Let’s talk.

Contact form privacy information

Updated: 7 September 2026

1. Controller

Christian Techmer
Mühlbachstr. 29
88697 Bermatingen
Germany
Email: kontakt@sugreenx.eu

2. Data I process

I process your selected topic and message and, only if you provide them voluntarily, your name and email address. A message is required to submit an enquiry. Your name and email address are not required. Without a return contact address, I can read your enquiry but cannot reply.

3. Purpose and legal basis

Your entries are used solely to receive the enquiry, deliver it to the contact mailbox and handle your request. For pre-contractual or contractual enquiries, the legal basis is Art. 6(1)(b) GDPR. For other enquiries, it is Art. 6(1)(f) GDPR; my legitimate interest is receiving enquiries securely and responding appropriately.

4. Hosting, transmission and recipients

The form, web server and contact mailbox use my existing web hosting at ALL-INKL.COM – Neue Medien Münnich, proprietor René Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany. The provider processes technically necessary data as a processor. Transmission from your browser to the form is encrypted using HTTPS. The server forwards the message to the fixed mailbox kontakt@sugreenx.eu. Subsequent email processing is not end-to-end encrypted.

Other recipients receive your entries only as specifically necessary to handle your request or as required by law. The form uses no analytics, advertising, social media or external CAPTCHA services. No transfer to a third country is intended for this form route.

5. Technical safeguards and session cookie

The strictly necessary sugreenx_contact_session cookie contains a random session identifier, is restricted to /kontakt/ and protected by Secure, HttpOnly and SameSite=Strict. It has no persistent expiry date; browsers that restore sessions may retain it across a restart. Its sole purpose is protection against forged requests and repeated submissions (Section 25(2)(2) TDDDG). The server stores only security tokens, form-issue and submission times and success status, not message content. Form tokens are valid for no more than one hour. PHP session cleanup removes inactive session files on a subsequent form request after at least one hour of inactivity; without further requests, files may remain longer.

A separate rate-limit file holds only submission timestamps, not IP addresses or contact details. Timestamps outside the one-hour window are removed at the next eligible submission check; they may remain longer if no further check occurs. A hidden empty field, minimum completion time and size checks also protect against abuse. The legal basis is Art. 6(1)(f) GDPR; my legitimate interest is a secure, available contact channel.

6. Server logs

When you visit, the host processes technically necessary connection data (IP address, time, requested resource, status, and browser/system information) for delivery and security under Art. 6(1)(f) GDPR. Access logs and visitor statistics in the hosting account are disabled (verified 7 September 2026); enabled account logs have a configured deletion period of seven days. This is distinct from the host's technically necessary security processing. Data is processed for that purpose only as long as needed for operation, troubleshooting or defence against a specific security incident. The form software logs only technical error categories, not submitted entries.

7. Retention

The form has no content database and stores no copy of the message on the website. Once successfully handed over, the message is held in the contact mailbox. It is deleted once your enquiry has been fully resolved and there are no statutory retention obligations or legitimate grounds for further storage. Correspondence relevant to commercial or tax law and data needed to establish, exercise or defend legal claims may be retained longer in accordance with statutory periods.

8. Your rights and complaints

Subject to the applicable legal conditions, you have rights of access, rectification, erasure, restriction of processing, data portability and objection to processing based on Art. 6(1)(f) GDPR. To exercise these rights, contact kontakt@sugreenx.eu.

You also have the right to complain to a data protection supervisory authority. A relevant authority is the State Commissioner for Data Protection and Freedom of Information Baden-Württemberg, Heilbronner Straße 35, 70191 Stuttgart, Germany; email: poststelle@lfdi.bwl.de.

9. Automated decisions

There is no automated decision-making or profiling.

Legal notice

Name

Christian Techmer

Address

Mühlbachstr. 29
88697 Bermatingen
Germany

Email

kontakt@sugreenx.eu

VAT ID

DE460849192