Skip to content
Normagon
ProcessesAuditsManagement reviewAI & automationAnti-money laundering
DEEN
Get to know Normagon

Privacy policy

Last updated: 27 October 2026

1. Controller

The controller responsible for data processing on this Normagon website is:

Consiliari Software GmbH
Brauerstraße 12
76135 Karlsruhe
Germany

Represented by the managing director: Raphael J. N. Hettich, M. Sc.
Phone: +49 721 61932916
Email: kontakt@consiliari-software.de

2. Data protection officer

Benjamin Berger
c/o Consiliari Software GmbH
Brauerstraße 12, 76135 Karlsruhe
Email: dsb@consiliari-software.de

3. General principles

We process personal data only within the framework of statutory provisions, in particular the General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG) and the Telecommunications Digital Services Data Protection Act (TDDDG). This statement covers visits to this website. Data processing in the Normagon application is not covered by this statement and is governed separately.

4. Your rights

Under the GDPR, you have the following rights:

  • Access (Art. 15) to the data stored about you
  • Rectification (Art. 16) of inaccurate data
  • Erasure (Art. 17)
  • Restriction of processing (Art. 18)
  • Data portability (Art. 20)
  • Withdrawal of consent given (Art. 7(3)) with effect for the future
  • Objection (Art. 21) to processing based on legitimate interests
  • Complaint to a supervisory authority (Art. 77)

The competent supervisory authority is the State Commissioner for Data Protection and Freedom of Information Baden-Württemberg (Landesbeauftragter für den Datenschutz und die Informationsfreiheit Baden-Württemberg), Heilbronner Straße 35, 70191 Stuttgart. To exercise your rights, an informal message to dsb@consiliari-software.de is sufficient.

5. Processing when you visit this website

5.1 Server log files

When you access the website, information transmitted by your browser is processed automatically: IP address, date and time of access, amount of data transferred, referrer URL, and browser and operating system.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in the stability and security of the website).
Retention period: a maximum of 14 days, after which the data is deleted or anonymized.

5.2 Hosting

The website is operated on servers of Hetzner Online GmbH, Industriestraße 25, 91710 Gunzenhausen, in data centers in Germany. A data processing agreement pursuant to Art. 28 GDPR is in place with Hetzner.

Legal basis: Art. 6(1)(f) GDPR.

5.3 TLS encryption

Transmission between your browser and our server is TLS-encrypted (recognizable by “https://” in the address bar).

5.4 Cookies, fonts and audience measurement

This website loads no analytics or tracking services and sets no analytics or marketing cookies. Fonts are served locally and are not requested from external font providers.

5.5 Contact

When you submit the contact form, we send your details (name, email address and, if provided, organisation, topic and message) to our form service to process your enquiry. The details are stored in our database on our servers in Germany and forwarded to the responsible team by email. Technical safeguards limit abusive requests. Alternatively, you can contact us directly by email.

Legal basis: Art. 6(1)(b) GDPR where your request concerns entering into or performing a contract with you. If you act on behalf of a company or make another type of enquiry, processing is based on Art. 6(1)(f) GDPR. Our legitimate interest is to handle your enquiry, arrange appointments and send information you have requested.
Retention period: We retain your information to arrange and conduct the requested appointment, send the information materials you requested and handle related questions. Once your request, including any agreed follow-up, has been completed, we delete the personal data that is no longer required for these purposes. If a contract is concluded, we continue to process the information required to perform that contract. Where individual documents are subject to statutory retention obligations, we retain them for the prescribed period.

6. No automated individual decision-making

No automated decision-making, including profiling within the meaning of Art. 22 GDPR, takes place on this website.

7. Changes to this privacy policy

We update this privacy policy when the website or the legal requirements change. The version published here at any given time applies.

Normagon

Clarity for what matters.

ProcessesAuditsManagement reviewAI & automationAnti-money laundering

Quality management. Compliance. Knowledge.

ContactLegal noticePrivacyA product of Consiliari Software GmbH© 2026 Normagon