Privacy Policy
Last updated: February 2026
Controller
Christopher Helm, Rosenweg 5, 35614 Asslar, Germany. Contact: hidden [at] idp-software.com
Hosting
This site is hosted on GitHub Pages (GitHub, Inc., a subsidiary of Microsoft Corporation, 88 Colin P Kelly Jr St, San Francisco, CA 94107, USA). When you visit a page, GitHub processes your IP address, browser type, operating system, referrer URL, and timestamp to deliver the content. This is necessary to operate the website (Art. 6(1)(f) GDPR). GitHub is certified under the EU-US Data Privacy Framework. See GitHub's privacy statement for details.
Forms
Contact and contribution forms on this site are processed by Formspark (Formspark SRL, Belgium). When you submit a form, Formspark receives the data you enter (such as name, email, and message) plus your IP address and browser metadata. Data is stored in the EU (Ireland). Legal basis: Art. 6(1)(b) GDPR (you initiate the contact). We retain form submissions for as long as they are relevant to the purpose of the submission.
Formspark uses the following subprocessors: Amazon Web Services (cloud infrastructure), Automattic/Akismet (spam detection), ipstack (IP geolocation), and Sentry (error reporting). See Formspark's privacy policy and subprocessors.
Bot Protection
Forms on this site use BotPoison to distinguish human visitors from automated bots. BotPoison runs a challenge in your browser and sends a verification token with the form submission. No personal data is stored by BotPoison beyond the session. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in preventing spam).
YouTube Videos
Some pages contain embedded YouTube videos. We use a privacy-enhanced two-click method: thumbnails are hosted locally on our server and no connection to Google is made when you load the page. Only when you click to play a video does your browser connect to youtube-nocookie.com (Google Ireland Limited). At that point, Google receives your IP address and browser data. Legal basis: Art. 6(1)(a) GDPR (your deliberate click constitutes consent). Google LLC is certified under the EU-US Data Privacy Framework. See Google's privacy policy.
Vendor Finder
The Vendor Finder questionnaire saves your draft answers in your browser's localStorage so you do not lose progress between visits. This data stays on your device and is never sent to our server. When you submit the questionnaire, the data is sent to Formspark as described above.
Cookies
This site does not set tracking cookies, advertising cookies, or analytics cookies. No cookie banner is needed because no consent-requiring cookies are used. YouTube may set cookies after you choose to play a video (see above).
Your Rights
Under the GDPR you have the right to:
- Access your stored personal data (Art. 15)
- Rectify inaccurate data (Art. 16)
- Erase your data (Art. 17)
- Restrict processing (Art. 18)
- Data portability (Art. 20)
- Object to processing based on legitimate interest (Art. 21)
To exercise any of these rights, email hidden [at] idp-software.com.
You also have the right to lodge a complaint with a supervisory authority. The responsible authority is the Hessischer Beauftragter für Datenschutz und Informationsfreiheit (HBDI), Gustav-Stresemann-Ring 1, 65189 Wiesbaden.