Privacy policy
We take the protection of your personal data seriously. This notice informs you pursuant to Art. 13 and 14 GDPR about the processing of your data on meck-it.com. The German version is the binding reference.
1. Controller
Meck'IT — Guillaume Chevaleyre
Ferdinand-Schultz-Straße 4
Schwerin, Germany
Email: guillaume.chevaleyre@meck-it.com
Phone: +49 178 8316810
No data protection officer has been appointed, as there is no legal obligation to do so (Art. 37 GDPR, § 38 BDSG).
2. Data minimisation by design
This website is designed to minimise data. No tracking cookies, no analytics services and no advertising networks are used. There is no profiling and no automated decision-making.
3. Server log files
When you visit the website, the hosting provider processes technically necessary access data: IP address, date and time, file requested, referrer, browser type and operating system.
- Purpose: provision, stability and security of the website
- Legal basis: Art. 6(1)(f) GDPR (legitimate interest)
- Retention: at most 6 months at Gandi, then automatically deleted
4. Contacting us and email communication
If you contact us by email or telephone, we process your details (name, contact data, content of the enquiry) in order to handle your request. The same applies to email communication in the context of existing or prospective business relationships (e.g. quotes, coordination, invoices).
- Legal basis: Art. 6(1)(b) GDPR (contract / pre-contractual) or Art. 6(1)(f) GDPR
- Retention for enquiries not leading to a contract: deleted no later than 12 months after the correspondence ends
- Retention for business relationships: commercial and business letters 6 years, accounting-relevant documents 8 years (§ 257 HGB, § 147 AO), in each case from the end of the calendar year; deleted thereafter
5. Hosting
The website is hosted by Gandi SAS (63-65 boulevard Massena, 75013 Paris, France) within the European Union; the data is stored and processed exclusively on servers in France or Luxembourg. For this purpose Gandi may use its group companies Gandi SAS (France) and Gandi International SARL (Luxembourg). A data processing agreement pursuant to Art. 28 GDPR is in place with Gandi. When the service ends, the data is deleted in accordance with the contractual terms, unless statutory retention obligations apply.
6. Cookies
This website does not set any cookies and does not store any information on your device (§ 25 TDDDG). No consent is therefore required.
7. External content and fonts
Web fonts are served exclusively locally; there are no connections to third parties.
8. Recipients and third-country transfers
Your data is disclosed only to processors (hosting, email, AI-assisted services) and where legally required. Transfers to third countries take place only on the basis of an adequacy decision or appropriate safeguards (e.g. standard contractual clauses) pursuant to Art. 44 et seq. GDPR.
9. AI-assisted services
Where needed, we use AI-assisted services to support our work, for example for translation, text editing or research. We enter personal data there only where necessary and, where possible, choose settings under which inputs are not used to train models. The website itself uses no AI services that process visitors' data.
- Legal basis: Art. 6(1)(f) GDPR (legitimate interest in efficient work organisation) or Art. 6(1)(b) GDPR
10. Your rights
You have the right at any time to:
- Access the data processed (Art. 15 GDPR)
- Rectification of inaccurate data (Art. 16 GDPR)
- Erasure (Art. 17 GDPR) and restriction of processing (Art. 18 GDPR)
- Data portability (Art. 20 GDPR)
- Object to processing based on legitimate interests (Art. 21 GDPR)
- Withdraw consent with future effect (Art. 7(3) GDPR)
11. Right to lodge a complaint
You may lodge a complaint with a data protection supervisory authority. The competent authority is the State Commissioner for Data Protection and Freedom of Information of Mecklenburg-Vorpommern, Schwerin.
12. Data security
The website is served over an encrypted TLS connection (HTTPS). We implement appropriate technical and organisational measures pursuant to Art. 32 GDPR.
13. Currency of this notice
This notice is updated when the website or the legal framework changes. The version published here applies.
