privacy policy

01 Controller

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

02 Data Protection Officer

The internal Data Protection Officer can be reached at: info@cdmtech.de

Information security incidents can also be reported to this address.

03 General information on data processing

Personal data is generally processed only to the extent necessary to provide a functional website and its content and services. Processing is based on consent under Art. 6(1)(a) GDPR, for pre-contractual measures or performance of a contract under Art. 6(1)(b) GDPR, to comply with legal obligations under Art. 6(1)(c) GDPR, or on legitimate interests under Art. 6(1)(f) GDPR.

04 Server log files

When the website is accessed, the browser automatically transmits information to the server. The following data may be temporarily stored in a log file:

• IP address of the requesting device
• Date and time of access
• Name and URL of the requested file
• Website from which the request originated (referrer URL)
• Browser used and, where applicable, operating system and access provider

Die Verarbeitung erfolgt auf Grundlage von Art. 6 Abs. 1 lit. f DSGVO aus dem berechtigten Interesse an einem sicheren und technisch stabilen Betrieb. Server-Logdaten werden spätestens nach sieben Tagen gelöscht, soweit keine weitere Aufbewahrung zu Beweiszwecken erforderlich ist.

05 Analytics and embedded services

No web analytics or tracking services are loaded when you simply visit the website. Fonts are provided locally; Google Analytics, Google Maps, YouTube videos and social media plug-ins are not embedded. The optional chatbot is loaded only after you actively select the “Start chat” button. This statement does not apply to the separately hosted Brevo newsletter sign-up page. Further information is provided in the following section.

06 Audavo chatbot

An optional chatbot provided by Audavo GmbH, Steinbeisstraße 12, 73037 Göppingen, is available on the home page and product pages. No connection to Audavo is established when you simply visit a page. Only when you select “Start chat” does your browser load the chat window from app.audavo.com.

When the chat window is loaded, technically necessary connection data, in particular the IP address, is transmitted to Audavo. According to the information currently available, the IP address is not stored as part of the chat dialogue. If you use the chat, the messages you enter and any information you provide voluntarily are transmitted to Audavo and processed on behalf of CDM Tech GmbH. Please do not transmit special categories of personal data or confidential business secrets through the chat.

Chat dialogues are stored for no more than 30 days and are then automatically deleted, unless statutory obligations or the processing of an expressly requested enquiry require longer retention.

Processing is based on Art. 6(1)(b) GDPR where the chat relates to initiating a contract or pre-contractual measures, and otherwise on Art. 6(1)(f) GDPR based on our legitimate interest in providing user-friendly answers to product questions. Audavo is used as a processor; the details of the processing are governed by an agreement pursuant to Art. 28 GDPR.

07 Contact via form and email

You can use the contact form to submit a demo or product enquiry. The data you enter – in particular your name, company, email address, telephone number and message – is transmitted to CDM Tech GmbH and forwarded by email for processing. The form content is not stored in a website database.

To protect against automated bulk requests, the IP address is not stored in plain text but hashed with a secret additional value. The shortened hash is used together with timestamps in a temporary server file to limit requests; entries older than one hour are no longer considered during checks.

The legal basis is Art. 6(1)(b) GDPR where the enquiry relates to a contract or pre-contractual measures, and otherwise Art. 6(1)(f) GDPR based on our legitimate interest in responding to your enquiry. Where you provide express consent, Art. 6(1)(a) GDPR also applies.

The data is deleted as soon as it is no longer required for the purpose for which it was collected and no statutory retention obligations apply.

08 Newsletter and double opt-in

When you subscribe to our newsletter, we process the email address you provide and the documentation of your consent and the double opt-in procedure. This includes, in particular, the time of subscription and confirmation as well as the form used.

The processing serves to send the CDM Tech newsletter with information about augmented reality, AI and quality inspection in industry. The legal basis is your express consent under Art. 6(1)(a) GDPR.

You may withdraw your consent at any time with future effect using the unsubscribe link in every newsletter or by emailing info@cdmtech.de You will not be added to the newsletter distribution list unless you click the confirmation link.

The data is stored until consent is withdrawn. We retain opt-in evidence only to the extent necessary and subject to statutory retention and limitation periods.

Brevo

We use Brevo to provide the sign-up form, manage the newsletter distribution list, carry out the double opt-in procedure and send the newsletter. Where covered by the data processing agreement concluded between CDM Tech and Brevo, Brevo is used as a processor. Further information is available in Brevo’s privacy policy.

Google reCAPTCHA

Google reCAPTCHA v3 is used on the Brevo-hosted newsletter sign-up page to prevent automated subscriptions, spam and misuse. To the extent necessary for misuse detection, this may include processing of the IP address, browser and device information and interaction data.

The newsletter form is not currently embedded directly on cdmtech.de Google reCAPTCHA is therefore not loaded when you simply visit the CDM Tech website. Information about Google’s data processing can be found in Google’s privacy policy.

09 Recipients of personal data

The following categories of recipients may have access to personal data in connection with website operation:

• Hosting provider
• Email or infrastructure service providers
• Commissioned IT service providers
• Audavo GmbH as the service provider for the optional chatbot
• Brevo as a service provider for newsletter sign-up and newsletter delivery
• Google reCAPTCHA on the Brevo-hosted newsletter sign-up page, where technically necessary

Where required, processing by service providers is governed by agreements pursuant to Art. 28 GDPR.

10 Data transfers to third countries

Whether and to what extent personal data is transferred to countries outside the European Union or the European Economic Area depends on the service providers used and their current contractual documentation. Any safeguards required under Art. 44 et seq. GDPR must be documented.

11 Data subject rights

Data subjects have the following rights in particular under the GDPR:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object to processing (Art. 21 GDPR)
• Right to withdraw consent for consent-based processing (Art. 7(3) GDPR)

To exercise these rights, please contact info@cdmtech.de.

12 Right to lodge a complaint with a supervisory authority

Data subjects have the right to lodge a complaint with a data protection supervisory authority. For Baden-Württemberg, this is:

13 Data security

The website is transmitted using SSL/TLS at the encryption level supported by the browser. Appropriate technical and organisational measures are also used to protect personal data against manipulation, loss, destruction or unauthorised access.

14 Currency and amendments

This privacy policy reflects the documented technical status of the website in August 2026. Changes to the website, its services or legal requirements may make updates necessary.