§ Privacy · GDPR

Privacy, in plain terms.

What we collect, why, and how to reach us about it. Nothing tracked, nothing sold. The full notice follows in fourteen short notes.

Effective
May 2026
Controller
Factory Innovations GmbH
  1. Controller

    Who controls the data.

    Factory Innovations GmbH, c/o Factory Works GmbH, Rheinsberger Str. 76/77, 10115 Berlin, Germany.

    Email: hi@factory-innovations.com

  2. Data Protection Officer

    Where formal requests go.

    ink solutions GmbH, Danilo Terrasi, Grafenstraße 31a, 64283 Darmstadt, Germany.

    Email: datenschutz@ink-solutions.eu

  3. Purpose

    Why we process any data.

    We process personal data to operate this website, ensure its security and stability, and respond to enquiries.

  4. Visit data

    What server logs capture.

    When you access our website, we process technical data (server log data) to deliver the website and protect it against attacks and misuse.

    • IP address
    • Date and time of access
    • Requested page / URL
    • Referrer URL
    • Browser type and version
    • Operating system
    • Hostname / device information, where applicable

    Legal basis: Art. 6(1)(f) GDPR — legitimate interest in secure and reliable website operation. Log data is stored for a limited period and then deleted or anonymised.

  5. Email contact

    When you write to us.

    If you contact us by email, we process your message and contact details (e.g., name, email address, content of the enquiry) in order to respond.

    Legal basis: Art. 6(1)(b) GDPR (pre-contractual steps / contract) or Art. 6(1)(f) GDPR (legitimate interest in responding).

  6. Cookies & third parties

    No tracking today.

    This website does not use analytics, marketing tracking, newsletter tools, or embedded third-party content. Only strictly necessary technologies are used. If optional services are added later, we will update this policy and implement a consent mechanism.

  7. Fonts

    Loaded from Google Fonts.

    Web typography is loaded via Google Fonts. Once the site is moved to production, fonts may be self-hosted to avoid third-party requests. This section will be updated accordingly.

  8. Recipients & processors

    Service providers we rely on.

    To operate this website, we may use service providers (e.g., hosting) who process personal data on our behalf under data processing agreements pursuant to Art. 28 GDPR.

    We do not sell your personal data, and we do not share it with unauthorised third parties.

  9. Third-country transfers

    Outside the EU/EEA.

    If services involving transfers outside the EU / EEA are used, we will ensure appropriate safeguards (e.g., EU Standard Contractual Clauses) where required.

  10. Security

    Technical safeguards.

    We use appropriate technical and organisational measures to protect personal data. Traffic is delivered over TLS.

  11. Retention

    How long data is kept.

    We store personal data only as long as necessary for the respective purpose. Once it is no longer required, we delete or restrict it.

    Where statutory retention obligations apply — in particular under the German Commercial Code (HGB) and Fiscal Code (AO) — data may be kept for the prescribed periods (typically two to ten years). Beyond that, civil statutes of limitations under §§ 195 et seq. of the German Civil Code (BGB) can extend up to thirty years, with a regular limitation period of three years. Legal basis: Art. 6(1)(c) GDPR.

  12. Your rights

    What you can ask us to do.

    Under the GDPR, subject to legal requirements, you have the right to:

    • Access, Art. 15 GDPR
    • Rectification, Art. 16 GDPR
    • Erasure, Art. 17 GDPR
    • Restriction of processing, Art. 18 GDPR
    • Data portability, Art. 20 GDPR
    • Object to processing based on Art. 6(1)(f) GDPR, Art. 21 GDPR
    • Withdraw consent at any time, Art. 7(3) GDPR

    The rights of access and erasure may be limited under §§ 34 and 35 of the German Federal Data Protection Act (BDSG). Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.

    You may also lodge a complaint with a supervisory authority (Art. 77 GDPR, § 40 BDSG). Requests can be sent to our Data Protection Officer (see note 02).

  13. Automated decisions

    Not used.

    We do not use automated decision-making, including profiling, within the meaning of Art. 22 GDPR.

  14. Updates

    When this notice may change.

    We may update this Privacy Policy to reflect changes in our website, services, or legal requirements.