Privacy information for this website

1. Controller

Controller under the GDPR:
Veritium GmbH
Nussbaumweg 10
70437 Stuttgart
Germany

Privacy contact:[email protected].

Data protection officer or privacy contact, if required: [email protected].

2. Hosting and server log files

This website is operated using a web hosting product from STRATO AG, Otto-Ostrowski-Strasse 7, 10249 Berlin, Germany. When the website is accessed, STRATO processes technically necessary access data to deliver the website, maintain operations, and detect or defend against attacks.

This access data may include in particular:

• IP address of the requesting connection
• date and time of access
• requested file or URL
• HTTP status code and transferred data volume
• referrer, if transmitted by the browser
• browser and operating system information, if transmitted by the browser

According to STRATO, visitor IP addresses are stored for attack detection and defense for a maximum of seven days. The statistics and log files made available in the STRATO customer login anonymize visitor hostnames or IP addresses for data protection reasons.

STRATO describes this processing in its FAQ on data processing agreements and GDPR and in its notes on web hosting statistics and log files.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is the secure, stable, and error-free operation of the website.

3. Cookie settings and local storage

The website uses its own consent panel. Visitors can allow or reject optional analytics processing. The choice can be changed at any time through the Cookie settings link in the footer.

The legal basis for this necessary storage and processing is Art. 6(1)(f) GDPR. Our legitimate interest is to remember your privacy decision (to avoid showing the consent panel on every page view) and to ensure the stability and security of the website by defending against automated abuse and cyber attacks (via Cloudflare).

4. Optional analytics with Google Analytics

Google Analytics is loaded only if visitors consent to the Analytics category in the consent panel. Without this consent, the Google Analytics script is not loaded.

The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google may use other Google companies and service providers. Transfers to third countries may occur. According to Google, such transfers are based on appropriate safeguards, in particular standard contractual clauses.

We use analytics to understand website usage, in particular:

• page views
• clicks on call-to-action elements
• trial or installation link starts
• FAQ interactions
• scroll depth

The legal basis is consent under Art. 6(1)(a) GDPR. Consent can be withdrawn at any time with effect for the future through Cookie settings in the footer.

5. Locally served resources

Fonts, animation libraries, and the 3D library used by the website are served locally by barrierefrei.space. Loading these resources does not send requests to Google Fonts, cdnjs, or unpkg.

6. Feedback by email

The feedback page creates a local mailto: draft in the visitor's email client. The data entered there is not submitted to us through the website beforehand.

Only when the visitor sends the email do we process the transmitted information to handle the request. This may include name, organization, email address, role or department, TYPO3 version, feedback type, and message. The involved email providers also process the message under their own technical and legal conditions.

Depending on the content of the request, the legal basis is Art. 6(1)(b) GDPR for pre-contractual or contractual communication and Art. 6(1)(f) GDPR for handling general feedback, security, and procurement questions.

7. External links

The website contains links to external services, in particular GitHub. When visitors click external links, they leave this website. The respective external provider is responsible for the subsequent data processing.

8. Separation from the plugin and API

This website itself does not generate alt text, does not receive customer images, and does not process TYPO3 plugin requests. If the TYPO3 plugin is installed or subscriptions, quotas, payment, or API functions are used, separate product-related processing takes place. Depending on use, this may include license, quota, payment, support, and API data. Details are documented in the product context, contractual documents, or a DPA.

9. Retention

According to STRATO, server log data is stored for attack detection and defense for a maximum of seven days. The local consent choice remains stored until deleted in the browser or changed through the cookie settings. Email inquiries are retained as long as needed to handle the request, maintain accountability, ensure security, and comply with legal duties.

10. Data subject rights

Data subjects may request access, rectification, deletion, restriction of processing, data portability, and objection where legally available. Consent can be withdrawn at any time with effect for the future. Data subjects also have the right to lodge a complaint with a competent data protection supervisory authority.