Privacy policy
1. Scope
This policy applies to the websites of CIVCNCT and Bürgerpilot: civcnct.com, civcnct.ch, buergerpilot.de, buergerpilot.at, buergerpilot.ch and buergerpilot.eu, and to the domains that redirect to these websites. The websites give information about the services Bürgerpilot and CIVCNCT. The application runs as a beta at its own addresses, for example app.buergerpilot.de and app.civcnct.com. The application has its own privacy policy. The page How we protect your data describes how the application is built.
2. Controller
Innovius UG (haftungsbeschränkt)Elbestraße 1A
14513 Teltow
Germany
Represented by the managing director, Robert Boehme.
Email for privacy questions: privacy@civcnct.com
3. In short
- This website sets no cookies and stores nothing on your device.
- It uses no tracking and no analytics services.
- It contains no JavaScript. It loads no fonts, scripts or images from other providers.
- Our web server does not store IP addresses in its logs.
4. When you visit the website
When you open a page, your browser connects to our server. To send the page to your browser, the server must process your IP address. Your browser also sends details such as the requested address and the browser type.
For each request, our web server writes a log entry with these details only: time, requested domain, request method, requested path without parameters, status code and amount of data sent. The entry contains no IP address, no browser identifier and no referring page.
We use these logs to find errors and attacks and to keep the website running. The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is a secure and stable website. Because these entries contain no personal data, the server overwrites them on a rolling basis (rotation by size).
On buergerpilot.de, buergerpilot.at, buergerpilot.ch and civcnct.com, our web server passes some requests on to the application. These are requests to /mcp and /api and to the files with which AI assistants find the application. For these requests it writes the same log entry. It passes your IP address on to the application. The privacy policy of the application applies to the processing in the application.
The encrypted connection (TLS) ends at a reverse proxy at the edge of our network, which Innovius UG (haftungsbeschränkt) operates itself. To defend against attacks, this reverse proxy logs each connection with the IP address and the time. These logs stay on our own systems, and we delete them after 31 days at the latest. The legal basis is Art. 6(1)(f) GDPR (our legitimate interest in secure operation). The internal router behind it keeps no access logs.
5. Hosting
The website runs on servers that Innovius UG (haftungsbeschränkt) operates itself. The servers are in Germany. For this website we use no external hosting provider, no content delivery network and no analytics service.
6. No cookies, no tracking
This website sets no cookies. It does not access information on your device beyond what is necessary to show the page. We use no tracking, no audience measurement, no advertising and no social media plugins. All files of the website (texts, styles, images) are on our own server.
7. Contact by email
When you send us an email, we process your email address, your message and the details you give us. We use them only to answer your request. The legal basis is Art. 6(1)(f) GDPR (our legitimate interest in answering requests) and, if your request aims at a contract, Art. 6(1)(b) GDPR. We delete the messages when the request is complete and no legal retention period applies.
Emails to addresses @civcnct.com arrive on a mail server that Innovius UG (haftungsbeschränkt) operates itself. We answer from an address @innovius.ai. Outgoing emails pass through the mail delivery service SMTP2GO, which processes them on our behalf (Art. 28 GDPR). SMTP2GO is based in New Zealand; the European Commission has found that New Zealand ensures an adequate level of data protection (Art. 45 GDPR).
8. Recipients and third countries
We do not pass data from visits to this website to third parties. We do not transfer such data to countries outside the EU and the EEA.
9. Your rights
Under the GDPR you have the right to:
- access to your data (Art. 15 GDPR),
- rectification (Art. 16 GDPR),
- erasure (Art. 17 GDPR),
- restriction of processing (Art. 18 GDPR),
- data portability (Art. 20 GDPR),
- object to processing based on Art. 6(1)(f) GDPR (Art. 21 GDPR).
Write to privacy@civcnct.com. Our web server stores no IP addresses, so we usually cannot link log entries to a person.
10. Right to lodge a complaint
You can lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), in particular in the member state of your habitual residence, your place of work or the place of the alleged infringement. The authority responsible for us, at our establishment in Teltow, is: Die Landesbeauftragte für den Datenschutz und für das Recht auf Akteneinsicht Brandenburg, Stahnsdorfer Damm 77, 14532 Kleinmachnow, Germany, www.lda.brandenburg.de.
11. Changes
We update this policy when the website or the law changes. The version published here applies.