Privacy Policy

Last updated: 26 October 2026

This policy covers this website (incident-live.apps.vensas.de). IncidentLive itself runs on your organization's own servers; vensas receives no data from those installations.

Controller

The controller responsible for processing personal data is

Domain

This website runs under the domain vensas.de, which is registered in Germany. The provider is united-domains AG, Gautinger Straße 10, 82319 Starnberg, Germany (privacy policy).

Hosting and server logs

The website is hosted by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany (privacy policy).

When you open a page, your browser sends technical data that the server records in its access log:

• IP address
• Date and time of the request
• The page or file requested, and whether the request succeeded
• Browser and operating system (user agent)

We use this data only to deliver the website and to keep it secure, for example to detect attacks. It is not combined with other data and is deleted regularly. The legal basis is Art. 6 para. 1 lit. f) GDPR, our legitimate interest in operating the website securely.

Visitor statistics with Matomo

If you allow it, we count visits with Matomo Cloud to see how often the pages are read and which ones help visitors. Matomo Cloud is a service of InnoCraft Ltd, 7 Waterloo Quay, PO Box 625, 6140 Wellington, New Zealand (privacy policy); its representative in the EU is ePrivacy Holding GmbH, Burchardstraße 14, 20095 Hamburg, Germany. InnoCraft processes the data on our behalf under a data processing agreement and stores it in the EU. For New Zealand there is an adequacy decision of the European Commission.

Until you allow it, nothing is loaded from Matomo and nothing is recorded. Once you allow it, Matomo records the page you open, the page you came from, the time, and your browser, operating system and type of device. Your IP address is shortened before it is stored, so it can no longer be linked to you. Matomo also sets cookies: _pk_id recognizes you when you come back and expires after 13 months, _pk_ses groups the pages of one visit and expires after 30 minutes, and _pk_ref remembers the site you came from and expires after 6 months. If your browser sends a Do Not Track signal, Matomo records nothing even when you allow it.

The legal basis is your consent (Art. 6 para. 1 lit. a) GDPR, § 25 para. 1 TDDDG). You can withdraw it any time under "Cookie settings" at the bottom of every page; Matomo then stops recording and its cookies are deleted.

Your choice is kept in your browser's local storage as incidentlive_cookie_choice, so we don't ask again on every page. It contains only allowed or declined and is strictly necessary (§ 25 para. 2 no. 2 TDDDG).

Language cookie

The website itself sets one cookie, incidentlive_lang, to remember the language you read the site in, so that the start page opens in that language next time. It contains only en or de, is set when you open a page in that language, and expires after one year. Without it the language you chose wouldn't stick, so it's strictly necessary and needs no consent (§ 25 para. 2 no. 2 TDDDG). If there's no cookie, the start page follows your browser's language setting.

Email and phone

If you email or call us, for example about a pilot, we use what you tell us only to answer your request. Email is processed on servers in Germany provided by Microsoft (privacy statement). The legal basis is Art. 6 para. 1 lit. b) or f) GDPR.

Your rights

You have the right to access the personal data we hold about you (Art. 15 GDPR), to have it corrected (Art. 16), deleted (Art. 17) or its processing restricted (Art. 18), to receive it in a portable format (Art. 20), and to object to processing based on our legitimate interests (Art. 21). To exercise these rights, contact kontakt@vensas.de.

You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for vensas is the Unabhängiges Datenschutzzentrum Saarland (datenschutz.saarland.de).