1. Data Controller and Data Protection Officer
The party responsible for this website is:
Stephan Vennemann, Am Botanischen Garten 9, 40225 Düsseldorf, Germany, info(at)thrivard.com
You can contact the Data Protection Officer by email at
info(at)thrivard.com
Data processed for the provision of the website and the creation of log files
Which data is processed for which purpose?
Whenever content on the website is accessed, data is temporarily stored that may allow identification. The following data is collected in this process:
– Date and time of access
- IP address
- Hostname of the accessing device
- Website from which the website was accessed
- Websites accessed via this website
- Page visited on our website
- Status message indicating whether the request was successful
- Amount of data transferred
- Information about the browser type and version used
- Operating system
The temporary storage of data is necessary for the operation of a website visit in order to deliver the website. Additional storage in log files is carried out to ensure the functionality of the website and the security of the information technology systems. These purposes also constitute our legitimate interest in processing the data.
b. On what legal basis is this data processed?
The data is processed on the basis of Article 6(1)(f) of the GDPR.
c. Are there recipients of the personal data other than the controller?
The website is hosted on Microsoft Azure, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, D18 P521, Ireland. The hosting provider receives the above‑mentioned data as a data processor.
d. How long is the data stored?
The data is deleted as soon as it is no longer required for the purpose for which it was collected. In the case of website provision, this is when the respective session has ended. Log files are stored in a manner that is directly and exclusively accessible only to administrators. Thereafter, they are only available indirectly through the reconstruction of backup media and are permanently deleted after final removal.
3. Rights of data subjects
a. Right of access
You may request information pursuant to Article 15 GDPR about your personal data that we process.
b. Right to object
You have the right to object on grounds relating to your particular situation (see Section II).
c. Right to rectification
If the data concerning you is incorrect or no longer accurate, you may request rectification pursuant to Article 16 GDPR. If your data is incomplete, you may request completion.
d. Right to erasure
You may request the deletion of your personal data pursuant to Article 17 GDPR.
e. Right to restriction of processing
You have the right to request restriction of the processing of your personal data pursuant to Article 18 GDPR.
f. Right to lodge a complaint
If you believe that the processing of your personal data violates data protection law, you have the right pursuant to Article 77(1) GDPR to lodge a complaint with a supervisory authority of your choice. This includes the supervisory authority responsible for the controller:
State Commissioner for Data Protection and Freedom of Information North Rhine‑Westphalia.
g. Right to data portability
If the requirements of Article 20(1) GDPR are met, you have the right to receive data that we process automatically on the basis of your consent or in fulfillment of a contract, either for yourself or for transfer to a third party.
The collection of data for the provision of the website and the storage of log files are strictly necessary for the operation of the website. They are therefore not based on consent pursuant to Article 6(1)(a) GDPR or on a contract pursuant to Article 6(1)(b) GDPR, but are justified pursuant to Article 6(1)(f) GDPR. Accordingly, the requirements of Article 20(1) GDPR are not met in this respect.
You have the right, on grounds relating to your particular situation, to object at any time to the processing of your personal data that is based on Article 6(1)(f) GDPR. The controller will then no longer process the personal data unless it can demonstrate compelling legitimate grounds for the processing that override the interests, rights, and freedoms of the data subject, or unless the processing serves the establishment, exercise, or defense of legal claims. The collection of data for the provision of the website and the storage of log files are strictly necessary for the operation of the website.
Effective information security driven by responsibility.
© 2026 - All Rights Reserved - Designed by