Privacy policy

Last updated: October 2026

The German version of this page prevails.

1. Controller

SemanticWorks GmbH
Langgasse 28A
79291 Merdingen
Represented by: Dr.-Ing. Björn Müller, Sven Hodapp
Phone: +49 7668 2009047
Email: info@semanticworks.de

2. Data protection officer

We have voluntarily appointed a company data protection officer. You can reach our data protection officer at:

Data protection officer
SemanticWorks GmbH
Email: datenschutz@semanticworks.de

3. SSL/TLS encryption

For security reasons and to protect the transmission of personal data, this website uses SSL/TLS encryption. You can recognise an encrypted connection by the padlock symbol in the browser bar and by the address bar changing from “http://” to “https://”.

4. Access data / website analytics

When you visit our website, we automatically record the following data:

• Page requested (path)
• Time of access (rounded to the hour)
• Anonymised visitor identifier (hashed, truncated IP address with a daily changing salt – no matching across days is possible)
• Browser category (not the full user agent)
• Operating system category (not the full user agent)
• Referring domain (not the full URL)
• Country and city (derived from the IP address by means of a locally stored geolocation database; the IP address itself is not stored)
• Preferred language (primary language tag from the Accept-Language header)
• Traffic source (classified as direct access, search engine, social network or referral)
• UTM parameters (utm_source, utm_medium, utm_campaign, utm_content), if present in the URL

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in ensuring trouble-free operation and improving our offering).

Storage period: The raw data is deleted automatically after 90 days. The daily salt is deleted after 24 hours, so no matching across days is possible.

Geolocation (GeoIP)

To determine the approximate location (country and city) we use the MaxMind GeoLite2 database, which is stored locally on our server. The IP address is used for the location lookup only at the time of access and is anonymised immediately afterwards. The IP address is not transmitted to MaxMind or any other third party.

Session duration (engagement measurement)

We measure the active time spent on our website by means of the browser’s Page Visibility API. When you leave the page, the measured duration is sent to our server via sendBeacon. The following is stored:

• Page requested (path)
• Duration in seconds (capped at 1,800 seconds)
• Time (rounded to the hour)
• Anonymised visitor identifier (as above)

Storage period: The data is deleted automatically after 90 days.

No cookies / no access to end devices

No cookies, no localStorage/sessionStorage and no external resources are used. No access to end devices within the meaning of § 25 TDDDG takes place. A cookie banner is therefore not required.

5. Contacting us

If you contact us by email or telephone, the data you provide is processed to handle your enquiry.

If you contact us through the “Book a demo” form on our website, we process your name, your email address, your company name, the origin of your visit (campaign parameters) and, if you provide it, your message. The enquiry is stored in the website’s database and sent to our team’s mailbox.

Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures) for enquiries through the “Book a demo” form and for enquiries aimed at concluding a contract, otherwise Art. 6(1)(f) GDPR (legitimate interest).

Storage period: Your enquiry and the related data are deleted as soon as the purpose of the processing ceases and no statutory retention obligations prevent it (as a rule 6 months after the enquiry is closed, unless a contractual relationship arises).

6. Recipients / processors

Your data is in principle processed internally. The following service providers are engaged as processors pursuant to Art. 28 GDPR:

Hosting

Hetzner Online GmbH
Industriestr. 25, 91710 Gunzenhausen, Germany
Data centre: Nuremberg, Germany
A data processing agreement (DPA) pursuant to Art. 28 GDPR has been concluded.

Email delivery

To send the notification of an enquiry to our team, we use the following SMTP service provider:
Heinlein Hosting GmbH (mailbox.org)
Schwedter Str. 9/9a, 10119 Berlin, Germany
A data processing agreement (DPA) pursuant to Art. 28 GDPR has been concluded. The provider receives access to the details of the enquiry (name, email address, company name, message) solely for the purpose of sending the email.

No data is transferred to third countries. All data is processed exclusively on servers in Germany or the EU.

7. Your rights

You have the following rights regarding your personal data:

• Access (Art. 15 GDPR)
• Rectification (Art. 16 GDPR)
• Erasure (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Objection (Art. 21 GDPR) – in particular to processing based on Art. 6(1)(f) GDPR

Right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The supervisory authority responsible for us is:

The State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg (LfDI BW)
Lautenschlagerstraße 20, 70173 Stuttgart
poststelle@lfdi.bwl.de

8. No automated profiling

No automated decision-making, including profiling, takes place pursuant to Art. 22 GDPR.

9. Changes to this privacy policy

We reserve the right to amend this privacy policy to adapt it to changes in the legal situation or in our data processing. The current version published on this website applies.