Arematics
DE

Arematics

Privacy Policy

What happens to your data when you visit arematics.com – and what does not.

Last updated: 2026-09-18

Controller

The controller for data processing on this website is:

Arematics UG (haftungsbeschränkt)
Luise-Rinser-Str. 5
90513 Zirndorf, Germany
Email: contact@arematics.com

Scope

This policy covers the website arematics.com. The Full Circle app has its own privacy policy. Other Arematics services (e.g. auth.arematics.com) inform about their processing separately.

In short

  • This website is a static information site. There is no account, no contact form, no newsletter and no shop.
  • We set no cookies and use no analytics or advertising services.
  • Visiting the site technically creates server log data at our hosting and CDN providers (see below).

Hosting and content delivery network

Hetzner

The website is hosted by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. When you visit, Hetzner processes the data listed under “Server log data” on our behalf. The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in a secure and reliable delivery). A data processing agreement under Art. 28 GDPR is in place. Details: hetzner.com/legal/privacy-policy.

Cloudflare

We use the content delivery network and DNS service of Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. Traffic between your browser and our server is routed through Cloudflare's network; Cloudflare may process technical data (IP address, time, requested resource) to deliver the site and protect it from attacks. The legal basis is Art. 6 (1) (f) GDPR. Cloudflare is certified under the EU-US Data Privacy Framework; the EU Commission's standard contractual clauses apply in addition. A data processing agreement is in place. Details: cloudflare.com/privacypolicy.

Server log data

Each visit automatically stores the following data in server log files: requested page, date and time, transferred data volume, browser type and version, operating system, referrer URL and IP address. This data is not merged with other sources and is used solely for technical delivery, error analysis and security. The legal basis is Art. 6 (1) (f) GDPR. Log data is deleted after 14 days at the latest.

Cookies and local storage

We ourselves set no cookies. As part of its protection features (e.g. a bot check) Cloudflare may set technically necessary cookies such as __cf_bm or cf_clearance; they contain no personal data, serve security only and require no consent under § 25 (2) no. 2 TDDDG. If your browser reports German as its language or you are in a German-speaking time zone, the English pages show a hint pointing to the German version. For this the page evaluates your browser's language setting and time zone – locally in the browser only, without transmitting anything to us. When you dismiss the hint, your browser remembers that in its local storage (localStorage). Again nothing is transmitted to us; the storage is necessary for the function you requested (§ 25 (2) no. 2 TDDDG) and can be cleared at any time in your browser settings.

Contact

If you contact us by email, we process your details (email address, message content) to handle the request. The legal basis is Art. 6 (1) (b) GDPR where the request relates to a contract, otherwise Art. 6 (1) (f) GDPR. We delete the data once the request is settled and no statutory retention obligations apply.

The website links to external services such as Apple's App Store or social media profiles. When you open them, the respective provider's privacy policy applies. We do not embed third-party content (fonts, videos, maps, tracking pixels) on our pages.

Unless stated otherwise above, we process personal data on the basis of Art. 6 (1) (f) GDPR (legitimate interest in a secure, functioning website) or Art. 6 (1) (b) GDPR (initiating or performing a contract). No processing on this website relies on consent; should we ask for consent in the future, you can withdraw it at any time with effect for the future. We keep data only as long as required for the respective purpose or by statutory retention periods. No automated decision-making, including profiling, takes place. We have not appointed a data protection officer because the statutory requirements are not met.

Your rights

Regarding your personal data you have the following rights towards us:

  • Access (Art. 15 GDPR)
  • Rectification (Art. 16 GDPR)
  • Erasure (Art. 17 GDPR)
  • Restriction of processing (Art. 18 GDPR)
  • Data portability (Art. 20 GDPR)

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is the Bavarian State Office for Data Protection Supervision (BayLDA), Promenade 18, 91522 Ansbach, Germany, lda.bayern.de. An email to contact@arematics.com is sufficient to exercise your rights.

Right to object

Where we process data on the basis of Art. 6 (1) (f) GDPR, you have the right to object at any time, on grounds relating to your particular situation (Art. 21 (1) GDPR). We will then no longer process the data unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

Data security

The website is delivered exclusively over TLS-encrypted connections (HTTPS).

Changes

We update this policy when the website or the legal situation changes. The current version is always available at this address.