Privacy policy

This policy applies to the Soft Shop at geier-it.eu/software. The privacy policy of the main site applies to the other pages of geier-it.eu.

Controller

Geier-IT – Anton Geier, Untere Bergstraße 2, 55487 Sohren, telephone +49 152 04202892, email info@geier-it.eu.

The most important points first

This website does not use any analytics or advertising services of other providers and does not load any content from third-party servers. Images are stored on our own servers, and no fonts are loaded. We count how often the site is accessed ourselves and without cookies; see “Visiting the website” below.

Hosting

Our website and our technical servers, including the licence server, run on our own infrastructure in Germany. No external hosting provider is involved.

Visiting the website

When you visit the website, our server processes technically necessary data such as IP address, time, page accessed and browser identifier. This serves the delivery and security of the website (Art. 6(1)(f) GDPR). We keep logs only for as long as is necessary for secure operation. To protect against misuse, we count form attempts per IP address and per email address; for this purpose, instead of the address we store a check value from which the address cannot be recalculated, and we delete it after 24 hours at the latest.

To see how often and from which countries our website is accessed, and to notice misuse, we store each page view with the IP address, the country determined from it, the time and the page accessed for 7 days (Art. 6(1)(f) GDPR). We determine the country using a file on the same server that runs this website. The address is not passed to any other service for this. Only the owner can view this data. After that, only the numbers per day and country remain, without the IP address. We do not set any additional cookie for this.

We can block access to this website and to geier-it.eu for individual countries. If this country control is switched on, we compare your IP address with the same file on our server on each visit. We do not store the address for this check and do not pass it on to anyone. If your country is blocked, we only count the day and the country. This serves to protect against misuse (Art. 6(1)(f) GDPR). The country data comes from [DB-IP](https://db-ip.com).

Cookies

We set one technically necessary cookie (“gi_session”). It retains your login and your shopping basket and protects forms against misuse (§ 25(2) TDDDG, Art. 6(1)(f) GDPR). If you do not log in, it ends when you close the browser. A login ends no later than twelve hours after you logged in; the cookie itself expires twelve hours after your last page view. No consent is required for this. If you switch the site to English, a second technically necessary cookie (“gi_lang”) remembers this choice until you close the browser.

Customer account and trial key

For registration, we process your name, email address and, optionally, your company, and your password only as a secure hash value. We send a confirmation link to your email address. After confirmation you enter your postal address, because it appears on your invoices; the phone number is optional. Only you can change your details. Only after confirmation do we create a trial key. For this purpose, we transmit your name, company, email address and the selected program to our licence server keygen.gdyn.de, and in the case of licences also the order number. The legal basis is Art. 6(1)(b) GDPR. On the licence server we delete expired trial keys six months after they expire, trial keys that were never activated 30 days after they were created, and expired annual licences three years after they expire; lifetime and current keys remain. If you do not confirm your email address within 14 days, we delete the account again. If you turn on the optional two-factor sign-in, we store the secret key of your authenticator app and fingerprints of your recovery codes for it, or we send you a code by email at every sign-in, which we store only as a fingerprint and for no more than 10 minutes.

As long as you have not bought a key, you can delete your account yourself under “My details”; we delete your trial keys along with it. So that a free trial cannot be used several times by registering again, after an account is deleted we remember for which programs a free trial was already issued under that email address. Instead of the address we store only a fingerprint that cannot be reversed, and we delete it after two years and one month (Art. 6(1)(f) GDPR, protection against misuse).

Orders

For orders, we additionally process your billing address and, where applicable, your VAT ID number, as well as the order and payment data (Art. 6(1)(b) GDPR). We retain invoices and accounting vouchers in accordance with the statutory retention periods (§ 147 AO, § 257 HGB; Art. 6(1)(c) GDPR). We record the handling of orders, payments and licence keys in an internal log, with the time, order and invoice number and your email address. This allows errors and misuse to be traced (Art. 6(1)(f) GDPR). We delete the entries after two years and one month.

Enquiries

If you write to us using the contact or project form or by email, we process your details in order to answer the enquiry (Art. 6(1)(b) or (f) GDPR). We delete enquiries from these forms six months after they have been dealt with, unless there is a retention obligation. We keep withdrawals and terminations as proof for six years from the end of the year in which they were received and delete them afterwards (§ 257 HGB; Art. 6(1)(c) GDPR). We delete emails to us six months after the matter has been dealt with. This does not apply to business letters relating to a contract and to invoices, which we keep for six and eight years respectively (§ 257 HGB, § 147 AO; Art. 6(1)(c) GDPR).

Sending emails

We send and receive our emails via STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin. We do not send advertising emails.

Programs and apps

Our programs and apps have their own policies; you can find them under Privacy policies of the programs and apps. On activation, the program checks the licence key with our licence server.

Storage period

We delete personal data as soon as it is no longer needed for the purposes stated and no statutory retention obligation applies. We back up our servers daily; the backups also contain the data mentioned here and are overwritten after seven days. Deleted data therefore disappears from them seven days later at the latest. Without a purchased key you delete your account yourself under “My details”; otherwise write to us at info@geier-it.eu.

Your rights

You have the right of access, rectification, erasure, restriction of processing, data portability and objection to processing based on Art. 6(1)(f) GDPR. You can also lodge a complaint with a data protection authority, for example with the Landesbeauftragte für den Datenschutz und die Informationsfreiheit Rheinland-Pfalz (State Commissioner for Data Protection and Freedom of Information of Rhineland-Palatinate).