Privacy Policy

Last updated: 8 September 2026

This policy explains which personal data are processed when you visit our website or contact us.

1. Controller

2. Hosting and server log files at IONOS

Our website is hosted by IONOS SE, Elgendorfer Straße 57, 56410 Montabaur, Germany. When you access the website, IONOS processes connection and access data as our hosting provider. These include, in particular, the IP address, time of access, requested page or file, technical response status and information transmitted by the browser about the browser, operating system and, where applicable, the previously visited page (referrer).

These data are processed to deliver the website, maintain secure and reliable operation, and detect and resolve technical errors and abusive access. The legal basis is Article 6(1)(f) GDPR; our legitimate interest is the provision and security of our website.

Access data are retained only for as long as necessary for these purposes. The deletion and anonymisation procedures applicable to our hosting contract are decisive. Longer retention may be necessary to investigate a specific security incident or to comply with legal obligations. Further information: IONOS information on privacy in web hosting.

3. IONOS WebAnalytics

The IONOS hosting environment includes WebAnalytics for statistical analysis and technical optimisation of the website. IONOS states that tracking and logging are enabled by default. This analysis can take place on the hosting side using log files; no additional analytics script is embedded in our website for this purpose.

According to IONOS, WebAnalytics does not use cookies. The IP address transmitted when a page is requested is anonymised immediately after transmission. The analysis covers the referrer, requested page or file, browser type and version, operating system, device type, time of access and the anonymised IP address used to determine the geographical origin of the access.

To the extent that personal data are processed before anonymisation, this serves our legitimate interest in statistical and technical website analysis using minimal personal data, on the basis of Article 6(1)(f) GDPR. The retention criteria described above apply to the underlying access data. Details: IONOS: data processing by WebAnalytics.

4. Contact by email and mailto form

The contact form uses your entries to prepare an email draft and opens it in your email application. It contains fields for your name, company, email address, use case and message. The website does not send these details through a form server or store them in a website database. They are transmitted to us through the email providers involved only when you send the message from your email application. You can also contact us directly by email.

We process the information you provide to answer your enquiry and, where applicable, prepare or conduct a business relationship. For enquiries concerning a contract with you or steps prior to entering into a contract, the legal basis is Article 6(1)(b) GDPR. For other enquiries, particularly those from company contacts, the legal basis is Article 6(1)(f) GDPR; our legitimate interest is handling business communications.

Once your enquiry has been fully dealt with, we delete the information as soon as it is no longer needed for its purpose. Statutory retention obligations and retention necessary to establish or defend legal claims remain unaffected. Statutory retention is based on Article 6(1)(c) GDPR. Contacting us is voluntary; without sufficient contact details and information about your enquiry, we may be unable to respond.

5. OpenStreetMap

In the contact section, we display a map using the locally served open-source library Leaflet. The map tiles are requested directly from OpenStreetMap when the page loads. The provider is the OpenStreetMap Foundation (OSMF), St John’s Innovation Centre, Cowley Road, Cambridge, CB4 0WS, United Kingdom. The OSMF processes data as an independent controller.

This may involve processing your IP address, browser and device information, operating system, time of access, requested map resources and, depending on browser settings, a referrer. The OSMF also uses a content delivery network to serve map tiles. Connections may be made to servers in the United Kingdom and other countries. The Leaflet scripts and styles are served by our own website; no external library provider is contacted for this purpose.

The map makes it easier to find our business location. We base this processing on Article 6(1)(f) GDPR and our legitimate interest in providing this location information. For processing by the OSMF, its recipients and retention periods, please refer to the OpenStreetMap Foundation Privacy Policy. Further details are provided in the OSMF information for map service users.

6. Google Maps as an external directions link

“Plan route” takes you to Google Maps through an external link. Google Maps is not embedded in this website; we do not load Google scripts for this purpose or use a Google Maps API. This link establishes a connection to Google only when you actively open it. The following then applies: Google Privacy Policy. Our website does not transmit a starting point or your location; the link contains only our business destination address.

7. Links to social networks

LinkedIn, XING and YouTube are included solely as external links. Our website contains no social media plugins, embedded feeds, videos or Like/Share SDKs. These links do not transmit data to the networks merely because you visit the page. Only when you actively open a link do you leave our website and access the respective provider. That provider’s privacy policy then applies.

8. Local fonts and website assets

The fonts and our own images and icons are served together with the website. No connection to Google Fonts or another external font provider is established to load fonts. The external location map is described in Section 5.

9. Cookies and storage on your device

Our own website code does not set cookies or use Local Storage, Session Storage or IndexedDB. We do not use tracking or marketing cookies or our own analytics pixels. According to the provider, IONOS WebAnalytics operates without cookies. The direct connection to the external location map exists independently of this; please see Section 5.

Normal caching of website and map resources by your browser serves their technical delivery. Form entries are processed temporarily in the page’s working memory to create the email draft. The website does not use them to create a persistent user profile.

10. Your rights

Subject to the applicable legal conditions, you have the following rights:

• Access to the personal data processed about you (Article 15 GDPR).
• Rectification of inaccurate data and completion of incomplete data (Article 16 GDPR).
• Erasure of your data and restriction of processing (Articles 17 and 18 GDPR).
• Data portability, where processing is based on consent or a contract and is carried out by automated means (Article 20 GDPR).
• Withdrawal of consent at any time with effect for the future. This does not affect the lawfulness of processing carried out before withdrawal (Article 7(3) GDPR).

Right to object: Where we process data on the basis of Article 6(1)(f) GDPR, you may object on grounds relating to your particular situation. We will then stop processing these data unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims. You may object to processing for direct marketing at any time without giving reasons (Article 21 GDPR).

To exercise your rights, you can reach us at info@ilariz.com or using the contact details provided above.

11. Right to lodge a complaint

If you believe that the processing of your personal data infringes data protection law, you may lodge a complaint with a supervisory authority under Article 77 GDPR, particularly in the Member State of your habitual residence, place of work or the place of the alleged infringement. For our company, the State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg is a relevant authority: Information and how to lodge a complaint.