Privacy Policy

1. Controller

The controller for processing personal data on this website is Additive Marking GmbH, Technologiepark 31, 33100 Paderborn, Germany.

You can contact us at info@additive-marking.de.

2. Website delivery and server logs

When you access this website, the hosting infrastructure necessarily processes technical connection data, such as the IP address, date and time of access, requested URL, browser information, and HTTP status information, to deliver the website securely and reliably.

The production deployment must document the hosting provider, the applicable retention period, and the legal basis for this processing before publication. The intended legal basis is Art. 6(1)(f) GDPR, based on our legitimate interest in secure technical operation and defence against misuse.

3. Contact form

When you submit the contact form, we process your first name, last name, email address, selected business use case, optional message, selected language, and confirmation that you have read this privacy policy.

We use these data to process and answer your request. The form sends the request through our message queue to the configured email service and sends a confirmation message to the email address you provided.

Processing is based on your consent given by selecting the required checkbox (Art. 6(1)(a) GDPR) and, where applicable, on steps taken prior to entering into a contract (Art. 6(1)(b) GDPR). We retain the request only for as long as necessary to answer it and to meet statutory retention obligations. The production operator must define and document the actual retention period.

4. Nameplate generator

If you use the nameplate generator, the identifier you enter is sent to the server-side nameplate endpoint and then to the configured SVG generator service to create a QR-code preview. Do not enter personal data unless this is necessary for your intended use.

The landing page returns generated previews with a no-store response. The deployment operator must document the SVG generator provider, its processing location, and its retention policy before publication.

5. Consent cookie and analytics

This website stores the passx_landing_consent_v1 cookie to remember whether you accepted or declined optional analytics. The cookie contains only your choice, is set with SameSite=Lax, and expires after one year.

Analytics are disabled until you actively accept them. After acceptance, the site loads a self-hosted Plausible Analytics endpoint at analytics.metrics.pass-x.eu to produce aggregated usage statistics. The analytics configuration must be reviewed with the actual production operator and deployment location before publication.

The consent cookie and optional analytics are processed on the basis of your consent under Art. 6(1)(a) GDPR. You can withdraw consent by deleting the cookie in your browser and making a new choice when you revisit the site.

6. Recipients and international transfers

Recipients may include the hosting provider, the message-queue and email-service operators used for contact requests, and the SVG-generator operator when you use the nameplate generator. The production operator must list the actual processors and any safeguards for transfers outside the European Economic Area before publication.

7. Your rights

Subject to the applicable legal requirements, you have the right to access, rectification, erasure, restriction of processing, data portability, and objection. You may withdraw consent at any time with effect for the future. You also have the right to lodge a complaint with a competent data-protection supervisory authority.