Privacy policy

This is a translation for your convenience. Only the German version is legally binding.

As of: October 2026

1. Controller

The Incredible Company GmbH
Bovenauer Str. 7
24796 Bredenbek
Germany
Phone: +49 151 51930953
E-mail: info@incrediblecompany.de

2. The key points in brief

This website sets no cookies, uses no analytics or advertising services and does not embed content from third-party providers. We only process personal data in order to deliver the website securely and when you contact us.

3. Hosting, delivery and log data

This website is provided by Amazon Web Services EMEA SARL, Luxembourg (AWS). The website files are stored in a data centre in Frankfurt am Main, Germany. The website is delivered via the content delivery network Amazon CloudFront, which uses servers in Europe, North America and Israel.

Each time the website is accessed, AWS processes the following data on our behalf: IP address, date and time, requested address, referrer URL (if your browser transmits it), browser type and operating system, HTTP status code, amount of data transferred and the CloudFront location used.

The purpose is the delivery of the website, its stability and security, in particular detecting and preventing attacks. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in a secure and functioning website. The log data is deleted automatically after 30 days, unless we need it for longer to investigate a specific security incident.

To protect the website, we use the firewall AWS WAF and the DDoS protection AWS Shield. IP addresses and characteristics of requests are analysed automatically. Requests that match known attack patterns or are unusually frequent are blocked. The legal basis is likewise Art. 6(1)(f) GDPR.

We have concluded a data processing agreement with AWS pursuant to Art. 28 GDPR. AWS belongs to the US group Amazon.com, Inc. Access from the USA can therefore not be ruled out. Amazon.com, Inc., including AWS, is certified under the EU-US Data Privacy Framework, for which the European Commission has found an adequate level of data protection (Art. 45 GDPR). In addition, AWS has agreed to the European Commission’s standard contractual clauses (Art. 46 GDPR).

4. Encryption

The connection to this website is encrypted using TLS. You can recognise this by “https://” in the address bar.

5. No cookies, no storage on your device

This website sets no cookies and stores no information on your device, including in local storage or session storage. No tracking takes place.

The website reads some display information in your browser: screen size, pixel density, whether you use a mouse or touch, and whether you have set reduced motion in your operating system. It uses this to adapt the layout, image sizes and animations. This information is neither stored nor transmitted to us; only the image file then loaded appears in the log data, like any other request. Access to it is strictly necessary to display the website you requested appropriately (Section 25 (2) No. 2 TDDDG, German Telecommunications Digital Services Data Protection Act).

6. Fonts and program libraries

Fonts, scripts and images are loaded exclusively from our own hosting. No connection to third-party servers, for example those of Google Fonts or external content delivery networks, is made when you visit the website.

7. Contact by e-mail or phone

If you contact us by e-mail or phone, we process the information you give us, usually your name, company, contact details and the content of your inquiry. We use this information to process your inquiry.

The legal basis is Art. 6(1)(b) GDPR if your inquiry is aimed at a contract or its initiation. In all other cases it is Art. 6(1)(f) GDPR; our legitimate interest lies in answering business inquiries.

If your inquiry does not lead to a business relationship, we delete the data as soon as the inquiry has been dealt with, at the latest after six months. If a business relationship results, the statutory retention periods apply, in particular six years for commercial and business letters under Section 257 of the German Commercial Code (HGB) and Section 147 of the German Fiscal Code (AO).

We use Google Workspace for e-mail. The provider is Google Cloud EMEA Limited, Dublin, Ireland. We have concluded a data processing agreement with Google pursuant to Art. 28 GDPR. Google belongs to the US group Google LLC, which is certified under the EU-US Data Privacy Framework; standard contractual clauses also apply.

This website contains links to other websites, for example to Google Maps. Data is only transferred to the respective provider when you click such a link. The provider is responsible for the processing there.

9. Recipients

Your data is only received by the processors named above, AWS and Google. It is only passed on further if we are legally obliged to do so.

10. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). To exercise these rights, simply contact us using the contact details above.

Right to object under Art. 21 GDPR: Insofar as we process your data on the basis of Art. 6(1)(f) GDPR, you may object at any time on grounds relating to your particular situation. We will then no longer process the data unless we can demonstrate compelling legitimate grounds or the processing serves the establishment, exercise or defence of legal claims.

11. Right to lodge a complaint

You can lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is:

Unabhängiges Landeszentrum für Datenschutz Schleswig-Holstein (ULD, Independent Centre for Privacy Protection Schleswig-Holstein)
Postfach 71 16
24171 Kiel, Germany
Phone: +49 431 988-1200
E-mail: mail@datenschutzzentrum.de

12. Obligation to provide data, no automated decisions

You are not obliged to provide us with data. Without the technically necessary log data, however, the website cannot be delivered. No automated decision-making or profiling within the meaning of Art. 22 GDPR takes place.

13. Changes

We update this privacy policy when the website or the legal situation changes. The version published here applies.

Last updated: