Privacy policy

1. Controller

The entity responsible for the processing of personal data on this website is:

Spectral World GmbH
Imberstraße 10
76227 Karlsruhe
Germany
Email: info@spectralworld.io

2. Server log files and analytics

When a page is requested, our server records the requested path, the timestamp, and, where available, the referring URL. These records serve the technical operation, security, and improvement of the website and are retained indefinitely.

In addition, we run our own cookieless analytics on our server. For each page view we store a shortened IP address (truncated to /24 for IPv4 and /48 for IPv6; the full IP is not stored), the user agent and the device type, operating system and browser derived from it, the approximate country and city derived from the IP address via a local database (the full IP is not stored for this either), the referring URL, any campaign (UTM) parameters, the language setting, and the requested path, HTTP status, and processing time. A session identifier that changes daily is derived from the shortened IP and the user agent via a one-way function; the random value used for it is regenerated each day and not stored. This data is retained indefinitely.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in the stable, secure operation and in privacy-preserving analytics to improve this website).

3. Hosting (data processing)

This website and its database are hosted on servers operated by netcup GmbH, Emmy-Noether-Straße 10, 76131 Karlsruhe, Germany. netcup processes on our behalf all data handled via this website: the server log entries and analytics data described in section 2 as well as all data you enter via forms and that is stored in the database (see sections 4 and 5). We have a data processing agreement with netcup pursuant to Art. 28 GDPR: netcup-avv.pdf.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in a reliable and securely operated web presence).

4. Contact form and email

When you write to us via the contact form or by email, the details you provide (name, email address, subject, message) are stored so we can process your request. They are deleted once the reason for the correspondence no longer applies, provided no statutory retention obligations require otherwise.

Legal basis: Art. 6(1)(b) GDPR where your request relates to a contract; otherwise Art. 6(1)(f) GDPR (legitimate interest in handling inquiries effectively).

5. Rating our trade-show presence

On the pages reachable via the QR codes in our trade-show magazine, you can rate our trade-show presence with a star rating (one to five stars) and optionally provide free-text feedback and your email address. Feedback and email address are optional; you can rate without them. We store the submitted details in our own database in order to evaluate and improve our trade-show presence and, if you leave an email address, to contact you where appropriate. In addition, for evaluation and abuse prevention we store a shortened IP address (truncated to /24 for IPv4 and /48 for IPv6; the full IP address is not stored) and the approximate country and city derived from it via a local database.

Legal basis: Art. 6(1)(a) GDPR (consent through your voluntary submission), which you may withdraw at any time with effect for the future; otherwise Art. 6(1)(f) GDPR (legitimate interest in evaluating and improving our trade-show presence and in preventing abuse). The data is deleted once it is no longer required for these purposes.

6. Your rights

You have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and to object (Art. 21 GDPR), as well as the right to lodge a complaint with a supervisory authority (Art. 77 GDPR).

7. Changes

We reserve the right to adapt this policy; the updated version applies from your next visit.