Privacy policy.

1. Controller.

CodePopper GmbH i. G. (in formation)
Am Bondenholz 13
22885 Barsbüttel
Germany
Email: info@codepopper.de
Phone: +49 152 06 08 08 08

Represented by the Managing Director (see legal notice).

2. Data protection officer.

No data protection officer has been appointed; in our assessment there is no obligation to appoint one (Art. 37 GDPR, Section 38 of the German Federal Data Protection Act, BDSG: fewer than 20 persons constantly engaged in automated processing, no processing under Art. 35 or Art. 37(1)(b) or (c) GDPR as a core activity). Please send questions about data protection to the address above.

3. Visiting the website: server logs.

When you visit the site, our web server processes technically necessary data in order to deliver the site and to secure its operation. For each access, the following is logged: date and time, the address requested, HTTP status, amount of data transferred, the user agent and the referrer address sent by your browser, and your IP address in shortened form (IPv4 shortened to the /24 network and IPv6 to the /48 network before it is stored). Cookie and authorization fields are not logged.

Purpose: delivering the site, troubleshooting, and defending against attacks and misuse. Legal basis: Art. 6(1)(f) GDPR. Our legitimate interest is the secure and functioning operation of the website. The logs are not analysed for marketing purposes and are not passed on.

Storage period: The logs are deleted after seven days. They are not part of our backups.

4. Hosting.

The website is operated on a server of Hetzner Online GmbH, Industriestraße 25, 91710 Gunzenhausen, Germany; the server is located in a data centre in Germany. Hetzner processes the data listed under 3. on our behalf (Art. 28 GDPR). A data processing agreement with Hetzner is in place.

5. Contact by email.

If you send us an email at info@codepopper.de, we process your email address, the information in your message and the time of sending in order to answer your enquiry. Legal basis: Art. 6(1)(b) GDPR where the enquiry is aimed at a contract, otherwise Art. 6(1)(f) GDPR (legitimate interest in answering enquiries).

Recipients: Our email service is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (Google Workspace), which operates it on our behalf (Art. 28 GDPR). Processing by Google LLC in the USA may take place. The basis for this transfer to a third country is the European Commission’s adequacy decision on the EU-US Data Privacy Framework, in which Google LLC participates, and in addition the standard contractual clauses adopted by the European Commission, which form part of the Google Workspace terms.

Storage period: We delete enquiries once they have been answered, unless a statutory retention obligation applies; emails that are business letters are kept for six or eight years in accordance with Section 257 of the German Commercial Code (HGB) and Section 147 of the German Fiscal Code (AO).

6. No cookies, no browser storage, no third-party content.

This website sets no cookies, stores nothing in your browser’s storage and loads no content from other servers; fonts and all other files are delivered by our own server. There are no analytics or advertising tools and no embedded third-party services. Consent under Section 25 of the German Telecommunications Digital Services Data Protection Act (TDDDG) is therefore not required, and there is no cookie notice.

7. Your rights.

You have the right to obtain information from us about your personal data (Art. 15 GDPR), to rectification (Art. 16), to erasure (Art. 17), to restriction of processing (Art. 18) and to data portability (Art. 20).

Right to object: You have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data based on Art. 6(1)(f) GDPR (Art. 21 GDPR). We will then no longer process the data unless we can demonstrate compelling legitimate grounds that override your interests, or the processing serves the establishment, exercise or defence of legal claims.

Withdrawal of consent: We do not process any data on this website on the basis of consent. Should this ever be the case, you can withdraw consent you have given at any time with effect for the future (Art. 7(3) GDPR).

Right to lodge a complaint: You have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is the Unabhängiges Landeszentrum für Datenschutz Schleswig-Holstein (ULD), Holstenstraße 98, 24103 Kiel, Germany. You can also contact the supervisory authority at your place of residence.

8. Provision of data, automated decisions.

You are not obliged by law or by contract to provide us with personal data; however, without the technical data under 3. the site cannot be delivered, and without your email address we cannot answer an enquiry. Automated decision-making, including profiling (Art. 22 GDPR), does not take place.

9. Version.

As of: 15 October 2026. We adapt this policy when the website, the hosting or the services used change. You can always find the current version on this page.