Privacy Policy

1. Controller

The controller for data processing on this website is:
Fribas Holding GmbH i. G. (company in formation)
Erna-Paul-Str. 14
34121 Kassel, Germany
Phone: +49 561 40701789
E-mail: [email protected]

Full company details: legal notice.

2. Data protection officer

No data protection officer has been appointed: the conditions of Art. 37 GDPR and § 38 BDSG do not apply to us — we do not permanently employ twenty people on the automated processing of personal data, and our core activity involves neither large-scale regular monitoring nor the processing of special categories of data.
Please address data protection enquiries and requests concerning your rights under section 8 to [email protected] or to the postal address given in section 1.

3. Hosting (Cloudflare Pages)

This website is hosted as a static site by Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA (Cloudflare Pages). When the site is accessed, Cloudflare processes technically necessary connection data (IP address, date and time, file requested, volume transferred, referrer, browser type and operating system) in server log files. The legal basis is our legitimate interest in operating the site securely and reliably (Art. 6 (1) (f) GDPR).

A data processing agreement pursuant to Art. 28 GDPR is in place with Cloudflare. The transfer to the USA is based on the EU standard contractual clauses in conjunction with Cloudflare’s certification under the EU-US Data Privacy Framework (Art. 45, 46 GDPR). The retention period for these log files is determined by Cloudflare as the operator of the platform. We have no access to them: the logs are neither transmitted to us nor stored or analysed by us, and they are not combined with any other data.

4. Cookies and local storage

This website sets no tracking, marketing or analytics cookies and embeds no external fonts, maps, videos or social media plugins. There is no profiling and no automated decision-making.

Exactly one technically necessary entry is stored in your browser’s local storage: the language you selected (doestat-lang). It contains no personal data, is not transmitted to a server, and is required to operate the site as you requested (§ 25 (2) no. 2 TDDDG). You can delete it at any time via your browser settings.

There is therefore no consent banner: this single entry requires no consent, and no optional services are integrated that would need one. Should that change — for example through audience measurement — this policy will be updated and consent obtained before any such service loads.

5. Contacting us by e-mail

If you write to us by e-mail, we process the information you provide (e-mail address, name, message content) solely in order to handle your enquiry. The legal basis is Art. 6 (1) (b) GDPR (pre-contractual measures) or (f) GDPR. The data is deleted once the matter is concluded, unless statutory retention obligations (§ 147 AO, § 257 HGB) apply.

6. Trial request

To request the trial you provide first name, last name, company or institution and e-mail address; the phone number is optional. We process these details to review your request, send you the download link and to contact you about your request. The legal basis is Art. 6 (1) (b) GDPR: you request the trial, so the processing takes place at your request as a pre-contractual measure. We do not rely on these details for any marketing contact beyond that.

We send the download link manually after a review; there is no automatic download. The link is personal and time-limited — it is valid for 72 hours from the time your request reaches us. Without a valid link the installer is not retrievable from our delivery server; once it has expired you can request a new one. The link carries no information about you, and we do not record whether or when it is used.

Your details are processed by Cloudflare Germany GmbH and stored in a database within the Cloudflare infrastructure (processing on our behalf); the same basis as the hosting, see section 3. Your IP address is not stored — it is only evaluated transiently to limit abusive submissions. We keep your details for as long as they are needed to handle your request and support your trial, and delete them afterwards; earlier at any time on your request. The data is not passed on to third parties.

You may object to the processing or request erasure at any time, at the address given in section 2; your further rights are set out in section 8.

7. The DoEStat software

DoEStat is a pure desktop application. Your project and measurement data stay on your machine; there is no cloud connection and no registration requirement. A crash report is only transmitted if you explicitly enable it (opt-in, without project data). The audit trail is kept locally alongside your project and is never transmitted to us.

8. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on Art. 6 (1) (f) GDPR (Art. 21). You may withdraw any consent given at any time (Art. 7 (3) GDPR).

9. Right to lodge a complaint

You may lodge a complaint with a data protection supervisory authority. The authority responsible for us is the one at the company’s seat in Kassel:
Der Hessische Beauftragte für Datenschutz und Informationsfreiheit
Postfach 3163, 65021 Wiesbaden, Germany
Phone: +49 611 1408-0
E-mail: [email protected]

10. Version and changes

This policy is dated August 2026. We will update it whenever the legal situation or our processing changes.