Privacy Policy

1. Controller

The controller for data processing on this website is:
Fribas Holding GmbH
Erna-Paul-Str. 14
34121 Kassel, Germany
Phone: [PLATZHALTER: phone number]
E-mail: [PLATZHALTER: own address of Fribas Holding GmbH — until then [email protected] at our partner STATCON]

Full company details: legal notice.

2. Data protection officer

[PLATZHALTER: name, or “No data protection officer has been appointed pursuant to Art. 37 GDPR.”]
Please address data protection enquiries to: [PLATZHALTER: data protection mailbox of Fribas Holding GmbH — it must exist and be answered before launch. The previously named address [email protected] belongs to our partner STATCON and is not the correct point of contact for Fribas Holding GmbH as the controller.]

3. Hosting (Cloudflare Pages)

This website is hosted as a static site by Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA (Cloudflare Pages). When the site is accessed, Cloudflare processes technically necessary connection data (IP address, date and time, file requested, volume transferred, referrer, browser type and operating system) in server log files. The legal basis is our legitimate interest in operating the site securely and reliably (Art. 6 (1) (f) GDPR).

A data processing agreement pursuant to Art. 28 GDPR is in place with Cloudflare. The transfer to the USA is based on the EU standard contractual clauses in conjunction with Cloudflare’s certification under the EU-US Data Privacy Framework (Art. 45, 46 GDPR). Log file retention period: [PLATZHALTER: verify against the Cloudflare configuration, typically 24 h – 7 days].

4. Cookies and local storage

This website sets no tracking, marketing or analytics cookies and embeds no external fonts, maps, videos or social media plugins. There is no profiling and no automated decision-making.

Exactly one technically necessary entry is stored in your browser’s local storage: the language you selected (doestat-lang). It contains no personal data, is not transmitted to a server, and is required to operate the site as you requested (§ 25 (2) no. 2 TDDDG). You can delete it at any time via your browser settings.

There is therefore no consent banner: this single entry requires no consent, and no optional services are integrated that would need one. Should that change — for example through audience measurement — this policy will be updated and consent obtained before any such service loads.

5. Contacting us by e-mail

If you write to us by e-mail, we process the information you provide (e-mail address, name, message content) solely in order to handle your enquiry. The legal basis is Art. 6 (1) (b) GDPR (pre-contractual measures) or (f) GDPR. The data is deleted once the matter is concluded, unless statutory retention obligations (§ 147 AO, § 257 HGB) apply.

6. Trial request

To request the trial you provide first name, last name, company or institution and e-mail address; the phone number is optional. We process these details to review your request, send you the download link and to contact you about your request. Legal basis: [PLATZHALTER: Art. 6 (1) (b) GDPR (pre-contractual measure) and/or (f) (legitimate interest in sales contact) — to be settled by legal counsel; under (f) the balancing test must also be documented].

We send the download link manually after a review; there is no automatic download. That does not protect the file technically: it is publicly retrievable from our delivery server because it must also be reachable without sign-in for package managers such as winget and for checksum verification. The form governs who receives the link from us — not who can reach the file.

Your details are processed by Cloudflare Germany GmbH and stored in a database within the Cloudflare infrastructure (processing on our behalf); the same basis as the hosting, see section 3. Your IP address is not stored — it is only evaluated transiently to limit abusive submissions. Retention: [PLATZHALTER: confirm the period — 365 days from receipt is intended; automatic deletion is not yet in place]. The data is not passed on to third parties.

You may object to the processing or request erasure at any time by e-mail to [email protected]; your further rights are set out in section 8.

7. The DoEStat software

DoEStat is a pure desktop application. Your project and measurement data stay on your machine; there is no cloud connection and no registration requirement. A crash report is only transmitted if you explicitly enable it (opt-in, without project data). The audit trail is kept locally alongside your project and is never transmitted to us.

8. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on Art. 6 (1) (f) GDPR (Art. 21). You may withdraw any consent given at any time (Art. 7 (3) GDPR).

9. Right to lodge a complaint

You may lodge a complaint with a data protection supervisory authority. The authority responsible for us is:
[PLATZHALTER: enter the state supervisory authority at the registered seat of Fribas Holding GmbH — determined by the company seat]

10. Version and changes

This policy is dated: [PLATZHALTER: date of legal approval]. We will update it whenever the legal situation or our processing changes.