Privacy Notice
Information on the processing of your personal data pursuant to Art. 13 GDPR. Our DOC.mobile and DOC.project platforms operate under an information security management system certified to ISO 27001.
Note: This is an English translation of our German privacy notice for convenience. The German version is the legally binding one.
1. Controller
The controller responsible for the processing of personal data on this website is:
DOCby.net GmbH
Nordstraße 13, 38106 Braunschweig, Germany
Phone: +(49) 531 288 539 40
E-mail: service@docby.net
Managing Director and point of contact: Dipl.-Inform. (TU) Rainer David.
2. Your Rights as a Data Subject
You have the right, at any time, to:
- Right of access (Art. 15 GDPR) regarding the data stored about you;
- Rectification of inaccurate or incomplete data (Art. 16 GDPR);
- Right to erasure (Art. 17 GDPR) - "right to be forgotten";
- Restriction of processing (Art. 18 GDPR);
- Data portability (Art. 20 GDPR);
- Objection to processing (Art. 21 GDPR);
- Withdrawal of consent with effect for the future (Art. 7 (3) GDPR);
- Lodge a complaint with a supervisory authority (Art. 77 GDPR). The competent supervisory authority is the Lower Saxony Data Protection Commissioner (LfD Niedersachsen).
3. Server Logs
When you visit our website, our web server automatically collects technical data transmitted by your browser:
- IP address (truncated after 7 days)
- Date and time of access
- Page requested and amount of data transferred
- Referrer URL and user agent
The legal basis is Art. 6 (1) lit. f GDPR. The data are used exclusively to ensure operation, to detect attacks and for error analysis. Retention period: max. 30 days.
4. Cookies
We use cookies to deliver this website and to enable comfort features. We do not use cookies for web analytics (see §5). You can change or withdraw your consent for optional comfort cookies at any time via the Cookie settings link in the footer.
4.1 Strictly necessary cookies
These cookies are required for the site to function (e.g. session, language preference, cookie consent). Legal basis: Art. 6 (1) lit. f GDPR in conjunction with Section 25 (2) no. 2 TDDDG (German Telecommunications Digital Services Data Protection Act).
4.2 Optional comfort cookies
Comfort cookies (e.g. persistent language preference) are only set after your active consent pursuant to Section 25 (1) TDDDG and Art. 6 (1) lit. a GDPR. We do not use any cookies for web analytics — see §5.
5. Web Analytics with Plausible (cookieless)
To improve our offering, we collect aggregated usage statistics using the open-source software Plausible Analytics, which we host on our own servers in the EU (Hostinger VPS, location {{STADT}}). Plausible does not set any cookies and does not collect any personally identifiable information.
From the IP address and user agent, an anonymous hash that rotates daily is computed; this hash is stored server-side only for the duration of one day. The IP address itself is not persisted. Identifying individual visitors is neither intended nor possible.
Collected: visited pages, referral source (e.g. Google, LinkedIn), browser and device type, country. Clicks on the contact form, telephone/email links, and PDF downloads are counted as anonymous events.
Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in tailoring our web presence to user needs). You may opt out at any time by enabling the “Do Not Track” header in your browser — Plausible respects this setting automatically.
Source code of the analytics software: github.com/plausible/community-edition
6. Contact Form and E-mail Contact
If you contact us via the contact form at contact-en.html or by e-mail, we process the data you submit (name, company, e-mail, message) in order to handle your request. Legal basis: Art. 6 (1) lit. b GDPR (pre-contractual) or Art. 6 (1) lit. f GDPR. The data will be deleted once your request has been completed, unless statutory retention obligations apply (typically: 6 years under Section 257 German Commercial Code (HGB) / 10 years under Section 147 German Fiscal Code (AO)).
7. Data Processing Agreement (Use of DOC.mobile / DOC.project)
If you use our DOC.mobile and DOC.project platforms in production, we process your data exclusively on your behalf and according to your documented instructions. The basis is a separate Data Processing Agreement (DPA) pursuant to Art. 28 GDPR. Hosting takes place in an ISO 27001-certified data centre in Germany. On request we provide our TOMs (technical and organisational measures) and the ISO 27001 certificates.
8. Recipients / Processors
The following categories of recipients receive data:
- Hosting providers based in Germany and operating their data centre in Germany (processors pursuant to Art. 28 GDPR);
- E-mail and newsletter providers (where relevant - currently not in use);
- Tax advisors and auditors within the scope of statutory retention obligations;
- Public authorities within the scope of statutory disclosure obligations.
No data is transferred to third countries outside the EU/EEA.
9. SSL/TLS Encryption
For security reasons this website uses TLS/SSL encryption. You can recognise an encrypted connection by the "https://" in your browser's address bar.
10. Retention Period
We only store personal data for as long as is necessary for the respective purpose or until retention obligations have been fulfilled. Once the purpose no longer applies, the data are deleted or blocked.
11. Data Protection Impact Assessment
We provide a Data Protection Impact Assessment (DPIA) pursuant to Art. 35 GDPR to our clients on request. Feel free to get in touch: service@docby.net.
12. Changes to this Notice
We update this privacy notice whenever legal or functional requirements change. You will always find the current version on this page. Last updated: 2026.