This is a translation provided for convenience. In the event of any discrepancy, the German version at arciva.de/datenschutz/ prevails.
Controller
MajuSoft
Marius Kaczmarek
Ruhfäutchenplatz 3
38100 Braunschweig
Germany
Email: kontakt@arciva.de
No data protection officer has been appointed, as the legal requirements for doing so are not met.
Contacting us by email
If you contact us by email, we process the data you send us. This may include your email address, your name, the content and time of your message and any attachments you send.
The processing serves to handle and answer your enquiry and to conduct the related correspondence.
Your message is stored in a mailbox on the same server that hosts this website. It is not forwarded to an external email provider.
If your enquiry relates to an existing contract or to pre-contractual measures, the legal basis is Art. 6(1)(b) GDPR. For all other enquiries, processing is based on Art. 6(1)(f) GDPR. Our legitimate interest lies in handling and answering incoming enquiries properly.
The data is deleted once your enquiry has been dealt with conclusively and no statutory retention obligations, the establishment or defence of legal claims, or other legitimate grounds require further storage. Where a statutory retention obligation applies, further processing is based on Art. 6(1)(c) GDPR.
What this website does NOT do
This section comes first on purpose, because it answers most of the usual privacy questions:
- No analytics tools. No Google Analytics, no Matomo, no tracking pixels.
- No advertising networks and no cross-site tracking.
- No external fonts or scripts. The site loads files exclusively from its own server – no Google Fonts, no CDNs.
- No comment function and no contact form.
- No user accounts for visitors.
- No embeds from YouTube, Vimeo, maps or social networks.
Server log files
When you access this website, your browser automatically transmits technically necessary information to our web server. This information is stored in what are known as server log files.
The following data in particular may be processed:
- IP address of the requesting device (anonymised when the logs are rotated)
- date and time of access
- page or file requested
- HTTP status code
- amount of data transferred
- browser type and version
- operating system used
- referrer URL, where transmitted by the browser
This data is processed exclusively for the purpose of providing the website technically, ensuring the security and stability of the system, and detecting, analysing and averting technical faults or abusive access.
The legal basis for the processing is Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure, reliable and error-free operation of this website.
The server log files are rotated daily. IP addresses are anonymised when the logs are rotated. Log files are deleted after seven days at the latest, unless they are needed longer in an individual case to investigate or avert a specific security incident.
Hosting
This website runs on a virtual server provided by the following hosting company:
Contabo GmbH
Welfenstraße 22
81541 München
Germany
The server we use is located in the Contabo region „Hub Europe“ within the European Union.
In providing and operating the technical infrastructure, Contabo processes personal data on our behalf. This may include connection and server log data in particular.
A data processing agreement pursuant to Art. 28 GDPR is in place with Contabo.
Backups
A backup of this website is created daily at 04:45 and stored on separate storage space at Contabo, which is likewise operated within the European Union. A full backup is created once a month. The three most recent full backups are retained; older ones are deleted automatically. Data from a backup is therefore available for around three months at most.
A backup covers the hosting settings, the files and databases of the website and the email mailboxes. Server log files are excluded from the backup.
It therefore also contains personal data, namely the content of emails sent to us. It contains no further visitor data: this website offers neither a comment function nor a contact form nor user accounts for visitors, and the log files are excluded.
The legal basis is Art. 6(1)(f) GDPR. The legitimate interest lies in being able to restore the website after a technical fault, an operating error or an attack. A data processing agreement pursuant to Art. 28 GDPR is also in place for the backup storage.
Cookies
This website uses only technically necessary cookies. No consent is required for these, which is why there is no cookie banner.
pll_language– stores the language currently displayed so that the choice is retained on your next visit. The cookie is set on your very first visit and updated when you switch languages. Lifetime: one year. Set by the multilingual plugin Polylang.WordPress login cookies– for logged-in editors only, not for visitors.- Storage of the language cookie takes place pursuant to Section 25(2)(2) of the German TDDDG, as it is strictly necessary in order to provide the multilingual website.
Plugins in use
- Polylang – multilingual support. Sets the cookie named above; transmits no data to third parties.
- Rank Math SEO – generates information for search engines. No transmission of visitor data.
- Wordfence Security – protection against attacks. Details in the following section.
Wordfence Security
This website uses the security plugin Wordfence from Defiant, Inc., Seattle, USA. Wordfence protects the website against malware, unauthorised access, automated login attempts and other attacks.
In particular, IP addresses, the time and type of access, the addresses requested, browser information and details of failed login attempts and detected attacks may be processed.
Security logs are generally deleted after seven days at the latest. They are stored for longer only where this is necessary to investigate or avert a specific security incident.
The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in protecting this website and its technical systems against attacks and unauthorised access.
Where attempted attacks are detected, security-related information may be transmitted to Defiant, Inc. in the USA. The transfer takes place on the basis of the European Commission’s standard contractual clauses pursuant to Art. 46 GDPR.
Search engines
The website can be found by search engines via a sitemap. When the home page is opened, you are redirected to the matching language version based on your browser’s language setting. The language setting is only evaluated for this purpose, not stored; the only thing set is the language cookie described above.
Automated decision-making, including profiling within the meaning of Art. 22 GDPR, does not take place.
Your rights
Within the limits of the statutory requirements, you have the right to information about your personal data, to rectification of inaccurate data, to erasure, to restriction of processing and to data portability.
Where processing is based on Art. 6(1)(f) GDPR, you also have the right to object to the processing on grounds relating to your particular situation. You can send your objection informally to the contact address given above under „Controller“.
Right to lodge a complaint with a supervisory authority
Under Art. 77 GDPR you have the right to lodge a complaint with a data protection supervisory authority if you consider that the processing of your personal data infringes the GDPR.
The supervisory authority responsible for us is:
Der Landesbeauftragte für den Datenschutz Niedersachsen
Prinzenstraße 5
30159 Hannover
Germany
Telephone: +49 511 120-4500
Email: poststelle@lfd.niedersachsen.de
The Arciva app
This privacy policy relates exclusively to the website arciva.de.
The privacy policy for the Arciva app is available at Privacy – App.
This privacy policy was last updated in August 2026.