Privacy Policy

This privacy policy provides concise information about how personal data is processed when you visit this website or use its functions.

1. Controller

Josc Engineering
Joachim Schmid
Sierenmoosstr. 51
78464 Konstanz
Germany

Email: [email protected]

2. Website Operation and Cloudflare

When you access the website, technically required data is processed, in particular the IP address, time, requested page, HTTP status and browser or device information. This is necessary to provide, secure and maintain the website. The legal basis is Article 6(1)(f) GDPR. My own technical logs are generally deleted after 30 days unless they are required for longer to investigate a security incident.

The website is provided and protected using Cloudflare services. Cloudflare may therefore process connection data. Where data is processed outside the EU or EEA, this is carried out in accordance with the legal requirements for international data transfers.

3. Contact Enquiries

If you contact me by email or through the contact form, I process your contact details, the content and time of your enquiry and any files you voluntarily upload. Name, email address and message are required in the contact form; all other details are voluntary.

The data is processed to handle your enquiry and, where applicable, to take steps prior to entering into a contract under Article 6(1)(b) GDPR. In other cases, processing is based on Article 6(1)(f) GDPR and my legitimate interest in handling enquiries appropriately. Zoho Mail is used for email delivery. The data is deleted once the enquiry has been completed unless statutory retention duties or legitimate reasons require continued storage.

Server-side security checks are used to protect the contact form against misuse and spam. Technical characteristics, a hashed IP address and the content and timing of a submission may be assessed. Submissions clearly identified as spam are stored separately and automatically deleted within 30 days. The legal basis is Article 6(1)(f) GDPR; the legitimate interest is protecting the contact form against misuse.

This website uses Cloudflare Turnstile, a service provided by Cloudflare, Inc., to identify automated access and to protect the contact form against automated submissions. Your browser loads content from Cloudflare, which processes connection, browser and device information. The server verifies the result using a single-use token. This application does not send your name, email address, message or attachments to the Turnstile verification endpoint. For more information, see the Cloudflare Turnstile Privacy Addendum.

After a successful background check, a technically necessary, non-identifying security cookie is stored for no more than 60 minutes. It contains no visitor ID and is used only to avoid repeating the check on every page view. Requests that are not successfully verified and are otherwise inconspicuous are not counted as human page views in the anonymous visitor statistics.

4. Secure Customer File Area

For the secure exchange of project files, customer name, email address, project name, uploaded files, file and activity data and, for security purposes, a hashed IP address may be processed. Processing is necessary for the cooperation and the secure operation of the file area. The legal basis is Article 6(1)(b) GDPR and, additionally, Article 6(1)(f) GDPR.

Access is provided through an individual link and password. A technically necessary cookie valid for no more than 120 minutes is used for the signed-in session. Archived file areas remain stored until they are permanently deleted. Otherwise, the data is deleted when it is no longer required for the cooperation and no statutory retention duty applies. Backup copies are deleted within 30 days.

5. Cookies and Visitor Statistics

Technically necessary cookies are used for the cookie choice, website security and the secure customer file area. They are required for the function requested by the user. The legal basis is Section 25(2) TDDDG; related processing of personal data is based on Article 6(1)(b) or Article 6(1)(f) GDPR.

Detailed visitor statistics are only created with your consent. Page views, referrer information, browser and device data, a hashed IP address and an approximate geographical location may be processed. The legal basis is Article 6(1)(a) GDPR and Section 25(1) TDDDG. Analytics cookies are stored for no more than one year, session IDs for no more than 30 minutes and detailed analytics data for no more than two years. You may withdraw your consent at any time with future effect through the cookie settings.

Josc Engineering uses the IP2Location LITE database for IP geolocation.

6. Recipients

Personal data is only disclosed where this is necessary to operate the website, communicate with you, perform a contract or comply with a legal obligation. Recipients may in particular include Cloudflare and Zoho Mail as technical service providers.

7. Your Rights

Subject to the statutory requirements, you have the right to access, rectification, erasure, restriction of processing, data portability and objection. You may withdraw consent at any time with future effect. You also have the right to lodge a complaint with a data protection authority, in particular the State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg.

To exercise your rights, please email [email protected].

8. Last Updated

Last updated: 14 July 2026