Privacy Policy

1. General Information

The following information explains the nature, scope and purposes of the processing of personal data when you visit this website. Personal data is any data by which you can be personally identified.

Protecting your privacy when you visit our website is an important concern for us and of crucial importance for the future of doing business on the internet. Personal data is collected on our website only to the extent that is technically and organizationally necessary.

Our website can be visited without registration. We do not use any analytics or tracking services and do not statistically evaluate your behavior on this website. Personal data, in particular your name, address or email address, is collected only if you provide it to us yourself – for example, via the contact form. Your data is not passed on to third parties without your consent.

2. Controller

The controller responsible for data processing on this website is:

CSG AUPOS Software Solutions GmbH
Zur Steinkuhle 8
48341 Altenberge
Phone: +49 2505 93877-00
Email: info@aupos.de

Further information about the company can be found in the Legal Notice.

3. Data Protection Officer

No data protection officer has been appointed, as the legal requirements for doing so are not met. For data protection questions, please contact the controller named in Section 2 or email us directly at datenschutz@aupos.de.

4. Types of Data Processed and Purposes of Processing

4.1 Categories of Personal Data

• ›Access data and server logs (such as IP address, date and time of the request, referrer URL, browser identifier)
• ›Communication data (such as email address, phone number), if you provide it in the contact form
• ›Content data (what you enter in the form), if you provide it
• ›Usage data (pages visited), to the extent recorded in the server logs

4.2 Purposes of Processing

• ›Provision of the website as well as its stability and security
• ›Communication and processing of your inquiries
• ›Compliance with legal obligations

5. Hosting and Server Log Files

This website is operated on a rented server (VPS) at a hosting provider based in Germany. A data processing agreement pursuant to Art. 28 GDPR is in place with the hosting provider.

When you access this website, the web server processes technical access data. This includes the IP address of your device, the date and time of access, the requested page or file, the status code transmitted and information about your browser and operating system.

This data is technically required to operate the website: it enables the page to be delivered, technical faults to be detected and fixed, and abusive access to be prevented. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in the technically error-free provision and the security of the website. The data is not combined with other data or evaluated for advertising or analysis purposes. The access logs are automatically deleted after 30 days.

6. Use of Cookies and Local Storage

6.1 Technically Necessary Cookies

Only a single technically necessary cookie is set, and even that only if you sign in via an internal access link for pages that have not yet been published. It contains no personal information whatsoever and cannot be read by scripts. As a regular visitor, you will not receive this cookie.

6.2 Local Storage (localStorage)

If you change the site's color scheme (light or dark), your browser remembers this choice in local storage under the key auposiq-theme.

Only your display preference is stored – nothing that relates to you personally and no identifier that would make you recognizable. The entry remains on your device and is not transmitted to us or to third parties. If you keep the default “System” setting, nothing is stored at all. You can delete the entry at any time in your browser settings.

Legal basis for storing this entry on your device: Section 25(2) no. 2 TDDDG (German Telecommunications Digital Services Data Protection Act) – the storage is strictly necessary to provide the service you have explicitly requested (the display you have chosen).

6.3 Tracking and Marketing Cookies

No tracking, analytics or marketing cookies are used. Nor do we integrate any third-party services that would set such cookies.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in a functional and user-friendly website).

7. External Resources and Links

All files required to display the site – stylesheets, JavaScript and fonts – are loaded exclusively from our own server. We do not use any external CDN services; the Inter typeface we use is self-hosted, so no external font servers are accessed.

In a few places, we link to external services, for example to a map service to display our address, to our LinkedIn profile, to the download page of our remote support provider or to the German federal government's funding database (Förderdatenbank des Bundes). These are exclusively links, not embedded content: as long as you do not click on such a link, no data whatsoever is transmitted to the respective provider. Only when you click do you leave this website; from that point on, the privacy policy of the respective provider applies.

8. Contact Form

If you send us inquiries via the contact form, your details are transmitted to us by email solely for the purpose of processing your inquiry and in case of follow-up questions. To protect against automated submissions, we use a technical verification method (not an external service). Your data is not passed on to third parties.

9. Legal Bases for Processing

• ›Art. 6(1)(b) GDPR – performance and initiation of contracts: where processing is necessary for the performance of a contract with you, for example in the case of contact inquiries.
• ›Art. 6(1)(f) GDPR – legitimate interests: for the technically necessary provision and the security of this website, in particular the server log files.

10. Duration of Data Storage

• ›Server log files: 30 days, followed by automatic deletion.
• ›Contact inquiries: until processing is complete, for a maximum of twelve months; thereafter, statutory retention periods apply where relevant.
• ›Cookie aupos_intern: seven days.

11. Recipients of Data

As a rule, your personal data is not transferred to third parties unless this is necessary to comply with legal obligations. For technical reasons, only our hosting provider and the provider of our email delivery service have access to the data required in each case; both are contractually bound as processors. No data is transferred to countries outside the European Union.

12. Your Rights

Within the scope of the applicable legal provisions, you have the following rights:

• ›Access to information about your data stored by us (Art. 15 GDPR)
• ›Rectification of inaccurate data or completion of incomplete data (Art. 16 GDPR)
• ›Erasure of your data (Art. 17 GDPR)
• ›Restriction of processing (Art. 18 GDPR)
• ›Data portability (Art. 20 GDPR)
• ›Objection to processing based on Art. 6(1)(f) GDPR (Art. 21 GDPR)
• ›Withdrawal of consent given, with effect for the future (Art. 7(3) GDPR)

To exercise your rights, please use the contact details provided in Section 15.

Right to lodge a complaint: You have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR). The supervisory authority responsible for us is:

Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia)
Kavalleriestraße 2–4
40213 Düsseldorf
www.ldi.nrw.de

13. Obligation to Provide Data

The provision of personal data is required neither by law nor by contract, nor is it necessary for concluding a contract. You are not obliged to provide personal data. Without this information, however, you cannot use our contact form.

14. Data Security

We take technical and organizational measures to protect your data against loss, destruction, manipulation and unauthorized access. Data is transmitted exclusively over a TLS-encrypted connection (HTTPS). Our security measures are continuously improved in line with technological developments.

15. Contact for Data Protection Inquiries

For questions about data protection, to exercise your rights as a data subject, or in the case of complaints, please contact:

16. Last Update and Changes to This Privacy Policy

Last updated: September 2026. We reserve the right to amend this privacy policy if the legal situation or the services we use change.