Privacy policy

Last updated: 22 October 2026

1. Controller

The controller responsible for data processing on this website (excalitract.com) is:

Represented by the managing director: Raphael J. N. Hettich, M. Sc.
Phone: +49 721 61932916
Email: kontakt@consiliari-software.de

2. Data protection officer

3. General principles

We process personal data only within the scope of the statutory provisions, in particular the General Data Protection Regulation (GDPR, German: DSGVO), the German Federal Data Protection Act (BDSG) and the German Telecommunications Digital Services Data Protection Act (TDDDG). This policy covers visits to this website. The processing of documents in the Excalitract application is governed by the contracts concluded with our customers, including the data processing agreement.

4. Your rights

Under the GDPR, you have the following rights:

• Access (Art. 15) to the data stored about you
• Rectification (Art. 16) of inaccurate data
• Erasure (Art. 17)
• Restriction of processing (Art. 18)
• Data portability (Art. 20)
• Withdrawal of consent given (Art. 7(3)) with effect for the future
• Objection (Art. 21) to processing based on legitimate interests
• Complaint to a supervisory authority (Art. 77)

The competent supervisory authority is the State Commissioner for Data Protection and Freedom of Information Baden-Württemberg (Landesbeauftragter für den Datenschutz und die Informationsfreiheit Baden-Württemberg), Lautenschlagerstraße 20, 70173 Stuttgart. To exercise your rights, an informal message to dsb@consiliari-software.de is sufficient.

5. Processing when you visit this website

5.1 Server log files

When you access the website, information transmitted by your browser is processed automatically: IP address, date and time of access, amount of data transferred, referrer URL, and browser and operating system.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in the stability and security of the website).
Retention period: a maximum of 14 days, after which the data is deleted or anonymized.

5.2 Hosting

The website is operated on servers of Hetzner Online GmbH, Industriestraße 25, 91710 Gunzenhausen, in data centers in Germany. A data processing agreement pursuant to Art. 28 GDPR is in place with Hetzner.

Legal basis: Art. 6(1)(f) GDPR.

5.3 TLS encryption

Transmission between your browser and our server is TLS-encrypted (recognizable by “https://” in the address bar).

5.4 Audience measurement with Plausible Analytics

We use an instance of the cookie-free analytics service Plausible Analytics operated by the Consiliari group. No cookies are set, no IP addresses are stored permanently and no personal data is passed on to third parties. Only aggregated data such as page views, referrers, country and device type is evaluated; individual visitors are not recognized.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in statistical analysis to improve our website). Consent under § 25 TDDDG is not required, as no information is stored in or read from your terminal equipment.

5.5 Demo requests and contacting us

If you contact us via the demo form or by email, we process the information you provide (name, company, email address, optionally phone number, details on document types and volume, and your message) in order to handle your request and arrange a demo appointment. The information is stored on our servers in Germany and forwarded by email to the responsible team.

Legal basis: Art. 6(1)(b) GDPR (steps prior to entering into a contract) and your consent under Art. 6(1)(a) GDPR, which you can withdraw at any time.
Retention period: until your request has been fully dealt with, plus statutory retention periods.

6. No automated individual decision-making

No automated decision-making, including profiling within the meaning of Art. 22 GDPR, takes place on this website.

7. Changes to this privacy policy

We update this privacy policy when the website or the legal requirements change. The version published here at any given time applies.