Legal

Privacy Policy

How Aegis SafeForge UG (haftungsbeschränkt) processes personal data on this website, under the General Data Protection Regulation (GDPR).

Last updated: 14 November 2026

1. Controller

Aegis SafeForge UG (haftungsbeschränkt) Heiligenbergstr. 36 34134 Kassel Germany

Managing directorMuhammad Aashir

Emailcontact@aegissafeforge.de

Phone+49 1521 1895465

We have not appointed a data protection officer because the legal requirements (Section 38 BDSG) are not met. Please send privacy requests to the email address above.

2. Hosting and server logs

This website is run by an external hosting provider. When you visit, technically necessary data is processed: IP address, date and time, requested page, referrer, browser and operating system. This is required to deliver the website and keep it stable and secure (Art. 6(1)(f) GDPR); these logs are kept only for a limited period.

3. Audience measurement

We evaluate page views in aggregated form with a privacy-friendly analytics feature of our hosting provider. It sets no cookies, builds no cross-device profiles and does not track visitors across websites. The legal basis is our legitimate interest in a website that meets visitors’ needs (Art. 6(1)(f) GDPR).

4. Contact form and enquiries

When you write to us through the contact form, the platform walkthrough access form or by email, we process your name, email address, company, role, selected product and plan, and your message to answer the enquiry (Art. 6(1)(b) GDPR for pre-contractual enquiries, otherwise Art. 6(1)(f)).

Form submissions are delivered to our mailbox through an email delivery service. To prevent abuse, we store the IP address briefly (about ten minutes) to limit the number of requests per period (Art. 6(1)(f) GDPR).

We delete enquiries once they are settled and no statutory retention obligation applies.

5. Newsletter and updates

The newsletter uses double opt-in: after signing up you receive an email with a confirmation link, and we only send issues once you have confirmed. Unconfirmed sign-ups are not used.

We store your email address, optionally your name, your language, where you signed up, and when you signed up and confirmed, as proof of consent. The legal basis is your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time through the unsubscribe link in every issue or by email. After you unsubscribe, we no longer use the address for the newsletter.

6. Appointment booking

To book a live walkthrough we link to an external scheduling service. Only when you open the link does the provider process your details, under its own privacy policy; we receive the booking details to hold the meeting (Art. 6(1)(b) GDPR).

7. Optional automatic translation

When you select automatic translation, our server sends published website text to an external translation service. Form inputs, private engineering data and legal pages are excluded. Translations are cached temporarily. The reviewed English and German pages remain available.

8. Storage in your browser

We use no advertising or tracking cookies. If you switch the colour scheme, your choice is stored locally in your browser (localStorage). This storage is strictly necessary for the function you requested (Section 25 (2) no. 2 TDDDG). See the cookie policy for details.

Fonts are served from our own server; nothing is requested from Google Fonts. Links to LinkedIn, YouTube or X are plain links without embedded plugins.

9. Recipients and storage

For hosting, database and email delivery we use carefully selected service providers that process data only on our behalf. Some are based in the USA; transfers rely on the EU-US Data Privacy Framework or the European Commission’s standard contractual clauses.

Data from forms and newsletter sign-ups stays under our control: we can view, correct and delete it at any time, and do so on request.

10. Platform and pilot data

This policy covers the public website. For data that customers and design partners process in ASF Core or the CRA Compliance Cockpit, we conclude a separate data processing agreement (Art. 28 GDPR), available on request.

11. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to withdraw consent with effect for the future (Art. 7(3)).

Right to object: where we process data on the basis of legitimate interests (Art. 6(1)(f) GDPR), you can object at any time on grounds relating to your particular situation (Art. 21 GDPR).

You can lodge a complaint with a data protection supervisory authority. The authority responsible for us is: Der Hessische Beauftragte für Datenschutz und Informationsfreiheit, Gustav-Stresemann-Ring 1, 65189 Wiesbaden.