Last updated: 25 October 2026
1 Controller and scope
The controller responsible for this website and handling enquiries is:
Robin Baldner · emergo
Liebigstr. 8, 69226 Nussloch, Germany
Email: info@emergo.biz · Telephone: +49 170 6329 100
This notice covers emergo.biz and www.emergo.biz, including the German and English pages and subsequent communications. Additional notices may apply to a later advisory engagement.
2 Visiting the website
When the website is accessed, technical connection and access data are processed, particularly the IP address, page requested, access time and request information supplied by the browser. This serves to deliver content, detect faults and attacks, and operate the website securely.
The legal basis is Article 6(1)(f) GDPR. The legitimate interest is a reliably accessible and secure website. Retention periods are set out in section 6.
3 Contact form and email
When you make contact, the contact details, content and any attachments you provide are processed to understand and answer your enquiry and prepare a possible conversation or engagement.
The form requires an email address and a description of your situation. Your name, organisation, role, reason for making contact and clarification needs are optional. The submission also includes language, page and contact context and submission time. Your enquiry is sent by email for handling.
Providing these details is not a statutory or contractual requirement for an initial enquiry. The form cannot be submitted without the required information; without a way to contact you, a reply is not possible. Alternatively, you may send an email. Please provide only necessary information and do not include particularly sensitive or confidential information.
Article 6(1)(b) GDPR applies to enquiries concerning steps to enter into or perform your own contract. General enquiries and contacts on behalf of an organisation rely on Article 6(1)(f) GDPR; the legitimate interest is appropriate business communication.
Technical checking data and pseudonymous identifiers derived from IP and email addresses are processed to protect against abusive submissions. Technical error data help resolve sending faults. In both cases, the basis is Article 6(1)(f) GDPR and the legitimate interest in an available and reliable means of contact.
4 Cookies and external content
Visiting the public pages does not use cookies or comparable persistent browser storage. No analytics or advertising trackers are used. Fonts, images and diagrams are provided without requests to external content services.
5 Recipients and processing outside the EEA
STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany, provides web hosting and email communication services. STRATO processes the relevant personal data on the controller’s behalf under a data processing agreement in accordance with Article 28 GDPR. Other recipients are providers of cloud-based email processing and file storage in Ireland. They receive the data required for their respective services.
Cloud-based communication and storage may also involve processing by affiliated companies and service providers outside the European Economic Area, particularly in the United States. The cloud provider refers to the EU-US Data Privacy Framework adequacy decision for covered transfers to participating US companies (Article 45 GDPR) and to standard contractual clauses for other transfers (Article 46 GDPR).
The cloud provider’s information on recipients, processing locations and transfer safeguards: Privacy statement. Information on the adequacy decision: EU-US Data Privacy Framework.
6 Retention and erasure
Simple completed enquiries are erased no later than six calendar months after documented closure of handling, unless a specific continuing need or statutory retention obligation applies.
Business letters subject to retention requirements are generally retained for six years; invoices and accounting vouchers are generally retained for eight years from the end of the relevant calendar year. The basis is Article 6(1)(c) GDPR together with the applicable retention provisions, particularly section 147 of the German Fiscal Code and section 14b of the German Value Added Tax Act. Statutory extensions remain applicable. Data needed to establish or defend specific legal claims are retained under Article 6(1)(f) GDPR until that purpose no longer applies.
Access logs are retained for six weeks, error logs for up to five days and separate security IP data for up to seven days. The IP address or hostname in the supplied access logs is anonymised; this does not make all log content anonymous. Technical sending events are retained for one month. Abuse checks have a 30-minute window from the last update; expired checking data may remain in systems or backups until technical clean-up.
Website recovery copies are retained for up to one month; separate dated mail backup sets for 30 days from creation. Other recovery copies may remain for up to twelve months, and deleted-file recovery areas for up to 180 days. No uniform maximum age has been confirmed for earlier cloud-based file versions; retention depends on version history and targeted removal. Erasing data from active storage therefore does not simultaneously remove such copies. Backups serve recovery; any erasures that became due in the meantime must be taken into account again after restoration.
7 Your rights
Subject to the statutory conditions, you have rights of access (Article 15 GDPR), rectification (Article 16), erasure (Article 17) and restriction of processing (Article 18). Where Article 20 GDPR applies, you may receive data you provided in a structured, commonly used and machine-readable format and request transmission to another controller.
Where processing relies on consent, you may withdraw it at any time for the future without affecting the lawfulness of earlier processing. Submitting the contact form is not treated as consent for ordinary enquiry handling.
You may exercise your rights using the contact details in section 1. You may also complain to a data protection supervisory authority, particularly where you habitually reside, work or suspect an infringement. For the controller’s place of business, this may be the State Commissioner for Data Protection and Freedom of Information Baden-Württemberg: Beschwerde / complaint. You do not need to contact emergo first.
8 Right to object
Where processing relies on Article 6(1)(f) GDPR, you may object at any time on grounds relating to your particular situation. Processing will then stop unless overriding compelling legitimate grounds are demonstrated or processing is necessary to establish, exercise or defend legal claims. You may use the contact details in section 1 to object.
9 Automated decisions
There are no decisions based solely on automated processing, including profiling, that produce legal or similarly significant effects within Article 22 GDPR.