Privacy Policy

1. Data Controller

The controller responsible for data processing on this website under the General Data Protection Regulation (GDPR) is:
Zhe Li
ICHN Digital Solutions
Bluetenaecker 11
71332 Waiblingen, Germany
Email: [email protected]

2. Infrastructure and Server Logging

This website is hosted on servers located within the European Union (Germany). Whenever pages are requested, the infrastructure automatically collects connection parameters in server log files:

  • IP address (anonymized immediately at network level by masking the final octet)
  • Timestamp of the request
  • Requested URI and protocol version
  • HTTP status code and transmitted byte count
  • Browser environment, version, and operating system

Legal Basis: Art. 6 (1) (f) GDPR. Our legitimate interest consists of ensuring stability, physical integrity, and the mitigation of denial-of-service or network attacks. Log records are deleted once no longer necessary for technical operation (generally within 7 days).

3. Self-Hosted Consent Engine (ICHN Cookie)

To satisfy the burden of proof required under Art. 7(1) GDPR and Section 25 TDDDG, this website implements a localized, self-hosted consent management engine:

  • Consent states are recorded locally within your browser’s localStorage.
  • An anonymized compliance audit trail is logged on our server (masked IP address, cryptographic hash, ephemeral UUIDv4, timestamp, categories selected).
  • Audit entries cannot be reversed to personally identify individuals and are automatically purged after 180 days.

Legal Basis: Art. 6 (1) (c) GDPR and Section 25 (2) TDDDG.

4. Contact Communications

When contacting us via the digital inquiry form or direct email, transmitted information (such as name, email address, and project specifications) is processed exclusively to evaluate technical parameters and manage communications. No data is transferred to external parties.

Legal Basis: Art. 6 (1) (b) GDPR (Pre-contractual execution) and Art. 6 (1) (f) GDPR.

5. Local Asset Isolation & TLS Security

All fonts, style sheets, and execution scripts are hosted locally on our servers. No dynamic connections are established to external third-party delivery networks (such as Google Fonts CDN), preventing cross-border tracking vectors.

All site traffic is secured via end-to-end TLS encryption (HTTPS).

Specific Notice on the Right to Object under Art. 21 GDPR

You have the right to object, on grounds relating to your particular situation, at any time to the processing of personal data concerning you which is based on point (f) of Article 6(1) GDPR (data processing based on legitimate interests).

If you object, we shall no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or for the establishment, exercise, or defense of legal claims.

6. Your Statutory Rights

Under the GDPR, you have the right to request access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and withdrawal of consent at any time (Art. 7(3)).

You also maintain the right to lodge a complaint with the competent data protection supervisory authority (Art. 77 GDPR):
Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg (LfDI BW)
Lautenschlagerstraße 20, 70173 Stuttgart, Germany
Website: https://www.baden-wuerttemberg.datenschutz.de/