Get In Touch

Privacy Policy

Home
Privacy Policy

Privacy Policy

Last updated: 31 July 2026

At Devoreo UG (haftungsbeschränkt) (“we“, “us“, “our“), the protection of your personal data is important to us. This Privacy Policy (“Datenschutzerklärung“) informs you, in accordance with Articles 13 and 14 of the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (Bundesdatenschutzgesetz, BDSG), about the nature, scope, and purpose of the processing of personal data when you visit our website https://devoreo.de/ (“Website“) and use our services.

This policy applies to our online activities and is valid for visitors to our Website. It does not apply to any information collected offline or through channels other than this Website.

1. Controller

The controller responsible for data processing on this Website within the meaning of the GDPR is:

Devoreo UG (haftungsbeschränkt)
Kölner Straße 12, 60327, Frankfurt am Main, Hesse, Germany
Commercial Register: Amtsgericht Frankfurt am Main
Registration Number: HRB 142035
Managing Director: Muhammad Abdullah Nagori
Email: info@devoreo.de
Website: https://devoreo.de/

2. Data Protection Officer

We are not required to appoint a Data Protection Officer under § 38 BDSG, as fewer than 20 persons are regularly engaged in the automated processing of personal data. Should this change, we will update this section accordingly. For any data protection inquiries, please contact us using the details in Section 1.

3. Your Rights Under the GDPR

You have the following rights regarding your personal data. To exercise any of these rights, please contact us using the details in Section 1. We will respond within one month, as required by Art. 12(3) GDPR.

  • Right of access (Art. 15 GDPR): You may request confirmation of whether we process your personal data, and copies of that data.
  • Right to rectification (Art. 16 GDPR): You may request correction of inaccurate or incomplete personal data.
  • Right to erasure (Art. 17 GDPR): You may request deletion of your personal data, subject to statutory retention obligations.
  • Right to restriction of processing (Art. 18 GDPR): You may request that we limit the processing of your data under certain conditions.
  • Right to data portability (Art. 20 GDPR): You may request that we provide your data in a structured, machine-readable format, or transmit it directly to another controller where technically feasible.
  • Right to object (Art. 21 GDPR): You may object at any time, on grounds relating to your particular situation, to processing based on our legitimate interests, including profiling. You may also object at any time, free of charge, to processing of your data for direct marketing purposes.
  • Right to withdraw consent (Art. 7(3) GDPR): Where processing is based on consent, you may withdraw it at any time with effect for the future.
  • Right to lodge a complaint (Art. 77 GDPR): You have the right to lodge a complaint with a supervisory authority. The supervisory authority responsible for us is: [Name of the competent State Data Protection Authority — e.g., “Der Landesbeauftragte für den Datenschutz” of the German federal state in which the company is registered]

4. Information We Collect and Legal Basis for Processing

We only process personal data where a legal basis under Art. 6(1) GDPR exists — in particular:

  • (a) Consent — e.g., for cookies/tracking tools requiring consent, or newsletter sign-up.
  • (b) Performance of a contract — e.g., to respond to inquiries or provide requested services.
  • (c) Legal obligation — e.g., retention of business records under German commercial and tax law (§§ 147 AO, 257 HGB).
  • (f) Legitimate interests — e.g., ensuring the security and stability of our Website (Art. 6(1)(f) GDPR), provided such interests are not overridden by your fundamental rights.

4.1 Server Log Files

When you visit our Website, our hosting provider automatically collects and stores information that your browser transmits, including:

  • IP address (in most cases anonymized/truncated after collection)
  • Browser type and version
  • Operating system used
  • Referrer URL (previously visited page)
  • Date and time of the server request
  • HTTP status code

This data is processed on the basis of our legitimate interest (Art. 6(1)(f) GDPR) in ensuring the functionality, security, and stability of our Website, and is not merged with other data sources. Log data is typically stored for a limited period (e.g., 7–30 days) and then automatically deleted, unless retention is required for evidentiary purposes in connection with a security incident.

4.2 Contact With Us

If you contact us directly (e.g., by email or a contact form), we process the information you provide — such as your name, email address, phone number, and the content of your message — solely to process your inquiry (Art. 6(1)(b) or (f) GDPR). This data is deleted once it is no longer required for the purpose collected, unless statutory retention obligations apply.

5. Cookies

Our Website uses cookies — small text files stored on your device — to make our offering more user-friendly, effective, and secure.

  • Strictly necessary cookies (e.g., for basic Website functionality) are processed on the basis of Art. 6(1)(f) GDPR and § 25(2) TDDDG (Telecommunications Digital Services Data Protection Act), as they are technically essential and do not require consent.
  • Non-essential cookies (e.g., analytics or marketing cookies) are only set with your prior consent under § 25(1) TDDDG and Art. 6(1)(a) GDPR, obtained via a cookie consent banner when you first visit the Website. You can withdraw your consent at any time with effect for the future via the cookie settings tool on our Website or by adjusting your browser settings.

Most browsers allow you to refuse or delete cookies. Please note that disabling cookies may affect the functionality of this and other websites you visit.

6. Google Analytics

We use Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google“), to analyze how visitors use our Website.

  • Purpose: Google Analytics uses cookies and similar technologies to evaluate Website usage, compile reports on Website activity, and provide further services related to Website and internet usage. This helps us improve our Website and tailor content to visitor interests.
  • Legal basis: This processing takes place only with your prior consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG), obtained through our cookie consent banner. You may withdraw your consent at any time.
  • IP anonymization: We have activated IP anonymization (“IP masking”), meaning your IP address is shortened by Google within EU/EEA member states before being transmitted further, except in exceptional cases.
  • Data transfer to third countries: Google may transfer data to servers in the United States. Google is certified under the EU-U.S. Data Privacy Framework, and/or we rely on Standard Contractual Clauses (Art. 46 GDPR) as an additional safeguard for such transfers, where applicable.
  • Data processing agreement: We have entered into a data processing agreement with Google in accordance with Art. 28 GDPR.
  • Opt-out: You can prevent Google Analytics from collecting data by installing the Google Analytics Opt-out Browser Add-on: https://tools.google.com/dlpage/gaoptout or by declining analytics cookies in our cookie consent tool.
  • More information: See Google’s Privacy Policy at https://policies.google.com/privacy and information on Google Analytics data safeguards at https://support.google.com/analytics/answer/6004245.

7. Recipients and Data Processors

We engage third-party service providers (e.g., hosting providers, IT service providers, Google as described above) who process personal data on our behalf as processors under Art. 28 GDPR. We have concluded data processing agreements with each such provider, obligating them to process personal data only on our instructions and to implement appropriate technical and organizational security measures. We do not sell personal data to third parties, and we do not share personal data with third parties for their own independent marketing purposes without your consent.

8. International Data Transfers

Where personal data is transferred to a recipient located outside the European Economic Area (EEA), we ensure an adequate level of data protection through appropriate safeguards, such as an adequacy decision by the European Commission (Art. 45 GDPR), Standard Contractual Clauses (Art. 46 GDPR), or your explicit consent (Art. 49 GDPR).

9. Data Retention

We retain personal data only for as long as necessary for the purposes for which it was collected, or as required by applicable statutory retention obligations (e.g., commercial and tax law retention periods of up to 10 years under §§ 147 AO, 257 HGB for business correspondence and accounting records). Once these purposes no longer apply and no statutory retention period applies, the data is deleted or anonymized.

10. Data Security

We use appropriate technical and organizational measures, including SSL/TLS encryption for data transmitted through our Website, to protect your data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access.

11. Automated Decision-Making

We do not use fully automated decision-making, including profiling, that produces legal effects concerning you or similarly significantly affects you within the meaning of Art. 22 GDPR.

12. Children’s Privacy

Our Website is not directed at children. In accordance with Art. 8 GDPR, we do not knowingly collect personal data from children under the age of 16 without the consent of a parent or legal guardian. If you believe a child has provided us with personal data without appropriate consent, please contact us immediately using the details in Section 1, and we will take steps to promptly delete such information.

13. Third-Party Links

Our Website may contain links to third-party websites. This Privacy Policy does not apply to those third-party sites. We recommend reviewing the privacy policy of every website you visit, as we have no control over, and assume no responsibility for, the content or privacy practices of any third-party site.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. The “Last updated” date at the top of this policy indicates when it was last revised. We encourage you to review this policy periodically.

15. Contact

If you have questions about this Privacy Policy or wish to exercise any of your data protection rights, please contact us at the address given in Section 1.