1. Controller
The controller responsible for data processing on this website is:
InterFace Storage Consulting GmbH
Am Hochacker 3, Pavillon 1
85630 Grasbrunn, Germany
Managing Director: Luca Rochira
E-mail: info@if-storage.de
Phone: +49 89 37779862
2. General information on data processing
We process our users' personal data only to the extent necessary to provide a functional website and our content and services. Processing regularly takes place only with the user's consent (Art. 6(1)(a) GDPR) or where a legal basis permits the processing.
3. Hosting & server log files
This website is hosted by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany (“Hetzner”). The servers are located in Germany. A data processing agreement (Art. 28 GDPR) has been concluded with Hetzner. When the website is accessed, the server automatically records information in so-called server log files transmitted by your browser:
- browser type and version
- operating system used
- referrer URL
- host name of the accessing computer / anonymised IP address
- time of the server request
This data is not merged with other data sources. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in the secure and functional provision of the website).
4. Contact form & getting in touch
If you contact us via the contact form or by e-mail, the details you provide (name, company, e-mail address, phone number, subject, message) are processed in order to handle your enquiry. Transmission to our server is encrypted (see section 3). Processing and storage take place in our self-operated business platform on our own servers; your data is not passed on to third parties.
Job applications: Via the form on our careers page you can additionally submit application documents (e.g. a CV as a PDF or Word file). We process this data exclusively to carry out the application procedure (Art. 6(1)(b) GDPR in conjunction with Section 26 of the German Federal Data Protection Act, BDSG). If no employment results, we delete the documents no later than six months after the procedure has ended, unless you have expressly consented to longer storage.
The legal basis is Art. 6(1)(b) GDPR (initiation/performance of a contract) or Art. 6(1)(f) GDPR (legitimate interest in responding to your enquiry). The data is deleted as soon as it is no longer required for the purpose and no statutory retention obligations apply.
5. Fonts (locally hosted)
For a consistent presentation of typefaces, this website uses web fonts (“Sora” and “Inter”). These are hosted locally on our server and loaded directly from there. No connection to third-party servers (e.g. Google Fonts) is established; in particular, your IP address is not transmitted to third parties in this process.
6. Cookies
This website does not set any tracking or marketing cookies. Should analytics or marketing services (e.g. Google Analytics, Meta Pixel) be used in the future, consent will be obtained in advance via a cookie banner and this section will be amended accordingly.
In our login areas (employee and customer portal, see section 7), technically necessary session cookies are set that serve solely to keep you signed in. They contain no tracking functions, apply only to the respective login area and are deleted when you sign out or when the session expires. No consent is required for these strictly necessary cookies (Section 25(2) no. 2 of the German TDDDG).
7. Login areas (portals), appointment booking & time tracking
Customer portal: Customers with access to our customer portal sign in with an e-mail address and password. We process the access credentials (the password only as a cryptographic hash), your support requests and documents shared with you or uploaded by you. The purpose is the performance of the contractual relationship (Art. 6(1)(b) GDPR). The data remains on our own servers.
Employee portal & time tracking: Employees sign in with company credentials (optionally with two-factor authentication); recorded working hours are processed for the purposes of the employment relationship (Section 26 BDSG, Art. 6(1)(b) GDPR). Failed sign-in attempts are logged for a short period to protect the accounts (Art. 6(1)(f) GDPR — legitimate interest in IT security).
Online appointment booking: If you book an appointment via our website, we process the details you provide (name, e-mail address, phone number and subject where applicable) exclusively to organise and conduct the appointment (Art. 6(1)(b) GDPR — pre-contractual measure). The data is deleted as soon as it is no longer required for this purpose.
8. Your rights as a data subject
Under the GDPR you have the following rights:
- access to your processed data (Art. 15 GDPR)
- rectification of inaccurate data (Art. 16 GDPR)
- erasure (Art. 17 GDPR)
- restriction of processing (Art. 18 GDPR)
- data portability (Art. 20 GDPR)
- objection to processing (Art. 21 GDPR)
- withdrawal of consent given (Art. 7(3) GDPR)
You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is the Bavarian State Office for Data Protection Supervision (BayLDA), Promenade 18, 91522 Ansbach, Germany.
9. Currency of this policy
This privacy policy is dated July 2026. Further development of our website or changes in legal requirements may make amendments necessary. In case of doubt, the German version (Datenschutzerklärung) prevails.
← Back to home page