Privacy information

Last updated: 11 October 2026

Important: This English text is an information translation. The German privacy information is authoritative for legal interpretation.

1. Controller

CodePartner GmbH
Twisterlingsbogen 5
26160 Bad Zwischenahn
Germany
Email: kontakt@aeo-agentur.de
Phone: +49 441 1813 1820

2. Hosting and server log files

The website is hosted by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. The web server processes technically necessary log data when pages are accessed, including date and time, requested resource, status code, data volume, referrer and user agent. Hetzner documents that IP addresses in Apache web-hosting logs are anonymised by default.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is the secure and reliable operation of the website and the detection of errors or misuse. Hetzner acts as a processor under an Art. 28 GDPR processing agreement.

Hetzner states that Apache access and error logs in web hosting are retained for 7 days by default and that this setting can be changed. AEO-Agentur.de is intended to retain the 7-day default. If the hosting setting is changed, this notice must be updated accordingly.

3. Encrypted transmission

The website is provided via HTTPS so that data transmitted between your browser and the web server is transport-encrypted in accordance with current technical standards.

4. Contact by email or phone

If you contact us by email or telephone, we process the information you provide to handle your enquiry and subsequent communication. The legal basis is Art. 6(1)(b) GDPR for pre-contractual or contractual enquiries and Art. 6(1)(f) GDPR for other business enquiries, based on our legitimate interest in responding appropriately.

5. Contact form and Postmark

We use Postmark, a service of AC PM LLC, 1 N Dearborn Street, Suite 500, Chicago, IL 60602, USA, to deliver contact-form enquiries. The form data is transmitted server-side to Postmark so that the enquiry can be delivered to us by email. This includes name and email address and, where supplied, company, phone number, website, selected topic and message. Your email address is used as the Reply-To address.

Name, email address and message are required so that we can identify and answer the enquiry. The privacy checkbox records acknowledgement of this privacy information; it is not consent under data-protection law.

The legal basis is Art. 6(1)(b) GDPR for pre-contractual enquiries and Art. 6(1)(f) GDPR for other business enquiries. Postmark acts as a processor. Its published Data Processing Addendum includes data-processing terms and, for transfers to the United States, EU Standard Contractual Clauses under Art. 46 GDPR. Further information is available at postmarkapp.com/dpa.

Postmark states that message content and activity/event data are retained for 45 days by default. Its retention option permits periods between 7 and 365 days. The shortest operationally reasonable period should be used for the contact form. Open and link tracking are explicitly disabled in our integration.

The form also uses a honeypot, request-size limits and server-side validation to reduce automated submissions. No external CAPTCHA service is embedded.

6. Cookies, analytics and marketing

The current website does not include analytics, marketing, tag-manager, map, chat or social-embed services and does not set non-essential cookies or comparable tracking technologies. No consent banner is therefore required for the current technical setup. If additional services are introduced, the legal basis, consent mechanism and privacy information must be reviewed before activation.

7. Local graphics and fonts

Logos, favicons, social previews and page graphics are served from the website itself. No externally hosted web fonts are loaded.

8. Recipients and processors

Within the controller’s organisation, access is limited to people who need the data to handle the enquiry. Hetzner may process data as hosting processor and Postmark as processor for form-email delivery. Other disclosures take place only where required for contract performance, by law or on another valid legal basis.

9. Retention

Personal data is retained only for as long as required for the relevant purpose or statutory retention obligations. Enquiries are deleted once processing and reasonable follow-up communication are complete unless contractual, commercial or tax-law retention obligations apply. Postmark technical history follows the retention configured in the Postmark account. AEO-Agentur.de is intended to use the 7-day default retention for Hetzner web-server logs.

10. Your rights

Subject to statutory requirements, you have rights including access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20) and objection to processing based on Art. 6(1)(f) GDPR under Art. 21 GDPR.

Where processing is exceptionally based on consent, consent may be withdrawn at any time with effect for the future without affecting the lawfulness of earlier processing.

11. No automated decision-making

No solely automated decision-making, including profiling within the meaning of Art. 22 GDPR, takes place in connection with this website.

12. Right to lodge a complaint

Under Art. 77 GDPR, you have the right to lodge a complaint with a supervisory authority. For the controller’s registered office, the competent authority is in particular:
The State Commissioner for Data Protection Lower Saxony
Prinzenstraße 5
30159 Hannover
Germany
Phone: +49 511 120-4500
Email: poststelle@lfd.niedersachsen.de

13. Changes to this privacy information

We update this privacy information if the technical setup, services used or legal requirements change. The version published on this website is the current version.