status code
• amount of data transferred and response time
• browser and operating system (user agent) and the previously visited page (referrer), if your browser sends them

The purpose is secure and reliable operation: finding errors and detecting and preventing attacks. The legal basis is Art. 6(1)(f) GDPR. The logs are not combined with other data and are not analysed to identify visitors. They are overwritten automatically once they reach a set size (at most 30 MB per service) and are not kept permanently as part of the nightly backup.

4. Cookies

The services only set cookies that are technically necessary (Section 25(2) No. 2 of the German Telecommunications Digital Services Data Protection Act, TDDDG):

• Cloud (cloud.michlerit.de): session and login cookies while you are signed in; longer if you choose “Remember me”.
• Management (sites.michlerit.de): one login cookie for at most 12 hours.
• Protected previews and customer sites: after you enter the password, a cookie that recognises you as authorised for 30 days. It does not contain the password.

There are no cookies for statistics, advertising or tracking. The “Motion” and “Dark” switches on michlerit.de keep your choice only in your browser’s storage (localStorage); it is not transmitted.

5. No analytics, no third-party services

Michler IT uses no analytics tools, no advertising networks and no social media plugins. Fonts, graphics and scripts are loaded from its own server, not from Google or other providers. Connections are always encrypted (TLS).

Exception: visits to preview and customer sites. For sites that Michler IT provides to individual customers (for example drafts for review), it is recorded when a page is opened and whether the password was entered: date and time, the page opened, device type and browser, and the shortened IP address (IPv4 without the last number, IPv6 only the first three blocks). A short code is derived from the shortened address and the browser to group visits from the same device. The approximate location (city or region) and the internet provider are also derived from the shortened address, using a database stored on the server itself (DB-IP); nothing is sent to third parties for this. The purpose is to know whether and when a preview that was sent has been viewed, so that follow-up questions can be asked at the right time. The legal basis is Art. 6(1)(f) GDPR. No cookie is set for this, no data is passed to third parties, and entries are deleted after 90 days.

6. Sign-in and abuse protection

When you sign in to the cloud, the management or a protected preview, the server checks your password. Passwords are only stored in hashed form. Failed sign-in attempts are stored briefly together with the IP address to slow down password guessing. The legal basis is Art. 6(1)(b) and (f) GDPR.

7. Cloud and email accounts

For account holders, the name, email address, sign-in data and the stored files, calendars, contacts and emails are kept on the server at netcup. Michler IT processes this data only to provide the services (Art. 6(1)(b) GDPR) and deletes it when the account is closed, unless statutory retention obligations apply. To protect against data loss, the server is backed up every night; backups are deleted after seven days.

8. Contact by email

If you write to Michler IT, your details are processed to answer your request (Art. 6(1)(b) GDPR for requests relating to an assignment, otherwise (f)). Business correspondence is kept for the periods required by German commercial and tax law (Section 257 HGB, Section 147 AO: six or ten years); everything else is deleted once your request has been dealt with.

9. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on Art. 6(1)(f) GDPR (Art. 21). An informal email to unternehmen@michlerit.de is enough.

You can also lodge a complaint with a data protection supervisory authority. The authority responsible for Michler IT is the Unabhängiges Landeszentrum für Datenschutz Schleswig-Holstein, Holstenstraße 98, 24103 Kiel, Germany, datenschutzzentrum.de.

10. Changes

This policy is updated when the services change. The version published here applies.

This English version is provided for convenience. The German version is legally binding.

last updated: november 2026