The controller under the General Data Protection Regulation (GDPR) is:
This English version is a convenience translation. Only the German version is legally binding.
CanDo Solutions
Luca Winterkamp
Am Kumb 21
67731 Otterbach
contact@winter-es.de
This website is run by a hosting provider with data centres in the European Union. The provider processes personal data only on our behalf and on our instructions (Art. 28 GDPR). Hosting does not involve any transfer to countries outside the EU.
Each time you load the website, the server automatically records technical data sent by your browser: IP address, date and time, the page requested, the referrer URL, browser type and version, and operating system. We process this data to deliver the website, keep it stable and secure, and diagnose faults. The legal basis is our legitimate interest in a secure, working website (Art. 6 (1) (f) GDPR). The logs are deleted once they are no longer needed for these purposes; we do not combine them with other data sources or use them for advertising.
If you write to us through the contact form, we process your name, email address, optional phone number, the type of your enquiry, and your message in order to handle and answer it. The legal basis is Art. 6 (1) (b) GDPR where your enquiry concerns a contract or pre-contractual steps, and otherwise your consent (Art. 6 (1) (a) GDPR), which you give by ticking the consent box in the form.
To deliver the form contents to us by email, we use the Resend service (Resend, Inc.) as a processor (Art. 28 GDPR). Resend processes the data only to deliver that email to us. Where this involves a transfer of data to the USA, it is based on the EU Standard Contractual Clauses (Art. 46 (2) (c) GDPR).
We keep your contact details (name, email address, and phone number if given) for one year after our last correspondence about your enquiry. This lets us reach you with follow-up questions and come back to your enquiry, for example if you want to go ahead with your plans at a later date. The legal basis is our legitimate interest in maintaining business contacts (Art. 6 (1) (f) GDPR). You can object to this at any time, and we will then delete your data. We only send you promotional emails with your express consent. If your enquiry leads to a contract, we keep the records for the periods required by commercial and tax law.
This website sets no cookies and stores no other information in your browser. We do not use analytics, tracking, or marketing tools. Consent under § 25 TDDDG (the German Telecommunications Digital Services Data Protection Act) and a cookie banner are therefore not needed. We serve fonts from our own server, so your browser does not connect to any third party to load them. If we introduce analytics in the future, we will describe the purpose, legal basis, and how to object here beforehand.
You have the following rights regarding the personal data we hold about you. To exercise them, use the contact details above.
If you have given consent, you can withdraw it at any time with effect for the future (Art. 7 (3) GDPR). This does not affect the lawfulness of processing carried out before you withdrew it.
You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is the Rhineland-Palatinate Commissioner for Data Protection and Freedom of Information.
We update this privacy policy when our processing or the law changes. The version published on this page applies. Last updated: October 2026.
For privacy questions, write to us at the address or email above. We are not legally required to appoint a data protection officer and have not appointed one.