Imprint (§ 5 DDG, § 18 (2) MStV)
CARECOM®Dipl.-Inform. Harald Mühlhoff
Hochstraße 13
58300 Wetter (Ruhr)
Germany
Phone +49 2335 3358
E-mail info@carecom.de
VAT-ID DE 126913530
Editorially responsible (§ 18 (2) MStV): Harald Mühlhoff (address as above)
Privacy notice
This short notice summarises the data-processing facts for English readers. The legally binding text is the German Datenschutzerklärung below — please refer to it for full detail.
- Hosting: the site and its databases run on Microsoft Azure (Microsoft Ireland Operations Limited, Dublin, Ireland) in the “Germany West Central” data centre in Frankfurt am Main. A data-processing agreement under Art. 28 GDPR is in place.
- Connection data and operating logs: to deliver the pages, the Azure platform processes the technically necessary connection data (IP address, timestamp, URL, user agent, referrer). We keep no access logs of our own. For error and performance analysis we record technical operating data with Azure Application Insights; the IP address is only used for a rough location and is not stored, except for security events such as sign-in attempts. Operating data is deleted automatically after 90 days.
- Cookies: without your consent only strictly-necessary cookies —
carecom-consent-v2(12 months, stores your cookie-banner choice),cc-sess(30 days, an opaque token used only to deduplicate our own page-view count),.AspNetCore.Antiforgery.…(until you close the browser; a random check value of the ASP.NET Core framework that protects forms such as the contact form against forged requests from other sites) andARRAffinity/ARRAffinitySameSite(until you close the browser; set by our hosting platform so your requests reach the same server, containing only an identifier of that server). No other cookies are set unless you explicitly opt in. - Own reach measurement (no Google, no personal data): for each page view we store one server-side row with the page path, language, timestamp and a dedup hash derived from the
cc-sesstoken — no IP address, no user agent, no referrer, and no way to reconstruct your identity. Legal basis Art. 6 (1) (f) GDPR; it runs without consent because it processes no personal data, independently of Google Analytics. - Contact form: the data you enter (name, e-mail or phone, message) is processed under Art. 6 (1) (b) / (f) GDPR to handle your enquiry. Where the enquiry has tax-relevant consequences, the resulting business correspondence is retained for 10 years (§ 147 AO).
- Internal area: the protected
/internalarea requires sign-in via an OpenID-Connect provider (currently Microsoft or Google). Identity data from the chosen provider, functionally-required session cookies and the content of the event scheduler — events, date suggestions, votes and a notification send-history visible to CARECOM staff — are processed under Art. 6 (1) (b) / (f) GDPR. Signing in transmits data to the chosen provider; Microsoft Corporation and Google LLC are both certified under the EU-US Data Privacy Framework. - Google Maps is embedded on the contact page only. When you visit that page, your IP address is transmitted to Google Ireland Limited; Google LLC is certified under the EU-US Data Privacy Framework.
- Google Analytics is loaded only after you click Accept in the cookie banner (Art. 6 (1) (a) GDPR — consent). It collects anonymised page-view and visitor statistics; IP addresses are processed in shortened form. You can withdraw consent at any time by clearing the
carecom-consent-v2cookie in your browser. - No advertising, no social-media plug-ins, no external fonts. The footer links to Facebook/X are plain hyperlinks; no third-party scripts beyond Maps (after page visit) and Analytics (after consent) run on this site.
You have all rights under Art. 15–22 GDPR (access, rectification, erasure, restriction, objection, data portability) and the right to lodge a complaint with the supervisory authority — for North Rhine-Westphalia: Landesbeauftragte für Datenschutz und Informationsfreiheit NRW, Kavalleriestraße 2-4, 40213 Düsseldorf, www.ldi.nrw.de.