Controller and contact

Neobotix GmbH, Hahnstraße 2, 74080 Heilbronn, Germany.
Email: info@neobotix.de
Telephone: +49 7131 899 69-10.

Please use these contact details for questions about personal data and to exercise your rights. Further company details are available in our imprint.

Hosting and technical access data

Our website and customer portal are hosted by IONOS SE, Elgendorfer Straße 57, 56410 Montabaur, Germany. Requests involve processing technical connection data, including the IP address, date and time, requested address, HTTP status and browser, operating system and referrer information transmitted by your browser. This serves content delivery, operational security and troubleshooting. The legal basis is Article 6(1)(f) GDPR; our legitimate interest is the secure and reliable operation of our website.

IONOS receives this hosting data as our hosting provider. According to IONOS information about log files, the access logs described there use anonymised IP addresses and are retained for up to eight weeks. See also the IONOS privacy information.

Cookies, search and audience measurement

We do not embed analytics or advertising trackers such as Google Analytics. Images, fonts and website search are served from our own webspace. Search runs in your browser and does not send search terms to a search provider. As with other page requests, a search page URL including its search parameters may appear in hosting logs.

The customer and administrator portal requires the neobotix_portal cookie to protect forms from abusive requests and securely identify your login. It is restricted to /kundenportal, transmitted only over HTTPS and cannot be read by JavaScript. It is a session cookie without a fixed browser expiry; browsers may restore session cookies when restoring a browsing session. Independently of this, a portal login expires after at most eight hours or 30 minutes of inactivity. Logging out invalidates the login on the server.

This storage is necessary for the requested portal service and does not require consent under Section 25(2)(2) TDDDG. Related personal data processing is based on Article 6(1)(b) GDPR where required for our contractual relationship, or our legitimate interest in secure access control under Article 6(1)(f) GDPR. Optional YouTube content is loaded only after your separate consent.

Customer and administrator portal

We process usernames, display names, permissions and account status, password hashes, session and security data, and files made available to you, including filenames, descriptions, sizes and assignments. Passwords are stored as one-way hashes. File contents, filenames and descriptions are encrypted at rest; authorised users and administrators can retrieve their decrypted contents through the portal.

We log security-relevant events, including logins, failed logins, password changes and file actions, with timestamps and, where applicable, account or file identifiers. Derived identifiers for usernames and IP addresses are temporarily processed to limit login attempts. Processing serves the contractual provision of documents and secure access (Article 6(1)(b) and (f) GDPR). Access is restricted to authorised persons; IONOS provides the infrastructure.

Accounts, files and event logs remain stored until administratively deleted; disabling an account does not itself delete that data. We remove data once its purpose has ended and no statutory retention obligations or legitimate evidentiary interests require further retention. Please contact us using the details above to request access or deletion.

YouTube videos and your consent

Some pages offer optional YouTube videos, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Initially, only a locally served notice is displayed. No YouTube player or external thumbnail is loaded and no connection to YouTube is made at that stage.

By selecting “Load YouTube video”, you consent to embedding that video. Google then receives information including your IP address, browser and device information and the page you visited. Google may use cookies or browser storage and process usage data. If you are signed into Google, this information may be associated with your account. Processing in the USA and other countries is possible. See the Google Privacy Policy for Google's purposes, retention periods and international transfers.

The legal bases are your consent under Article 6(1)(a) GDPR and, where information is stored on or read from your device, Section 25(1) TDDDG. We use the player at youtube-nocookie.com; this does not exclude data processing by Google after activation.

Select “Disable video and withdraw consent” to remove the player. Withdrawal applies to future processing; it does not retrospectively delete information already transmitted or storage set by YouTube. You can manage such storage through your browser or Google's privacy settings. We do not persist your video consent: every additional video and each new page load requires a new decision. The rest of the page remains available without consent. Alternatively, you can follow the clearly labelled link to YouTube.

Contacting us and external links

If you contact us by email or telephone, we process your contact details and enquiry to respond and, where applicable, to take steps towards a contract. The legal basis is Article 6(1)(b) GDPR for contractual enquiries, otherwise Article 6(1)(f) GDPR and our legitimate interest in responding. We retain this information for as long as needed to handle the enquiry and meet any applicable statutory retention obligations.

Social media and other external references are ordinary links. The external website is contacted only when you open its link, and its privacy information then applies.

Your rights

Subject to the statutory conditions, you have rights of access, rectification, erasure, restriction of processing and data portability (Articles 15–20 GDPR). You may withdraw consent at any time for the future (Article 7(3) GDPR), without affecting the lawfulness of earlier processing.

Right to object: Where processing is based on legitimate interests, you may object on grounds relating to your particular situation under Article 21 GDPR. Please use the contact details above.

You may complain to a data protection supervisory authority (Article 77 GDPR), in particular the State Commissioner for Data Protection and Freedom of Information Baden-Württemberg.