Privacy Policy
Last updated: 6 October 2026. Text in highlighted brackets must be filled in with your real details. This text is a starting template, not legal advice. Have it reviewed (e.g. IT-Recht Kanzlei, eRecht24 or a lawyer) before going live.
1. Controller
[Full legal name]
ClockOff
[Street and house number]
[Postcode, City]
Germany
Email: clockoff.de@gmail.com
2. Overview
This website uses no analytics, no advertising or tracking tools, no social media plugins, no embedded videos or maps and no externally loaded fonts or scripts. It sets no cookies and does not use browser storage.
3. Hosting and server log files
This website is hosted by Netlify, Inc., 512 2nd Street, Suite 200, San Francisco, CA 94107, USA. Netlify is certified under the EU-U.S. Data Privacy Framework (Art. 45 GDPR). When you visit, the server automatically processes technically necessary data: IP address, date and time, requested page, browser type and referrer. This is needed to deliver the site securely (Art. 6 (1) (f) GDPR). Logs are deleted according to Netlify’s retention periods [check the current period in Netlify’s privacy policy / DPA]. We have a data processing agreement with the host (Art. 28 GDPR).
4. Contacting us
The contact form does not send data to our server. It opens your own email program with your message prepared. When you email us, we process your name, email address and message only to answer your enquiry and, if applicable, prepare a contract (Art. 6 (1) (b) GDPR). We delete enquiries that do not lead to a contract after 6 months. Data relating to contracts and invoices is kept for the statutory retention periods (up to 10 years, § 147 AO, § 257 HGB).
Our email is provided by Google (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). Data may be transferred to Google LLC in the USA. Google LLC is certified under the EU-U.S. Data Privacy Framework (adequacy decision, Art. 45 GDPR).
5. Clients' website projects
If we receive personal data in the course of a project (e.g. content or access to your systems), we process it only according to your instructions under a data processing agreement.
6. Your rights
You have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21 GDPR). Where you gave consent, you can withdraw it at any time with effect for the future. To exercise your rights, email us.
You may also complain to a data protection supervisory authority, e.g. the one for our location: [State data protection authority of your Bundesland, e.g. BayLDA].
7. No automated decisions
We do not use automated decision-making or profiling.