Privacy Policy

1. Controller

2. Cookies, local features and access protection

Our information pages use no analytics or marketing cookies, advertising pixels or embedded social media plugins. We do not use Google Analytics. Our own audience statistics operate on the server; see section 4.

After a successful login to the private statistics area, mt_stats_session stores a signed access token. It is limited to the /stats path, expires after 30 days and is deleted when you log out. The additional mt_stats_exclude cookie marks the operator's browser for up to one year so that their own visits are not counted. Both cookies use Secure, HttpOnly and SameSite=Strict. Ordinary visitors do not receive these operator cookies. This storage supports the statistics service expressly requested by its user (section 25(2)(2) of the German TDDDG); the related processing serves secure access and reliable internal reporting under Article 6(1)(f) GDPR.

Failed statistics logins are limited using a separate security database. It stores an HMAC-protected identifier of the connection IP address, the number and timing of failed attempts and the end of a temporary block. The full IP address is not stored in this database. Six failed attempts trigger a 15-minute block. Entries whose initial timestamp is more than 30 minutes old are deleted at the next login attempt; if no further attempts occur, technical deletion can take place later. At most 500 entries are retained. These records are not used for audience statistics. Processing is based on Article 6(1)(f) GDPR and our legitimate interest in preventing unauthorised access.

Interactive tools

The digital transformation check processes answers and results in your browser. They are not submitted to the web server through a form. A prepared email is transmitted only if you send it yourself.

In the version of “Roter Faden” provided here, cases and drafts also remain in your browser. If you enable local saving, an unencrypted copy is placed in this browser profile's Local Storage. It remains until you delete it in the tool, disable saving or clear the website's browser data. Other people with access to the same browser profile can read it. When you request a language change, the case and drafts are temporarily passed through Session Storage and removed after the destination page takes them over; otherwise this storage ends with the browser session at the latest. These accesses support the functions you requested (section 25(2)(2) TDDDG), rather than audience measurement. Server-side AI analysis is not enabled in the version currently hosted at STRATO; your inputs are not sent to an AI provider for this purpose.

3. Hosting and technical connection data

This website is hosted by STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany. The website and its own statistics run on STRATO web hosting in Germany. As our hosting provider, STRATO processes connection data needed to deliver and secure the website, including IP address, access time, requested page or file, HTTP status, transferred data volume, referrer URL, browser and operating system details.

The purposes are website delivery, technical troubleshooting, and detecting and preventing attacks. The legal basis is Article 6(1)(f) GDPR and our legitimate interest in secure, reliable operation. STRATO receives the data as our hosting provider within the scope of processing on our behalf under Article 28 GDPR.

STRATO states that visitor IP addresses are stored for a maximum of seven days for detecting and preventing attacks. Separately, STRATO makes access logs available in the customer account for the preceding six weeks, and error logs for the preceding five days with up to 100,000 directly displayed entries. We do not use these logs to create an additional personal visitor register or archive them for our own marketing. Our own statistics described in section 4 are separate.

Provider information: STRATO privacy information, access and error logs and IP retention and data processing (German).

4. Proprietary server-side audience statistics

MarkeTekture counts visits on the server without analytics cookies, Local Storage or other visitor identifiers stored on your device. For known HTML pages and internally triggered error requests, we store aggregated daily values: calendar day, a restricted page path or error category, a broad source category derived from the referrer or known campaign parameters, device category, bot classification, HTTP status and view count. Free-text search terms, complete referrer URLs and full URL parameters are not stored in these statistics. New requests are recorded with the country “unknown”, without country identification; older daily records collected before the hosting change may still contain country codes.

To estimate unique visits and repeat views within a day, we create a pseudonymous HMAC hash from the calendar day, automatically transmitted IP address and browser identifier. The full IP address and browser identifier are not stored in the statistics database. The identifier changes each calendar day. We do not use it to link visits across days or create individual usage profiles. Hashes are used for the current and two preceding calendar days. Older hashes are deleted at the next counted visit; if no further visits occur, technical deletion may take place later.

Aggregated daily totals contain no visitor identifier. Values older than 400 days are automatically deleted at the next counted visit. Data is protected within our STRATO web hosting and the reporting area requires a password. It is not linked to contact or customer data or shared with external analytics services.

The purposes are basic performance measurement, understanding popular content and source channels, and improving the website. Processing is based on Article 6(1)(f) GDPR and our legitimate interest in evaluating our own offering with minimal data. Your right to object is explained in section 8.

5. Contact by email

The contact form does not transmit any information to this website and does not store anything. Selecting the button merely opens the email application configured on the user’s device with a prepared message. The information contained in that message is processed only if the email is actually sent.

Processing is carried out to handle the enquiry and communicate with the sender. Where a contract or pre-contractual measures are concerned, the legal basis is Article 6(1)(b) GDPR; otherwise, the legal basis is Article 6(1)(f) GDPR. The legitimate interest is the appropriate handling of business enquiries. Recipients may include the email service providers used by the respective parties.

Enquiry data is deleted once the enquiry has been fully dealt with and no contractual or statutory retention obligations remain.

6. Link to Instagram

The website contains only a standard link to MarkeTekture’s Instagram profile. No Instagram content is embedded. Simply visiting this website therefore does not establish a connection to Instagram. Instagram is opened only after the link is selected; from that point onward, the privacy policy of the provider operating Instagram applies.

7. Provision of data and automated decision-making

Apart from technically necessary connection data, no personal data has to be provided in order to visit the website. Information provided in an email is voluntary; without sufficient contact details, however, it may not be possible to respond to an enquiry. No automated decision-making or profiling takes place.

8. Rights of data subjects

Subject to the applicable legal conditions, you have rights of access (Article 15 GDPR), rectification (Article 16), erasure (Article 17), restriction of processing (Article 18) and data portability (Article 20).

Right to object under Article 21 GDPR: Where we process personal data under Article 6(1)(f) GDPR, you may object at any time on grounds relating to your particular situation. We will stop that processing unless we demonstrate compelling overriding legitimate grounds or processing is necessary for establishing, exercising or defending legal claims.

You can exercise your rights by contacting info (at) marketekture.de. Please provide only the information needed to handle the request. We do not retain additional identification data solely in anticipation of possible future access requests. As a rule, we cannot attribute already aggregated statistics without visitor identifiers to an individual.

9. Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority. The authority with particular responsibility for MarkeTekture is the State Commissioner for Data Protection and Freedom of Information Baden-Württemberg, Heilbronner Straße 35, 70191 Stuttgart, Germany.

Submit a complaint to the State Commissioner for Data Protection and Freedom of Information Baden-Württemberg (German-language website)

10. Last updated

24 October 2026