Privacy

Privacy notice

Version: September 2026. This notice describes which data is processed when you visit this website and use the messaging portal. In short: no cookies, no trackers, no transfer to third parties.

1. Controllers

This website is operated jointly by C&W Software Labs AG, Bundesplatz 4, 6300 Zug, Switzerland, and C&W Code und Consulting GbR, Waltersweierweg 5a, 77652 Offenburg, Germany (joint controllers within the meaning of Art. 26 GDPR). Contact for all privacy matters: dennis@cundw.io.

For visitors from Switzerland, the Swiss Federal Act on Data Protection (FADP) applies in addition. Processing follows the same principles in both cases.

Open – please checkConclude a joint-controller agreement (Art. 26 GDPR) between both companies and summarise its essence here. Check whether a data protection officer must be appointed (usually not).

2. Hosting and server logs

The website is hosted on a server we manage. When you visit, the web server necessarily processes: IP address, date and time, requested address, data volume, browser and operating system identifier and the previously visited page. These logs serve secure operation (Art. 6 (1) (f) GDPR) and are deleted after 14 days at the latest.

Open – please checkAdd hosting provider, server location and data processing agreement (e.g. DigitalOcean LLC, Frankfurt data centre, DPA with EU standard contractual clauses).

3. Messaging portal

You can start a conversation with us via the messaging portal. We process: name, e-mail address, optionally company, your messages and our replies, timestamps and – to prevent abuse – a truncated hash of your IP address. The data is stored in a database on our server; you receive a private link with a random access key to reopen the conversation. Notifications are sent by e-mail to the address you provide.

The legal basis is the initiation or performance of a contract (Art. 6 (1) (b) GDPR) and our legitimate interest in traceable communication ((f)). Conversations are deleted twelve months after the last message unless an engagement has resulted; then the statutory retention periods under commercial and tax law apply. You may request earlier deletion at any time.

Please do not send passwords, payment details or confidential documents via the portal.

3a. Website check

In the website check, our server fetches the address you enter once and evaluates the response. The checked address and the result are stored for one hour (cache), plus a truncated hash of your IP address for one hour to prevent abuse. No scripts of the checked site are executed and no content is stored permanently. The legal basis is your request (Art. 6 (1) (b) GDPR) and our legitimate interest in a stable service ((f)). Only check websites you are responsible for or authorised to check.

4. Local storage, no cookies

This website does not set cookies. It only stores the following values in your browser's local storage, which are not transmitted to us (strictly necessary for the function you requested):

Key	Purpose	Duration
cwws_lang	Your language choice (German / English)	until you clear browser data
cwws_theme	Your colour-scheme choice (light / dark)	until you clear browser data
cwws_consent_v1	Your choice in the privacy settings (necessary / statistics)	until you clear browser data
cwws_conv	Access key of your portal conversation so you can reopen it on this device without the link	until the conversation is closed or you clear browser data

Only the password-protected inbox used by our staff sets a strictly necessary session cookie; visitors are not affected.

5. No external services

Fonts, scripts and images are served from our own server. There is no integration of Google Fonts, analytics, map or social media services. Links to the projects shown lead to third-party websites for which their operators are responsible.

6. E-mail and telephone

If you contact us by e-mail or telephone, we process your details to handle the enquiry (Art. 6 (1) (b) and (f) GDPR). E-mails are received via a business e-mail service; they are deleted once they are no longer needed for the purpose and no retention obligation applies.

Open – please checkCheck and name the e-mail provider (e.g. Microsoft 365) and any processing outside the EU/Switzerland.

7. Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and to object to processing based on legitimate interests. Contact the address above; both companies accept your request. You may also lodge a complaint with a supervisory authority – in Germany, for example, the State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg; in Switzerland, the Federal Data Protection and Information Commissioner (FDPIC).

8. Changes

We update this notice when the website or the legal situation changes. The version published here applies.

Back to the start page