Privacy policy.

Last updated: 13 October 2026

1. Data controller

Email: info@axaiasoft.com

2. Visiting the website and hosting

This website is hosted by united-domains GmbH, Gautinger Straße 10, 82319 Starnberg, Germany. When you visit it, connection data needed for technical purposes is processed. This includes your IP address, the time of your request, the requested address, the amount of data transferred, and device and browser information provided by your browser. Depending on the server configuration, this information may be recorded in server logs.

This data is processed to deliver the website, resolve errors, and protect against attacks. The legal basis is Article 6(1)(f) of the General Data Protection Regulation (GDPR). My legitimate interest is the secure and reliable operation of this personal website. The hosting provider receives this technical data and processes it as part of providing the hosting service.

Server log retention depends on the settings that apply to the hosting package and the necessary operational and security purposes. In the event of a specific security incident, relevant data may be needed until the incident has been resolved. You can request details about the retention period for the hosting package using the contact information above. Further information is available in the united-domains privacy notice.

3. Essential cookies and browser storage

This website uses the session cookie axaiasoft_session for signing in, accessing the protected project area, and protecting forms. It contains a random identifier. Associated information, such as your login status and security values for forms, is stored on the server. New visitors to the public home page, legal notice, and this privacy policy do not receive this session cookie. An existing session may also continue to be used on those pages.

The cookie is a session cookie and is normally removed when you close your browser. Your login expires after 30 minutes of inactivity, or after eight hours at the latest. Signing out ends the session. Technical session files are subsequently removed in accordance with the hosting provider's cleanup process.

When you select “Got it” in the cookie notice, this website stores a simple notice dismissal flag in your browser's session storage. This remembers your request to hide the notice during the current tab session. The flag contains no personal identifier, is not sent to the server, and is normally removed when you close the tab. You can reopen the notice at any time using “Cookie information” in the footer. If browser storage is unavailable, you can still dismiss the notice, but your choice may not be remembered when you move to another page.

These functions are necessary for the protected access you request and for secure forms. The identifier is stored on the basis of Section 25(2), point 2, of the German Telecommunications Digital Services Data Protection Act (TDDDG). The legal basis for the associated processing of personal data is Article 6(1)(f) GDPR, reflecting my legitimate interest in secure access management. If you block cookies, you cannot sign in.

4. User accounts and protected projects

Accounts are created by the administrator. The stored data includes your name, email address, permissions, activation status, account creation time, and a password verification value. Passwords are stored as secure hashes. There is no public registration, and this website does not send automated emails.

Account data is used to grant and manage access to the private project area. The legal basis is Article 6(1)(f) GDPR, reflecting my legitimate interest in giving selected people access and preventing unauthorised access. The administrator enters this data when granting access. It is necessary to use the account. The public pages can also be visited without an account.

Account data is stored until the account is deleted. Project content is maintained by the administrator and remains stored until it is deleted. Where this content includes personal data, it is shown only to authorised users. Deletions take effect immediately in the application database. Any backups held by the hosting provider are subject to that provider's backup and deletion cycles.

The administrator can upload static project websites. Their pages, scripts, images and other assets are stored in a protected server folder. The same project permissions apply to these files. Replacing or removing a website, or deleting its project, removes the previous uploaded files from the application storage. Hosting backups may retain them according to the provider's backup cycles.

To display a project website separately from the main application, the server creates a temporary random access key linked to the existing signed-in session, project and uploaded version. This key appears in the website file addresses and may therefore be included in hosting logs. It does not reveal your session identifier. Access ends when the session ends or your account loses permission. Access records are cleaned up after they are more than eight hours old when a new viewer key is created.

5. Protection against repeated login attempts

To limit repeated failed login attempts, the application processes counters, timestamps, and verification values derived from the email address and IP address using a secret key. Email addresses and IP addresses are not stored as plain text in these counters. The verification values are pseudonymised, not anonymous.

The counters expire 24 hours after their last update. Expired entries are deleted on the next login attempt. The legal basis is Article 6(1)(f) GDPR, reflecting my legitimate interest in protecting accounts and private projects.

6. Contact by email

If you email me, I process your sender address, the content of your message, and any other information you provide in order to respond to your enquiry. The email link on this website simply opens your own email application. This website has no contact form.

The legal basis is Article 6(1)(f) GDPR, reflecting my legitimate interest in responding to your message. The email service providers used to send and receive messages may be recipients of this data. Correspondence is deleted once the enquiry has been fully resolved and there are no other legitimate reasons for retention or statutory obligations.

7. Integrated services

This website does not use analytics tools, advertising trackers, or fonts loaded from external services. Social network content is not embedded automatically. External project links connect to the respective website only when you click them. Data processing on those websites is governed by their own privacy notices.

This application does not carry out profiling or automated decision making that produces legal or similarly significant effects.

8. Your rights

Subject to the applicable legal conditions, you have the right to access, rectification, erasure, and restriction of processing. Where the conditions are met, you also have the right to data portability. Please send your request to info@axaiasoft.com.

Right to object: Where processing is based on Article 6(1)(f) GDPR, you may object at any time on grounds relating to your particular situation. The data will then no longer be processed unless there are overriding compelling legitimate grounds or the processing is necessary for the establishment, exercise, or defence of legal claims.

You may lodge a complaint with a data protection supervisory authority. In Schleswig-Holstein, you can contact the state data protection commissioner at the Unabhängiges Landeszentrum für Datenschutz Schleswig-Holstein (Independent Centre for Data Protection Schleswig-Holstein), Holstenstraße 98, 24103 Kiel, Germany. Email: mail@datenschutzzentrum.de. Website: datenschutzzentrum.de.