Legal

Privacy Policy

Last updated: July 2026

1. Controller

egraph GmbH i.G.
Lindenstrasse 14
91083 Baiersdorf
Germany

2. General information

This privacy policy explains which personal data is processed when you visit egraph.io or contact us, for which purposes it is used, and which rights you have under the General Data Protection Regulation (GDPR).

3. Hosting and server log files

When this website is accessed, the hosting provider may automatically process technical information such as the IP address, date and time of access, requested page or file, referrer URL, browser type, operating system and access status. This data is required to deliver the website, maintain system security and investigate technical faults or misuse.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is the secure, stable and efficient operation of the website. Log data is deleted or anonymised when it is no longer required for these purposes, unless statutory retention requirements apply.

4. Contact by email

When you contact us by email, we process the data you provide, including your email address, name, message content and any attachments, in order to answer your request.

The legal basis is Art. 6(1)(b) GDPR where your request relates to a contract or pre-contractual measures. In all other cases, processing is based on Art. 6(1)(f) GDPR and our legitimate interest in responding to business enquiries.

5. Cookies and local storage

The theme uses only technically necessary browser storage to remember your privacy selection. Optional analytics, advertising or marketing technologies are not activated by default.

If optional services are added later, they must not be loaded before valid consent has been obtained, where consent is legally required. You can reopen the privacy settings at any time through the link in the website footer.

6. Embedded content and external services

This theme does not intentionally load external analytics, advertising networks, social media plugins or externally hosted fonts. If the website is later extended with such services, this privacy policy and the consent mechanism must be updated before those services are activated.

7. Recipients and processors

Personal data may be processed by service providers that support the operation and hosting of the website. Such providers act on our instructions where required and are contractually bound in accordance with applicable data protection law.

Data is not transferred to other recipients unless this is necessary to provide the requested service, required by law, needed to establish or defend legal claims, or based on your consent.

8. Transfers outside the EEA

If a service provider processes personal data outside the European Economic Area, an appropriate transfer mechanism and any necessary supplementary safeguards will be implemented before the service is used.

9. Retention periods

Personal data is stored only for as long as required for the relevant purpose. Longer retention may apply where statutory retention periods, evidence requirements or the establishment, exercise or defence of legal claims require it.

10. Your rights

Subject to the legal requirements, you may have the right to:

request access to your personal data,
request correction of inaccurate data,
request erasure or restriction of processing,
receive data you provided in a portable format,
object to processing based on legitimate interests, and
withdraw consent at any time with effect for the future.

To exercise these rights, contact ruediger@rey.consulting.

11. Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for a particular complaint depends on the circumstances and your place of residence or work.

12. Data security

We use appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access and alteration. Internet-based communication can nevertheless contain security risks.

13. Changes to this policy

This privacy policy may be updated when the website, the services used, processing activities or legal requirements change. The version published on this page is the current version.

Implementation note: This policy reflects the default theme configuration without optional tracking. It must be reviewed before analytics, forms, external video embeds, third-party fonts or additional integrations are activated.