1. Data Controller

The controller responsible for data processing on this website pursuant to Art. 4 No. 7 GDPR is:
IGNISON UG (haftungsbeschränkt)
Randstraße 1, 22525 Hamburg, Germany
Represented by Managing Director: Ghaith Qudsy
Email: contact@ignison.de | Tel: +49 176 23196357

2. Hosting and Server Log Files

When you access our website, our server infrastructure automatically captures technical access data transmitted by your browser (server log files). This includes IP address, access timestamp, request method, URI path, HTTP status code, browser type/version, and operating system. The legal basis for processing is Art. 6(1)(f) GDPR (legitimate interest in the technical stability, integrity, and cybersecurity of our web server infrastructure). Server log files are stored for a maximum of 14 days and subsequently deleted, unless required for evidentiary purposes in cybersecurity incidents.

3. Commercial RFQ Ingestion & B2B Communication

When you submit an inquiry through our commercial RFQ portal, email, or telephone, we process your contact details (full name, corporate email, company legal name, phone number, specification requirements, and optional NDA request). The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures taken at the request of the corporate prospective client) and Art. 6(1)(f) GDPR (legitimate interest in conducting professional B2B commercial dialogue).

4. Statutory Retention Periods (§ 147 AO / § 257 HGB)

Personal and corporate data is retained strictly in accordance with German commercial and fiscal retention mandates or until the operational purpose has been satisfied:

10-Year Retention: Annual financial statements, opening balance sheets, commercial books, inventories, and customs records pursuant to § 147(1) No. 1 AO and § 257(1) No. 1 HGB.
8-Year Retention: Accounting records and booking vouchers (Buchungsbelege) pursuant to § 147(1) No. 4, (3) AO and § 257(1) No. 4, (4) HGB (as amended by the Wachstumschancengesetz / BüMoG IV).
6-Year Retention: Commercial correspondence and received business letters (Handelsbriefe) pursuant to § 147(1) No. 2, 3 AO and § 257(1) No. 2, 3 HGB.
Active Quotation Window / 12 Months: Non-contractual commercial inquiries and preliminary RFQ technical specifications where no commercial contract is formed.
14-Day Retention: Web server access log files (IP addresses, user agent strings, request paths) strictly for infrastructure security and defense.

5. Data Processors & Sovereign Infrastructure

Data is processed exclusively within sovereign European infrastructures under strict Data Processing Agreements (DPA) pursuant to Art. 28 GDPR:

Hetzner Online GmbH (Industriestr. 25, 91710 Gunzenhausen, Germany) — Sovereign cloud compute, database nodes, and webhook execution in ISO/IEC 27001 certified data center facilities (Falkenstein & Nuremberg, Germany).
Odoo S.A. (Chaussée de Namur 40, 1367 Grand-Rosière, Belgium) — Cloud ERP hosting and customer portal within the European Union (Brussels/Grand-Rosière, Belgium).
Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) — Enterprise email, calendar, and workspace infrastructure operating under EU Standard Contractual Clauses (SCCs).
Squarespace Ireland Ltd. (Le Pole House, Ship Street Great, Dublin 8, Ireland) — DNS resolution and web application security (CSRF defense). Legal basis: Art. 6(1)(f) GDPR / DSGVO (legitimate interest in maintaining network integrity and defense against cross-site request forgery attacks). Operational session cookies (such as crumb) are strictly technically necessary pursuant to § 25(2) No. 2 TDDDG.

6. Your Rights as a Data Subject

Under the GDPR, you have the right to request access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and objection to processing (Art. 21). You may exercise these rights at any time by contacting contact@ignison.de.

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The competent supervisory authority for our registered office is:
Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit (HmbBfDI)
Ludwig-Erhard-Str. 22, 7. OG, 20459 Hamburg, Germany | https://datenschutz-hamburg.de