Privacy policy
Last updated: September 2026
This English version is provided for convenience. The German version (Datenschutzerklärung) is legally binding.
This website is deliberately lean. It uses no tracking, analytics or marketing cookies, embeds no third-party services and loads no fonts or scripts from external servers. Below we explain which data is nevertheless processed for technical reasons when you visit.
1. Controller
ERM scs GmbH
Fichtestraße 1–4, 08451 Crimmitschau, Germany
Managing director: Eckhardt Müller
Phone: +49 3762 9470440
Email: kontakt@ermscs-it.de
We have not appointed a data protection officer, as there is no legal obligation to do so.
2. Hosting and server log files
This website is operated on a server provided by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. A data processing agreement pursuant to Art. 28 GDPR is in place with the provider.
Each time the website is accessed, the web server automatically records the following data in log files:
- IP address of the requesting device
- date and time of access
- page or file requested and amount of data transferred
- HTTP status code
- referrer URL (previously visited page, if transmitted)
- browser type and operating system (user agent)
Purpose: delivering the website, ensuring stable and secure operation, defending against attacks.
Legal basis: Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure and error-free operation of the website.
Retention: log data is deleted after [NUMBER] days unless it is needed longer to investigate a specific security incident.
3. Contact by email
If you email us, we process your email address, your name (if provided) and the content of your message in order to answer your enquiry.
Legal basis: Art. 6(1)(b) GDPR if your enquiry relates to a contract or pre-contractual measures, otherwise Art. 6(1)(f) GDPR (legitimate interest in answering enquiries).
Retention: we delete the data once your enquiry has been fully dealt with, unless statutory retention obligations (e.g. under commercial or tax law) apply.
4. Cookies and local storage
This website sets no cookies.
So that the privacy notice does not reappear on every visit, we store your choice in your browser's local storage (localStorage, entry erm-consent-v1, content: selected categories and time). This information stays on your device and is not transmitted to us or to third parties.
Legal basis: Section 25(2) no. 2 TDDDG (German Telecommunications Digital Services Data Protection Act: strictly necessary to provide the service you requested) and Art. 6(1)(f) GDPR.
You can delete the entry at any time in your browser settings or change your choice via “Cookie settings” in the footer.
The “External content” category is prepared but not currently in use. Should we embed third-party content in the future, it will only be loaded after your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG), and we will update this policy accordingly.
5. No analytics, no tracking, no profiling
We do not use web analytics services, social media plugins, advertising networks or map services. There is no profiling and no automated decision-making within the meaning of Art. 22 GDPR. All fonts and graphics are served from our own server.
6. Encryption
For security reasons, this website uses SSL/TLS encryption. You can recognise an encrypted connection by “https://” and the padlock icon in your browser's address bar.
7. Your rights
Within the limits of the law, you have the right at any time to:
- access the data stored about you (Art. 15 GDPR)
- rectification of inaccurate data (Art. 16 GDPR)
- erasure (Art. 17 GDPR)
- restriction of processing (Art. 18 GDPR)
- data portability (Art. 20 GDPR)
- withdraw any consent given, with effect for the future (Art. 7(3) GDPR)
Right to object (Art. 21 GDPR): Where we process data on the basis of Art. 6(1)(f) GDPR, you may object at any time on grounds relating to your particular situation.
An informal message to kontakt@ermscs-it.de is sufficient.
8. Right to lodge a complaint
You have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is:
Die Sächsische Datenschutz- und Transparenzbeauftragte (Saxon Data Protection and Transparency Commissioner)
Maternistraße 17, 01067 Dresden, Germany
Postal address: Postfach 11 01 32, 01330 Dresden, Germany
www.datenschutz.sachsen.de
9. Changes
We will update this privacy policy whenever the website or the legal situation changes. The version published here applies.