Privacy Policy
We process as little personal data as possible. On this page you will find a complete account of what we do, and more importantly, of what we do not do.
Note: the legally binding version of this policy is the German one at /datenschutz.
Who is responsible
Controller within the meaning of the General Data Protection Regulation (GDPR) and other national data protection laws:
Mert Biber (Biber-Solutions)Hörgelstraße, 16
76228 Karlsruhe, Germany
Email: info@biber-solutions.de
Phone: +49 721 619 313 04
General principles of data processing
We only process personal data of our users to the extent that this is necessary to provide a functioning website along with our content and services.
Processing is generally based on the user's consent or where a law or other legal provision permits it.
Providing the website and server logs
Every time our website is accessed, our system automatically collects data and information from the requesting computer system:
- IP address (anonymised after 7 days)
- Date and time of access
- Requested URL and HTTP status code
- Volume of data transferred
- Browser type and operating system in use
Legal basis is Art. 6 (1) (f) GDPR (legitimate interest in the stable, secure operation of the website). The data is deleted after a maximum of 30 days.
Contact form and email contact
When you use the contact form, the data entered into the input mask (name, email, optionally phone and company, your message) is transmitted to us and stored. Processing serves the sole purpose of handling your request.
Legal basis: Art. 6 (1) (b) GDPR (initiation of a contractual relationship) or Art. 6 (1) (a) GDPR (your consent via the privacy checkbox). The data is deleted as soon as it is no longer required for the purpose for which it was collected, at the latest after statutory retention periods expire.
Hosting and dispatch of the contact form
Our website is hosted on a server in Germany. The contact form is dispatched via an SMTP server operated by us to our business address info@biber-solutions.de.
No US-based third-party providers (e.g. Google reCAPTCHA, SendGrid, Mailchimp) are used.
Fonts and scripts
The "Inter" font is served exclusively from our own server. There is no connection to Google Fonts or other third-party servers. All JavaScript files are also served from the same server.
Maps and location display
We use our own, hand-drawn SVG map to display our locations. We do not embed Google Maps, OpenStreetMap tiles or comparable third-party services.
Self-hosted web analytics
We run a lightweight, self-hosted web analytics setup to measure reach and discoverability of our content. Per page view we record: the requested path, timestamp, language, referrer domain (if any) and a pseudonymous visitor identifier.
The visitor identifier is a cryptographic SHA-256 hash of the IP address combined with a server-side salt. The original IP cannot be reconstructed from it. No cookies are set and no data is transmitted to third parties.
The data is automatically deleted after 90 days and only shown in aggregated form (daily views, top pages, top referrers, language split) in our internal admin dashboard. Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in a technically optimised website). No consent under § 25 (1) TTDSG is required, as no end-device storage is accessed.
Google Search Console
To monitor the technical discoverability of our website in Google Search, we use Google Search Console (Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland). Domain ownership is verified via a static HTML file (/google6a1ac4fcc6cbf813.html) that is only fetched by the Googlebot.
No cookies are set on visitors, no personal data of our visitors is transmitted to Google, and no tracking code is embedded in our website. The verification file itself contains no executable scripts.
In Search Console we only receive aggregated, anonymised statistics about our website (incoming search queries, click and impression rates, crawl status, index coverage). Legal basis: Art. 6 (1) (f) GDPR. There is no consent obligation under § 25 (1) TTDSG. Further information: policies.google.com/privacy.
Your rights as a data subject
You have the following rights regarding personal data concerning you:
- Right of access (Art. 15 GDPR)
- Right to rectification (Art. 16 GDPR)
- Right to erasure (Art. 17 GDPR)
- Right to restriction of processing (Art. 18 GDPR)
- Right to data portability (Art. 20 GDPR)
- Right to object (Art. 21 GDPR)
- Right to withdraw consent (Art. 7 (3) GDPR)
An informal email to info@biber-solutions.de is enough to exercise any of these rights.
Right to lodge a complaint with the supervisory authority
You have the right to lodge a complaint with the competent supervisory authority. For us this is:
State Commissioner for Data Protectionand Freedom of Information of Baden-Württemberg
Lautenschlagerstraße 20
70173 Stuttgart, Germany
Phone: +49 711 615 541-0
Email: poststelle@lfdi.bwl.de
Updates to this policy
This privacy policy is currently valid and has the version dated May 14, 2026. As our website evolves, it may become necessary to adapt this policy. The latest version is always available on this page.