Data protection

We are happy to have you visit our website and that you are interested in our offer. We want you to feel comfortable on our website and not have to worry about the confidentiality of your data. We are very committed to data protection and consider transparency in handling your data to be very important. Therefore, we would like to inform you about the data we collect, for what purpose and how you can exercise control over your data at any time.

1. Responsible Party
The party responsible for the processing of data within the meaning of the law is:
DeFacto X GmbH
Am Pestalozziring 1-2
91058 Erlangen

2. Data Categories, Purpose and Legal Basis of Processing
Of course you can visit our website without providing any personal information. You can access the data protection declaration via the link at the bottom of each page.
We use your personal data collected within the scope of visiting our website only for operation and optimization of our website. For this purpose the IP address, various technical data about the terminal device (e.g. operating system, browser used, etc.) and data about the use of our website are recorded. We do not store this data beyond the statutory retention periods or fulfillment of the purpose. Processing this data is necessary in order to ensure operation of the website. If you do not agree with such processing, then we cannot make our online offer available to you. We perform statistical evaluations of this information in order to make use of our website even more pleasant for every visitor. We do not link this information to any personal data that we may store. The data accumulated during use of the website will be deleted after 14 months at the latest. However, the storage of data may be extended in individual cases for the assertion of legal claims, for defense against possible legal claims or due to legal obligations.

The processing of personal data for the purpose of operating the website as well as network and information security is based on Article 6 Paragraph 1 lit f) of the General Data Protection Regulation [GDPR]. There is no legal or contractual obligation on your part to provide data while using our website. However, it is not possible to operate the website or answer your inquiries without processing your data.

3. Recipient of the Data
Your data will not be disclosed to third parties unless there is a legal obligation to do so. This processing is carried out on the basis of Article 6 (1) c) of the General Data Protection Regulation [GDPR] and in conjunction with the respective order or legal obligation to which we are subject in individual cases. Article 6(1)(c) GDPR authorizes the processing of personal data where processing is required in order to fulfill a legal obligation to which the controller is subject. Categories of recipients of the data are public authorities in the event of a legal obligation and contractors who process the data collected online on our behalf. The contractors involved are:

Defacto software GmbH
defacto BE/ONE GmbH
CleverReach GmbH & Co. KG

4. Podcast Newsletter
You can register for the podcast newsletter from our managing director Jan Möllendorf at Within the scope of your registration you provide us with your e-mail address which will be verified via a double-opt-in. We will only use this information to inform you about current episodes and podcast news and it will not be shared with third parties. In order to protect your data we use a recognized encryption method when it is transmitted to us.
The data entered in the registration form will be processed exclusively on the basis of your consent in accordance with Article 6 Paragraph 1 Sentence 1 lit. a of the EU General Data Protection Regulation.
Newsletters are dispatched by CleverReach GmbH & Co. KG, Mühlenstr. 43, 26180 Rastede. CleverReach is a service with which newsletter dispatches can be organized and analyzed. The data you enter for the purpose of receiving the newsletter (e.g. e-mail address) is stored on the CleverReach servers in Germany or Ireland.
Our newsletters sent with CleverReach allow us to analyze the behavior of newsletter recipients. Among other things, we can analyze how many recipients opened the newsletter message and how often which link in the newsletter has been clicked. With the help of so-called conversion tracking, it is also possible to analyze whether a predefined action (e.g. purchase of a product on our website) has taken place after the link in the newsletter has been clicked. More information about data analysis by CleverReach newsletter can be found at:
Data processing takes place based on your consent in accordance with Article 6 Paragraph 1 Sentence 1 lit. a GDPR. You may revoke this consent at any time by unsubscribing from the newsletter. However, the legality of the data processing operations already carried out will remain unaffected by such revocation. If you do not want CleverReach to analyze your data, then you must unsubscribe from the newsletter. For this purpose we provide you with a corresponding link in every newsletter message.
The data that you provide us with for the purpose of subscribing to the newsletter will be stored by us until you unsubscribe from the newsletter and will be deleted from our servers as well as from the servers of CleverReach after the newsletter has been cancelled. Data that has been stored for other purposes will remain unaffected.
Further information is available in the data protection provisions of CleverReach at:

5. Cookies
We use two types of cookies on our website: session cookies and permanent cookies. In order for you to decide whether you allow us to do so, we would like to briefly explain the purpose of these cookies. Cookies are short snippets of text that we store on your computer. Cookies do not execute commands on your computer, so they do not pose a security risk.
Session cookies store certain information while you are browsing our website and are not permanently stored, but rather are deleted when you leave our website.
The use of session cookies is based on Article 6 Paragraph 1 f). Operation of the website is in the legitimate interest of the party responsible.
You can determine the handling of cookies in your browser yourself; you can even reject cookies completely or configure your browser so that cookies are regularly deleted. You will find sufficient information on the Internet.


6. Your Rights Regarding the Processing of Your Personal Data

With regard to the processing of personal data you have various rights about which we would like to inform you below. Details of your rights can also be found in Articles 15 to 21 of the General Data Protection Regulation [GDPR] and Sections 32 to 37 of the German Federal Data Protection Law [BDSG].
You have the right to obtain information about your personal data. You can also request the correction of inaccurate data.
In addition, under certain conditions you have the right to erasure of data, the right to restrict data processing and the right to data portability. You can lodge an objection against processing on the basis of Article 6 Paragraph 1 lit f) of the General Data Protection Regulation [GDPR], as well as against any possible profiling in accordance with Article 21 GDPR. You may revoke any consent that you have given within the scope of website use at any time, informally and without stating reasons, with effect for the future.
You may informally assert all of the above rights in accordance with Articles 15 to 21 of the General Data Protection Regulation [GDPR] to the party responsible via e-mail or regular mail.
You also have the right to lodge a complaint with the competent data protection supervisory authority if you believe that the processing of your data is unlawful. You can find a list of data protection officers and their contact details at:

If you have any questions regarding data protection, please feel free to contact our external data protection officer:
David Gabel – e-mail: david.gabel(at)
You will find general information on data protection and the processing of personal data in data protection processes at