Controller and contact details

The controller for the processing of personal data on this website within the meaning of Art. 4(7) of the General Data Protection Regulation is:

Knights Software Solutions GmbH

Auf dem Grevel 27

53343 Wachtberg

Germany

Represented by the managing directors: Shayan Shahpasand and Idris Nawid

Email: office@knightssoftwaresolutions.de

Commercial register: HRB 26831, Local Court of Bonn (Amtsgericht Bonn)

VAT identification number: DE354513995

Further mandatory disclosures under Section 5 of the German Digital Services Act (Digitale-Dienste-Gesetz, DDG) are set out in our imprint.

We have not appointed a data protection officer, as the statutory conditions requiring us to do so are not met. For any data protection matter and to exercise your rights, please contact office@knightssoftwaresolutions.de.

Scope and principles

This policy explains which personal data we process when you visit this website, for which purposes, and which rights you have. Personal data means any information relating to an identifiable natural person; this includes in particular your device's IP address.

We deliberately keep processing to a minimum. So that you can put the sections below in context, we state up front what this website does not do:

  • We use no web analytics or audience measurement tools, and we embed no tag manager and no advertising pixels. We do not build usage profiles.
  • We load no fonts from external providers. The site renders entirely in fonts already present on your device. Your IP address is therefore never disclosed to a font provider.
  • We embed no maps, videos, social media buttons or review widgets. The links to our social media profiles are ordinary hyperlinks; a connection to the network in question is established only if you click one of them.
  • We offer no forms, no newsletter sign-up and no user accounts. There is nowhere on this website for you to enter data.
  • We use no cookies for analytics or advertising. This is why the two strictly necessary items of local storage described in section 5 require no consent, and why we show you no consent banner.

Accessing the website and server log files

When you access this website, your browser transmits technically necessary information to our server. Without it we could not send you the page you requested. We process:

  • your device's IP address,
  • the date and time of the request,
  • the address requested, together with the request method and the status code of our response,
  • the volume of data transferred,
  • the page you visited previously, if your browser transmits it,
  • the identifier of your browser and operating system,
  • the language preference transmitted by your browser.

Purpose. This processing serves to establish the connection and deliver the page, and to keep our service stable and secure, in particular to detect and defend against attacks. We also use the transmitted language preference to direct you to the German or English version of the site when you open our home page.

Legal basis. Art. 6(1)(f) GDPR. Our legitimate interest lies in providing this website reliably and securely.

Recipients. We use Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany as our hosting and infrastructure provider. It processes the above data solely on our behalf and on our instructions; we have concluded a data processing agreement with it pursuant to Art. 28 GDPR.

Server location. The servers are located exclusively in Germany, in the Nuremberg and Falkenstein data centres. This data is not transferred to any third country outside the European Union.

Retention period. Log files are kept only as long as is necessary to detect and defend against attacks, and are deleted at the latest once that purpose has been served.

Content, images and icons

Content management system

The content of this website — text, images and settings — is maintained in our own content management system, which we operate at strapi.knightssoft.de. When you first open a page, our web server retrieves the content from there; your IP address is not disclosed in the process.

When you navigate within the website or switch language, your browser loads the content it needs directly from that system. In this case your IP address is transmitted to the host of the content management system. The same applies to SVG graphics, in particular logos and icons, which we deliver unaltered — and therefore directly from the content management system — in order to preserve their rendering quality.

We operate the content management system ourselves. It runs on the same infrastructure as this website, namely with Hetzner Online GmbH in the Nuremberg and Falkenstein data centres. This adds no further recipient, and here too no data is transferred to a third country.

Legal basis. Art. 6(1)(f) GDPR; our legitimate interest lies in maintaining our content through a central editorial system.

Image optimisation

Photographs and other raster images are computed and delivered by our own server at the appropriate size and in an efficient format. Your browser connects only to our server for this; no third-party image service is involved.

Icons

For some interface elements we use icons from the freely available "Material Design Icons" collection. These icons are embedded in our application in full and are served exclusively by our own server. Your browser establishes no connection to any third party in order to load them, and in particular none to an icon service outside the European Union.

Information stored on your device

We store two items on your device so that a choice you have made is preserved for your next visit.

Language choice

  • Name: i18n_redirected
  • Type of storage: Cookie
  • Content: Your language choice, i.e. "en" or "de"
  • Purpose: So that opening the home page keeps you in the language version you chose instead of redirecting you again
  • Retention period: 365 days

Light or dark appearance

  • Name: theme
  • Type of storage: Browser local storage
  • Content: Your choice between the light and dark appearance, i.e. "light" or "dark"
  • Purpose: So that the site appears in the appearance you chose and does not briefly flash the wrong one while loading
  • Retention period: Until you delete it through your browser

Legal basis and how to object

Both items remain on your device. They are not transmitted to our server, not evaluated and not passed on to third parties. Neither contains an identifier that would make you recognisable.

Under Section 25(2) no. 2 of the German Telecommunications and Digital Services Data Protection Act (Telekommunikation-Digitale-Dienste-Datenschutz-Gesetz), storage on your device requires no consent where it is strictly necessary for us to provide a service you have expressly requested. Both items meet precisely that condition: they record nothing but a setting you selected yourself. The subsequent processing is based on Art. 6(1)(f) GDPR.

You can delete both items at any time through your browser settings and prevent them from being stored in future. The website remains fully usable; it will simply no longer remember your language and appearance preferences.

Contacting us

There are no contact forms on this website. To get in touch, we provide a button that opens the email program configured on your device with the subject line pre-filled. Clicking it triggers no processing on our side: the message is sent through your own email provider, and we collect no data in the process.

If you send us an email, we process the information it contains — your sender address, your name, the subject and body of your message, and any attachments — solely in order to deal with your enquiry.

Legal basis. Art. 6(1)(b) GDPR where your enquiry concerns the conclusion or performance of a contract, otherwise Art. 6(1)(f) GDPR on the basis of our legitimate interest in responding to enquiries.

Recipients and third-country transfer. We use Google Workspace for our email communication. The provider and processor is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, D04 E5W5, Ireland. We have a data processing agreement with it pursuant to Art. 28 GDPR in the form of the Google Cloud Data Processing Addendum. Google involves companies within its own group in operating the service, including Google LLC based in the United States, so your email may also be transferred to, or made accessible from, the United States.

That transfer relies on the European Commission's adequacy decision for the EU-US Data Privacy Framework, in which Google LLC is a certified participant, and additionally on the European Commission's standard contractual clauses pursuant to Art. 46(2)(c) GDPR. We note that the validity of that adequacy decision is the subject of appeal proceedings pending before the Court of Justice of the European Union. Should it fall away, the standard contractual clauses continue to carry the transfer.

If you wish to avoid a transfer to the United States, you can reach us by post at the address given in section 1 instead.

Retention period. We delete your enquiry once it has been dealt with conclusively and no statutory retention obligation applies. Where your enquiry does not lead to a collaboration, we delete the correspondence no later than 24 months after the last contact. Correspondence of commercial or tax relevance is retained for the period prescribed by law: six years for commercial letters (Section 257(4) German Commercial Code) and eight years for accounting vouchers, ten years for books and annual financial statements (Section 147(3) German Fiscal Code).

Information about employees and authors

This website publishes a photograph of our team and, for blog posts, the name, a profile picture and where applicable the LinkedIn address of the author. This information is additionally embedded in machine-readable form in the page header and made available in a directory at /llms.txt, so that search engines and language models can correctly attribute the authorship of our articles.

Legal basis. Images of our employees are published on the basis of consent under Art. 6(1)(a) GDPR in conjunction with Section 26(2) of the German Federal Data Protection Act. Consent is voluntary and may be withdrawn at any time; the lawfulness of processing carried out before withdrawal is unaffected. Attribution as the author of an article is additionally based on Art. 6(1)(f) GDPR.

Your rights

Under the General Data Protection Regulation you have the following rights, which you may exercise at any time free of charge using the contact details in section 1:

1. Access under Art. 15 GDPR to whether and which personal data we process about you, for which purposes, for how long and to which recipients.

2. Rectification of inaccurate data and completion of incomplete data under Art. 16 GDPR.

3. Erasure under Art. 17 GDPR, where the data is no longer necessary for the stated purposes and no statutory retention obligation applies.

4. Restriction of processing under Art. 18 GDPR, in particular while the accuracy of the data is being verified.

5. Data portability under Art. 20 GDPR for data you have provided to us on the basis of consent or a contract, in a structured, commonly used and machine-readable format.

6. Objection under Art. 21 GDPR to any processing we base on Art. 6(1)(f) GDPR. If you object, we will stop processing the data concerned unless we can demonstrate compelling legitimate grounds that override your interests.

7. Withdrawal of consent under Art. 7(3) GDPR with effect for the future, where we base processing on your consent.

No automated decision-making, including profiling, within the meaning of Art. 22 GDPR takes place on this website.

Right to lodge a complaint with a supervisory authority

Irrespective of the rights above, you may at any time lodge a complaint with a data protection supervisory authority under Art. 77 GDPR if you consider that the processing of your data infringes the General Data Protection Regulation. The competent authority is in particular the one for your place of residence, your place of work, or the place of the alleged infringement.

Given our registered seat in Wachtberg, the authority competent for us is:

Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen

Postfach 20 04 44

40102 Düsseldorf, Germany

Phone: +49 211 38424-0

Website: https://www.ldi.nrw.de

Whether you are obliged to provide data

You are under no obligation to provide us with personal data. The data listed in section 3 is transmitted as a technical necessity when you access this website; without it, a page cannot be delivered. All further information you provide voluntarily, in particular when you send us an email. There is no contractual or statutory requirement to provide data.

Changes to this privacy policy

We update this policy when we change the website technically or when a change in the law requires it. The version available on this page applies.

Last updated: 1 September 2026