Privacy policy

Who is responsible

ELECOS UG (haftungsbeschränkt), Hauptstr. 42, 16341 Panketal, Germany, represented by its managing director Cosimo Kroll, is the controller for this website. Email: info@elecos.de. Full company details are in our legal notice.

We have not appointed a data protection officer, because we are not required to.

Hosting and server logs

This website is built and hosted with Webstudio (Webstudio Inc., USA) and delivered through Cloudflare (Cloudflare, Inc., USA, with servers in Europe). When you open a page, your browser necessarily sends your IP address, the requested address, the time, the referring page and your browser and operating system to those servers. This data is processed to deliver the site securely and to defend against attacks.

Legal basis: Art. 6(1)(f) GDPR, our legitimate interest in operating a secure and reliable website. Both providers process data for us as processors under Art. 28 GDPR, and transfers to the USA are covered by the EU standard contractual clauses and their EU-U.S. Data Privacy Framework certifications.

The consent cookie

We set exactly one cookie of our own:

This cookie is technically necessary to honour your choice. Legal basis: § 25(2) no. 2 TDDDG and Art. 6(1)(c)/(f) GDPR. It contains no identifier that we use to recognise you anywhere else.

Consent log (proof of consent)

We must be able to demonstrate that you consented (Art. 7(1) GDPR). When you accept, decline, save a selection or withdraw your consent, we store one entry on our own server at consentlog.nativecmp.com, a Cloudflare Worker with a database in the EU that we operate ourselves:

• your consent ID, a random value that is also in your cmp_consent cookie and shown in the privacy settings,
• the time of the decision,
• the type of decision (accept, decline, save, withdraw),
• which services you allowed or refused,
• a fingerprint of the service list and texts you were shown,
• the page language and the website the decision was made on.

We do not store your IP address, the page URL or your user agent. Entries are deleted automatically after three years, the period in which claims could still be raised. Legal basis: Art. 6(1)(c) GDPR in conjunction with Art. 7(1) GDPR, our legal obligation to demonstrate consent.

If you want to know what is stored for you, send us your consent ID from the privacy settings and we will tell you, or delete it.

Website analytics

We use Rybbit, an open-source analytics tool that we host ourselves on a server at Hetzner Online GmbH in Germany. No data goes to a third-party analytics provider.

Rybbit works without cookies and does not store IP addresses. Your IP address is used only briefly to derive an approximate location (country and region) and is then discarded. We see page views, referring pages, rough location, device type, browser and operating system, and anonymous session identifiers that cannot be traced back to you.

Because no information is stored on or read from your device and no personal profile is created, this runs without consent. Legal basis: Art. 6(1)(f) GDPR, our legitimate interest in understanding which pages are useful. You can object at any time by writing to info@elecos.de.

Contact form and email

When you use our contact form, we process the name, email address and message you enter, together with the page the form was sent from. The message reaches us by email. Your browser does not contact any third party while sending.

Legal basis: Art. 6(1)(b) GDPR when your request concerns a contract or its preparation, otherwise Art. 6(1)(f) GDPR, our legitimate interest in answering enquiries. We keep enquiries as long as we need them to answer you and for as long as statutory retention periods require, then delete them.

The same applies when you write to us directly at info@elecos.de.

Embedded content

This website demonstrates a consent manager, so it deliberately contains embedded content that is blocked until you allow it:

• Google Maps (Google Ireland Limited, Ireland) in the live demonstration on our homepage.
• YouTube and Vimeo videos in the documentation examples, using their privacy-enhanced modes.

Nothing is loaded from those providers until you allow the service, either in the privacy settings or on the content itself. Once you do, your IP address and browser information reach the provider, which may set its own cookies and may transfer data to the USA. Legal basis: Art. 6(1)(a) GDPR and § 25(1) TDDDG, your consent, which you can withdraw at any time in the privacy settings.

The services listed in our privacy settings include demonstration entries such as Google Analytics and Meta Pixel. They exist to show how the consent manager works. Selecting them loads no tracking code: this site runs none. Two demonstration scripts write a line to your browser console when analytics is allowed, so we can verify that consent is honoured across pages.

Voluntary support via PayPal

Our support links lead to PayPal (PayPal (Europe) S.à r.l. et Cie, S.C.A., Luxembourg). No PayPal script or button code runs on this website; the link simply opens PayPal in a new tab. Once there, PayPal's own privacy statement applies, and we receive only the information PayPal shows us about a payment.

Your rights

Under the GDPR you have the right to:

• access the data we hold about you (Art. 15),
• have inaccurate data corrected (Art. 16),
• have data deleted (Art. 17),
• have processing restricted (Art. 18),
• receive your data in a portable format (Art. 20),
• object to processing based on legitimate interests (Art. 21), and
• withdraw consent at any time, without affecting what happened before (Art. 7(3)). Use the privacy settings link in the footer.

Write to info@elecos.de to exercise any of these. You also have the right to complain to a supervisory authority, for example the data protection authority of the State of Brandenburg, where we are based.

Changes to this policy

We update this policy when the website changes. This version is from 20 September 2026.