1. Controller

The controller responsible for the processing described in this notice is:

Email: This email address is being protected from spambots. You need JavaScript enabled to view it.

This notice applies to this website and the contact options provided on it. Where you open a separately operated service, that provider's own privacy information also applies.

2. Website hosting, server logs and IONOS WebAnalytics

This website is hosted on our behalf by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany.

When you access our website, technical access data is processed. This includes, in particular, the page or file accessed, the date and time of access, the referrer, browser type and version, operating system, device type, and the IP address.

This processing is carried out to provide the website, ensure its security and stability, and detect and investigate misuse, technical disruptions, or security-related incidents.

In addition, we use IONOS WebAnalytics. The statistical analysis is performed exclusively on the basis of server log files. No cookies or browser-side tracking pixel are used for WebAnalytics. According to IONOS, the IP address transmitted when the page is accessed is anonymised immediately and then processed without reference to an identifiable person.

WebAnalytics processes information about the previously visited website, the page or file accessed, the browser and operating system used, the device type, the time of access, and an anonymised IP address. The data is used exclusively for statistical analysis and technical optimisation of our website. We do not combine this data with other data or create personal visitor profiles.

Legal basis: Article 6(1)(f) GDPR. Our legitimate interests are the secure and reliable operation of the website, the detection of technical problems, and the statistical analysis and improvement of our website.

IONOS states that, for the web hosting products we use, IP addresses are anonymised when collected and log data is retained for eight weeks. We do not use server log files to create personal visitor profiles.

According to IONOS, WebAnalytics data is not disclosed to third parties. IONOS also states that visitor data collected in connection with web hosting is not transferred to countries outside the European Union.

Further information is available in the IONOS privacy policy.

3. Strictly necessary session cookie

The website sets one Joomla session cookie containing a random session identifier. It is configured without a fixed expiry and is normally removed when the browser session ends. The cookie is marked Secure and HttpOnly and uses SameSite=Lax.

The cookie is required to operate and protect the Joomla session and website functions such as forms. It is not used for analytics, advertising, or cross-site tracking.

Legal basis: Section 25(2) no. 2 TDDDG for storage or access on your device, and Article 6(1)(f) GDPR for the associated processing. Our legitimate interest is the secure and functional operation of the website.

4. Contact forms and email

If you contact us through a form or by email, we process the information you provide. The contact forms request your name, email address, subject, and message. Depending on your request, we may also process company, licence, system, or support information contained in your message.

We use the data to receive, route, and answer your request, prepare an offer, take steps before entering into a contract, perform a contract, provide support, or handle related legal and administrative matters.

Legal basis: Article 6(1)(b) GDPR where your request concerns a contract or pre-contractual steps; otherwise Article 6(1)(f) GDPR based on our legitimate interest in responding to legitimate business, press, and support enquiries. Article 6(1)(c) GDPR applies where processing is required by law.

The required form fields are necessary so that we can identify and answer your request. If you do not provide them, we may be unable to process the request.

Recipients may include the responsible EnviProt personnel and technical service providers used for website hosting, email delivery, or support, where access is necessary for the stated purposes. We do not disclose contact data for third-party advertising.

Please do not send special-category or otherwise highly sensitive personal data unless it is genuinely necessary for your request.

5. Spam protection with hCaptcha

Our Sales, Support, and Press contact forms use hCaptcha to protect against automated spam and abuse. The hCaptcha service is not loaded during an ordinary page visit. It is requested only when you actively initiate submission of a protected form.

The provider is Intuition Machines, Inc., 1065 SW 8th St #704, Miami, FL 33130, USA. Depending on the verification, hCaptcha may process technical and interaction data such as your IP address, date and time, browser and device information, operating system, mouse, keyboard or touch interactions, and the challenge response.

Purpose and legal basis: preventing automated submissions, protecting the availability and integrity of the forms, and detecting abuse. The personal-data processing is based on Article 6(1)(f) GDPR. Storage of or access to information on your device is limited to the anti-abuse function required for the form submission you requested and is based on Section 25(2) no. 2 TDDDG.

Data may be processed in the United States. Intuition Machines states that it participates in the EU-U.S. Data Privacy Framework and that Standard Contractual Clauses are incorporated into its data-processing terms for EU data.

We use the verification result only for the immediate form submission. Intuition Machines states that it minimises collection and retention and does not maintain long-term data about end users of the service.

You can avoid hCaptcha by contacting us directly at This email address is being protected from spambots. You need JavaScript enabled to view it..

Further information: hCaptcha Privacy Policy and hCaptcha GDPR information.

6. Online purchases through FastSpring

Licence purchase links lead to a checkout operated by Bright Market, LLC, doing business as FastSpring. FastSpring acts as the independent ecommerce reseller and merchant of record for the checkout and payment transaction. No FastSpring checkout resources are loaded merely because you visit an EnviProt page; the connection is made when you activate a purchase link.

FastSpring processes the information required for checkout, payment, tax handling, fraud prevention, order administration, and customer service under its own privacy notice. This may include identity and contact details, billing address, order and product details, payment information, IP address, device and usage information, and tax-related information.

EnviProt receives the order and licence information needed to provide the purchased product, issue or manage licences, provide support, maintain business records, and handle contractual or legal claims. Depending on the order, this may include your name, company, contact and billing details, country, product and licence quantity, order date, and payment or order status. We do not receive your complete credit-card or bank-account details.

Legal basis for EnviProt's processing: Article 6(1)(b) GDPR for contract performance, Article 6(1)(c) GDPR for tax and accounting obligations, and Article 6(1)(f) GDPR for fraud prevention and the establishment, exercise, or defence of legal claims.

FastSpring is responsible for its own checkout environment, recipients, international transfers, and retention. See the FastSpring Privacy Policy before completing a purchase.

7. External links and linked services

This website contains ordinary links to external websites and separately operated services, including FastSpring, VirusTotal, YouTube, ENERGY STAR, and the support portal. Displaying a normal link does not by itself establish a connection to the destination. When you activate a link, the destination provider receives the technical data required to deliver its site and applies its own privacy information.

8. Retention

We keep personal data only for as long as it is needed for the purpose for which it was collected. Contact enquiries are normally deleted when the matter has been finally resolved, unless the data is still required for a contract, support history, legal claims, or a statutory retention duty.

Order, licence, invoice, payment-status, and business-correspondence data may be retained for the applicable commercial and tax retention periods. During a mandatory retention period, processing is restricted to the relevant legal or evidentiary purpose. Data is deleted or anonymised when the purpose and any applicable retention or limitation periods have ended.

Provider-specific retention periods are described in the relevant provider's privacy information. The hosting-log period is described in section 2, and hCaptcha processing in section 5.

9. Your rights

Subject to the legal requirements, you may have the right to:

• obtain information about and access to your personal data (Article 15 GDPR);
• have inaccurate or incomplete data corrected (Article 16 GDPR);
• request erasure (Article 17 GDPR);
• request restriction of processing (Article 18 GDPR);
• receive data you provided in a portable format where Article 20 GDPR applies;
• object to processing based on legitimate interests (Article 21 GDPR); and
• withdraw consent at any time for the future where processing is based on consent (Article 7(3) GDPR).

To exercise your rights, contact This email address is being protected from spambots. You need JavaScript enabled to view it.. We may request information reasonably necessary to verify your identity. These rights may be limited where an applicable law permits or requires continued processing.

EnviProt does not use this website to make decisions based solely on automated processing that produce legal or similarly significant effects. Depending on your location, additional statutory privacy rights may apply.

10. Complaints

You have the right to lodge a complaint with a data protection supervisory authority, in particular in the EU Member State of your habitual residence, place of work, or the place of the alleged infringement.

The supervisory authority responsible for EnviProt's location is the State Commissioner for Data Protection and Freedom of Information Baden-Württemberg.

11. Updates to this notice

We update this notice when the website, its services, or the applicable legal requirements change. The current version is published on this page and identified by the date shown above.