Privacy Policy
1. Controller
The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:
rheonda UG (haftungsbeschränkt) i. G.
Bertuchstraße 30
99423 Weimar
Email: info@rheonda.de
2. Overview
This website is an information site with a contact form. It embeds no content from external providers (e.g. fonts, maps, videos) and uses no third-party advertising or tracking services. All fonts and scripts are delivered from our own server. We measure how the website is used with self-hosted software without cookies (section 10); we only set two first-party cookies with your consent.
3. Hosting and server log files
When you visit this website, the web server automatically processes information transmitted by your browser (server log files): IP address, date and time of the request, page accessed, amount of data transferred, browser type and version, operating system and the previously visited page (referrer).
Processing is based on Art. 6 (1) (f) GDPR. Our legitimate interest lies in the technically error-free presentation, security and stability of the website. Log data is deleted after 14 days at the latest unless retention is required for security reasons.
Hosting: IONOS SE, Elgendorfer Straße 57, 56410 Montabaur, Deutschland
4. Encryption
For security reasons and to protect the transmission of confidential content, this website uses TLS encryption (HTTPS). You can recognise this by the padlock symbol in your browser's address bar.
5. Local storage (colour scheme, BIM and AI check)
If you manually switch the colour scheme (light/dark), your choice is stored exclusively locally in your browser (Local Storage). This information is not transmitted to us. Storage is strictly necessary for the function you requested (§ 25 (2) no. 2 TDDDG).
In the BIM and AI check your browser also stores your answers locally only, so that you can continue later. They are not transmitted to us unless you explicitly send your result with an enquiry at the end. "Start again" deletes the stored progress. The same applies to ticks you set in checklists on the knowledge platform.
6. Links to social networks and news
We link to our profiles on social networks (currently LinkedIn, LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland). These are simple links, not embedded plugins.
On the “News” page we show our own public posts from these networks. Our server fetches their texts and images regularly and delivers them itself; your browser does not connect to the networks. Only when you click a post or a profile is data transferred to the respective network; its privacy policy then applies.
7. Contact by email
If you contact us by email, we process your details in order to handle the enquiry and any follow-up questions (Art. 6 (1) (b) or (f) GDPR). The data is deleted as soon as it is no longer required for the purpose and no statutory retention obligations apply.
8. Contact form and appointment booking
When you use our contact form, we process the details you enter (name, e-mail address, optionally company, phone number, message and how you heard about us) to handle your enquiry (Art. 6(1)(b) GDPR). The details are stored as an enquiry in our customer management system (ERPNext, operated on our own servers); you receive a confirmation by e-mail.
If you book an appointment, it is additionally entered with your name and e-mail address in our shared team calendar (also on our own servers), and you receive a calendar invitation with a link to our video conferencing system (meet.rheonda.de, self-hosted). Video calls are not recorded.
No data is transferred to third parties. We delete your enquiry data as soon as it is no longer required to handle the enquiry and no statutory retention obligations apply; if a business relationship is established, the periods applicable to it apply.
9. Applications
If you apply to us via our application form or by email, we process your details and documents (name, contact details, message and attached documents) to decide on your application. The legal basis is Art. 6(1)(b) GDPR (steps prior to entering into an employment relationship).
The form stores nothing on the website: your details and attachments are sent via an encrypted connection as an email to our mailbox info@rheonda.de, and you receive a confirmation of receipt. If no employment relationship results, we delete your documents no later than six months after the procedure has ended, unless you have consented to a longer retention.
10. Web analytics
We analyse the use of this website with the open-source software Umami, which we operate ourselves on our servers in Germany; no data is transferred to third parties.
Without consent (audience measurement without cookies): we process pages viewed and actions (e.g. steps in the contact form, search terms), referring website, campaign parameters, browser, operating system, device type, screen size, language, country/region and loading times. Nothing is stored on or read from your device for this. Your IP address is not stored; it is only used briefly to determine country/region and to form a checksum that is recalculated every day, so visits on different days cannot be linked. Legal basis: Art. 6(1)(f) GDPR; our legitimate interest lies in improving content and usability. Objection: via the switch on the “Cookies” page or your browser’s “Do Not Track” or “Global Privacy Control” setting.
With consent (cookies rh_vid and rh_src): we additionally link your visits via a random visitor ID and remember how you first came to the website. If you submit the contact form, we transmit these details with your enquiry and store them with the enquiry in our customer management system to understand which channels lead to enquiries. Legal basis: your consent (Section 25(1) TDDDG, Art. 6(1)(a) GDPR). You can withdraw it at any time with effect for the future via “Cookie settings” in the footer; the cookies are then deleted.
Storage period: raw web analytics data is deleted automatically after 13 months. Details about the origin of an enquiry are kept with the enquiry for as long as the enquiry itself (section 8).
11. Your rights
With regard to your personal data you have the following rights against us: right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection to processing (Art. 21 GDPR).
You also have the right to lodge a complaint with a data protection supervisory authority, e.g. the Independent Centre for Data Protection Schleswig-Holstein (ULD).
12. Changes
We reserve the right to amend this privacy policy so that it always complies with current legal requirements or to implement changes to our services. Last updated: September 15, 2026. This English version is provided for convenience only; the German version is legally binding.