Legal
Privacy Policy.
Effective: July 20, 2026
1. Controller.
The controller responsible for data processing on this website is:
IVA DIGITAL ASSET GmbH
Savignystraße 34
60325 Frankfurt am Main, Germany
E-mail: info@iva-digitalasset.de
2. Overview.
3. Hosting.
This website is hosted on a server operated by us. The server is rented from Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany, which acts as our processor pursuant to Art. 28 GDPR on the basis of a data processing agreement. The server is located in Germany.
Legal basis for this hosting structure is our legitimate interest in the secure, fast, and efficient provision of our website (Art. 6(1)(f) GDPR). Further information on data protection at Hetzner: hetzner.com/legal/privacy-policy
4. Server Log Files.
Each time this website is accessed, technical data is recorded automatically: IP address, date and time of the request, requested URL and HTTP status code, volume of data transferred, browser type and version, operating system, and referring URL.
This data is processed to ensure the technical delivery, stability, and security of the website (Art. 6(1)(f) GDPR). It is not merged with other data sources and not used to identify individual users. Log files are automatically deleted after 30 days at the latest, unless a specific security incident requires longer retention.
5. SSL/TLS Encryption.
This website uses SSL/TLS encryption for all data transmission. You can recognize an encrypted connection by the "https://" prefix and the lock icon in your browser's address bar.
6. Contact Form.
If you send us an inquiry via the contact form, the data you enter (name, e-mail address, and message) is processed exclusively on our own server in Germany for the purpose of handling your inquiry and possible follow-up questions. No external form service providers are used, and no data is passed on to third parties beyond the processor named in section 3.
Legal basis: Art. 6(1)(b) GDPR where your inquiry relates to the conclusion or performance of a contract, otherwise Art. 6(1)(f) GDPR (legitimate interest in the effective handling of inquiries). Inquiry data is deleted once the matter is fully resolved and no follow-up communication is to be expected, at the latest after twelve months, unless statutory retention obligations (in particular under commercial and tax law) require longer storage.
7. Contact by E-mail.
If you contact us by e-mail, your details, including the contact data you provide, will be stored and processed for the purpose of handling your inquiry and possible follow-up questions. The legal bases set out in section 6 apply accordingly.
8. Cookies.
This website does not set any cookies — neither for analysis or tracking purposes nor for technical reasons. Accordingly, no cookie consent banner is required.
9. Your Rights as a Data Subject.
You have the right to access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR), and data portability (Art. 20 GDPR) with regard to your personal data.
RIGHT TO OBJECT (ART. 21 GDPR): WHERE WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF ART. 6(1)(F) GDPR (LEGITIMATE INTEREST), YOU HAVE THE RIGHT TO OBJECT TO THE PROCESSING AT ANY TIME ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION. WE WILL THEN NO LONGER PROCESS THE DATA CONCERNED UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS, OR THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE OR DEFENCE OF LEGAL CLAIMS.
Withdrawal of consent (Art. 7(3) GDPR): Should any processing be based on your consent, you may withdraw it at any time with effect for the future. The lawfulness of processing carried out before the withdrawal remains unaffected.
To exercise your rights, an informal message to info@iva-digitalasset.de is sufficient.
Right to lodge a complaint (Art. 77 GDPR): You have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is:
Der Hessische Beauftragte für Datenschutz und Informationsfreiheit (HBDI)
Gustav-Stresemann-Ring 1
65189 Wiesbaden, Germany
datenschutz.hessen.de
10. Storage Duration.
Unless a more specific storage period is stated in this privacy policy, personal data remains with us until the purpose for which it was collected no longer applies, subject to statutory retention obligations. Where such obligations apply, processing is restricted until the retention period expires.
11. Changes to This Privacy Policy.
This privacy policy is valid as of the date stated above. Due to further development of our website or changes in legal or regulatory requirements, it may become necessary to amend this privacy policy. The current version is always available on this page.