Privacy Policy

The controller responsible for data processing on this website within the meaning of the GDPR is:

This website is served as a static site. When pages are accessed, the hosting provider automatically collects server log files for technical reasons. These include the date and time of the request, the URL accessed, the amount of data transferred, the browser type and version, and the anonymised IP address of the requesting device.

This data is processed solely to ensure fault-free operation and is automatically deleted after a maximum of 30 days. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in the technical provision of the website).

We use cookies and comparable technologies (localStorage). Strictly necessary storage takes place without consent on the basis of § 25 (2) no. 2 TDDDG. Everything else — in particular our web and product analytics — is only loaded after you have explicitly agreed in the cookie banner (§ 25 (1) TDDDG in conjunction with Art. 6(1)(a) GDPR).

We distinguish three categories:

• Strictly necessary: your colour scheme preference (light/dark mode), the spam protection on our forms, and storing your cookie decision. Without this storage the site does not work as you requested — it cannot be switched off and requires no consent.
• Analytics: web and product analytics with PostHog (see section 4). Loaded only after you consent.
• Marketing: reserved for future services such as a chat assistant. No service is currently active in this category; nothing is loaded.

theme (localStorage)

Your colour scheme preference. Strictly necessary. Stored until you delete it.

cc_cookie (cookie)

Your cookie decision including timestamp and version. Strictly necessary. 12 months.

ph_… (cookie + localStorage)

PostHog web and product analytics. Only with your consent. 12 months.

We store your decision exclusively in your browser, in a cookie named “cc_cookie”; it is not transmitted to our servers. We record the time of the decision, the version of the consent, the language you selected, and the categories you chose. If we change the services we use, your previous consent becomes invalid and we will ask you again.

You can withdraw or change your consent at any time with effect for the future — via the “Cookie settings” link in the footer of every page. If you withdraw your analytics consent, we disable PostHog immediately and delete the associated cookies and localStorage entries from your browser.

Open cookie settings

After you have given your consent, we use PostHog for web and product analytics. The provider is PostHog, Inc., 2261 Market Street, San Francisco, CA 94114, USA. Your data is processed exclusively in PostHog's EU Cloud with its data centre in Frankfurt am Main, Germany. This is based on a data processing agreement in accordance with Art. 28 GDPR.

The following is collected: the page accessed (URL, page title, referrer), the time of access, browser and device type, screen resolution, language setting, clicks and mouse movements on interactive elements (used, among other things, to build heatmaps), web performance metrics (Web Vitals), and — where we run surveys — your responses to them. Your IP address is discarded by PostHog and not stored.

No session recording (session replay) takes place. We do not create person profiles, do not combine the data with other data sources, and do not pass it on to third parties.

To recognise your browser, PostHog stores a randomly generated identifier in a cookie (“ph_…”) and in localStorage. Storage period: 12 months.

The legal basis for storing and reading information on your device is § 25 (1) TDDDG; the legal basis for the subsequent processing is your consent under Art. 6(1)(a) GDPR. Without your consent, the PostHog script is not loaded and no connection to PostHog servers is established.

You can withdraw your consent at any time via the cookie settings in the footer. Withdrawal takes effect for the future; the lawfulness of processing carried out up to that point remains unaffected.

Open cookie settings

Further information: posthog.com/privacy and posthog.com/dpa

When you use the contact form on this website, the data you provide (name, email address, company, role, and message) is transmitted to and stored by our service provider Brevo.

Brevo (Sendinblue SAS, 55 rue d'Amsterdam, 75008 Paris, France) is a European email service provider with servers in the EU. Data processing is carried out on the basis of a data processing agreement in accordance with Art. 28 GDPR. The legal basis for processing is Art. 6(1)(b) GDPR (contract initiation) or Art. 6(1)(f) GDPR (legitimate interest in responding to enquiries).

Your data is used exclusively for processing your enquiry and is not used for advertising purposes without your explicit consent. You can object to the storage of your data at any time, unless statutory retention obligations apply.

If you subscribe to our newsletter, we process your email address on the basis of your consent in accordance with Art. 6(1)(a) GDPR. Delivery is handled by Brevo (see section 5). Subscription uses a double opt-in procedure: after signing up, you receive an email in which you confirm your subscription. This ensures that no one can sign up using someone else's email address.

You can unsubscribe from the newsletter at any time. Every newsletter email contains an unsubscribe link. After withdrawing your consent, your data will be deleted from the mailing list.

To protect against automated requests (spam), we use Friendly Captcha by Friendly Captcha GmbH, Nymphenburger Straße 86, 80636 Munich, Germany.

Friendly Captcha uses a server-side proof-of-work process: your browser solves a computational task without requiring any user click or interaction. No cookies are set, no user behaviour is analysed, and no data is transferred to servers outside the EU. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in protection against misuse).

Further information: friendly-captcha.com/privacy

This website contains links to the application at app.tramoria.com. Once you visit this external site, its own privacy policy applies. We have no influence over third-party data processing.

You have the following rights regarding your personal data:

• Right of access (Art. 15 GDPR)
• Right to rectification of inaccurate data (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object to processing (Art. 21 GDPR)
• Right to withdraw consent at any time (Art. 7(3) GDPR)

To exercise your rights, please contact: kontakt@tramoria.de

You also have the right to lodge a complaint with a data protection supervisory authority. The competent authority for Tramoria GmbH is the Hessian Commissioner for Data Protection and Freedom of Information (HBDI), P.O. Box 3163, 65021 Wiesbaden, Germany.

For security reasons and to protect the transmission of confidential content – such as the enquiries you send us – this website uses SSL/TLS encryption. You can recognise an encrypted connection by the fact that the browser's address bar changes from “http://” to “https://” and by the lock symbol in your browser bar. When encryption is active, the data you transmit to us cannot be read by third parties.

This privacy policy is currently valid. Further development of our website or changes in legal or regulatory requirements may make it necessary to amend this policy. The current version is always available on this page.