Privacy Policy
Privacy Policy · Last updated: August 20, 2026
1. Controller
The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:
H&S Software Solutions GmbH
Lindenstraße 65
48431 Rheine
Germany
Phone: +49 5971 946 13-0
Email: info@hs-solutions.de
Website: www.adasma.de
If you have any questions regarding data protection, you can contact us using the email address stated above.
No data protection officer has currently been appointed. Data protection matters within H&S Software Solutions GmbH are the responsibility of the management.
2. General Information on Data Processing
The protection of your personal data is important to us. We process personal data exclusively in accordance with the applicable legal provisions, in particular the General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG) and – insofar as cookies or comparable technologies are concerned – the Telecommunications Digital Services Data Protection Act (TDDDG).
Personal data means any information relating to an identified or identifiable natural person.
The specific personal data processed depends in particular on how you use our website, whether you contact us, or whether you consent to the use of optional analytics, marketing or media services.
3. Your Rights
Subject to the applicable legal requirements, you have the following rights in particular:
- the right to obtain information about the personal data we process in accordance with Art. 15 GDPR
- the right to rectification of inaccurate or incomplete data in accordance with Art. 16 GDPR
- the right to erasure of personal data in accordance with Art. 17 GDPR
- the right to restriction of processing in accordance with Art. 18 GDPR
- the right to data portability in accordance with Art. 20 GDPR
- the right to object to certain processing activities in accordance with Art. 21 GDPR
- the right to withdraw consent with effect for the future in accordance with Art. 7 para. 3 GDPR
The withdrawal of consent does not affect the lawfulness of processing carried out on the basis of consent prior to its withdrawal.
You also have the right to lodge a complaint with a competent data protection supervisory authority regarding the processing of your personal data.
4. Hosting and Server Log Files
Our website is hosted by netcup. The server location of the hosting environment we use is in Germany.
When you access our website, technically necessary information is processed by the web server. This may include in particular:
- IP address
- date and time of access
- page or file accessed
- amount of data transferred
- referrer URL
- browser type and browser version
- operating system used
- access status or HTTP status code
The processing is carried out for the technical provision of the website and to ensure stability, security, abuse detection and error analysis.
Legal basis: Art. 6 para. 1 lit. f GDPR.
Our legitimate interest lies in the secure, stable and functional operation of our website.
Server log data is stored only for as long as necessary for the technical and security-related purposes stated above or where statutory obligations require longer storage.
5. Cookies, Comparable Technologies and Consent Management
Our website uses cookies and comparable technologies. These are pieces of information that may be stored on or read from your device.
Technically necessary cookies and technologies are used insofar as they are required to provide the website or functions expressly requested by you.
Optional technologies, particularly for statistics, analytics, marketing and external media, are generally used only after you have given the corresponding consent.
In particular, the requirements of Section 25 TDDDG apply to the storage of information on a device or access to information already stored on a device.
Where consent is required, processing is carried out on the basis of Section 25 para. 1 TDDDG in conjunction with Art. 6 para. 1 lit. a GDPR. Technically strictly necessary operations may be carried out without consent where the requirements of Section 25 para. 2 TDDDG are met.
Real Cookie Banner
We use Real Cookie Banner to manage your privacy and cookie settings.
Using the privacy settings, you can specify which optional services you wish to consent to. Your decision is stored and documented so that we can demonstrate that consent has been obtained.
The documentation serves in particular to demonstrate compliance with legal requirements and, in the event of a dispute, to provide evidence of how consent was obtained. Once the specified retention period has expired, the documented consents are deleted in the interests of data minimisation.
You can change or withdraw your consent at any time with effect for the future via the website's privacy settings.
Where your consent decision is stored in order to comply with statutory documentation obligations, the legal basis is Art. 6 para. 1 lit. c GDPR.
4. Hosting and Server Log Files
Our website is hosted by netcup. The server location of the hosting environment we use is in Germany.
When you access our website, technically necessary information is processed by the web server. This may include in particular:
- IP address
- date and time of access
- page or file accessed
- amount of data transferred
- referrer URL
- browser type and browser version
- operating system used
- access status or HTTP status code
The processing is carried out for the technical provision of the website and to ensure stability, security, abuse detection and error analysis.
Legal basis: Art. 6 para. 1 lit. f GDPR.
Our legitimate interest lies in the secure, stable and functional operation of our website.
Server log data is stored only for as long as necessary for the technical and security-related purposes stated above or where statutory obligations require longer storage.
5. Cookies, Comparable Technologies and Consent Management
Our website uses cookies and comparable technologies. These are pieces of information that may be stored on or read from your device.
Technically necessary cookies and technologies are used insofar as they are required to provide the website or functions expressly requested by you.
Optional technologies, particularly for statistics, analytics, marketing and external media, are generally used only after you have given the corresponding consent.
In particular, the requirements of Section 25 TDDDG apply to the storage of information on a device or access to information already stored on a device.
Where consent is required, processing is carried out on the basis of Section 25 para. 1 TDDDG in conjunction with Art. 6 para. 1 lit. a GDPR. Technically strictly necessary operations may be carried out without consent where the requirements of Section 25 para. 2 TDDDG are met.
Real Cookie Banner
We use Real Cookie Banner to manage your privacy and cookie settings.
Using the privacy settings, you can specify which optional services you wish to consent to. Your decision is stored and documented so that we can demonstrate that consent has been obtained.
The documentation serves in particular to demonstrate compliance with legal requirements and, in the event of a dispute, to provide evidence of how consent was obtained. Once the specified retention period has expired, the documented consents are deleted in the interests of data minimisation.
You can change or withdraw your consent at any time with effect for the future via the website's privacy settings.
Where your consent decision is stored in order to comply with statutory documentation obligations, the legal basis is Art. 6 para. 1 lit. c GDPR.
6. Contact by Email and Contact Form
If you contact us by email or via a contact form, we process the information you provide in order to handle your request.
The following data in particular may be processed:
- name
- company
- email address
- telephone number, if provided
- content of your message
- any other information you provide voluntarily
If your request relates to the conclusion or performance of a contract or to pre-contractual measures, processing is carried out on the basis of Art. 6 para. 1 lit. b GDPR.
For other business-related enquiries, processing is carried out on the basis of Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in processing and responding to business enquiries and communicating with prospective customers, customers and business partners.
7. Product Demos, Webinar Registrations and Appointment Requests
If you request a product demo, register for a webinar or arrange an appointment with us, we process the information required for this purpose.
This may include in particular:
- name
- company
- email address
- telephone number, if provided
- requested appointment
- event or demo information
- additional information relating to your request
The processing is carried out for the organisation, preparation and execution of the requested contact or event.
Legal basis: Art. 6 para. 1 lit. b GDPR.
8. Cost Savings Calculator
We provide a cost savings calculator on our website.
Information entered by you may be processed in particular in order to:
- perform calculations
- create individual evaluations
- display results
- provide PDF evaluations
- process a request initiated by you
Where personal data is entered in connection with requesting or transmitting an evaluation, this data is processed in order to provide the requested service.
Legal basis: Art. 6 para. 1 lit. b GDPR.
9. Requirements Specification Generator and Requirements Specification Downloads
Our website allows you to create requirements specifications or draft requirements specifications and to request or download corresponding documents.
Depending on the function selected, the following information in particular may be processed:
- name
- email address
- company
- information about the planned software project
- industry and company information
- technical or organisational requirements
- information about existing systems and interfaces
- additional notes provided by you
The processing is carried out in order to generate and provide the requested evaluation or document or to process the corresponding request.
For access-restricted downloads, your name and email address may be processed in order to provide the requested document and may be transmitted to us by email.
Legal basis: Art. 6 para. 1 lit. b GDPR.
10. Storage of Form Data Within the Website
Data submitted through the forms on our website is additionally stored within our WordPress installation to ensure reliable processing.
This storage currently applies to all forms on the website.
The storage serves in particular:
- to ensure traceability of requests
- to protect against data loss
- for error analysis
- for the proper processing of incoming requests
Contact Form CFDB7 is used for the local storage of requests received via Contact Form 7.
Automatic deletion of form data stored in CFDB7 is not configured in the current setup.
The form data stored there is therefore manually reviewed and deleted at least once every 12 months, unless further storage is required for processing a request, due to statutory retention obligations or for other permissible reasons.
Legal basis: Art. 6 para. 1 lit. f GDPR.
Our legitimate interest lies in the reliable and traceable processing of incoming requests.
Where data is submitted via an application form as part of a recruitment process, the legal bases and deletion periods specified in Section 21 also apply.
11. Processing of Prospective Customer and Customer Data in the CRM System
In the case of relevant and valid business enquiries, the submitted data may be transferred to our internal CRM system for further processing.
The CRM system is operated by H&S Software Solutions GmbH and hosted in Germany.
The processing serves in particular:
- the initiation of contractual relationships
- the processing of enquiries
- the documentation of communications
- customer support
- the maintenance of existing business relationships
- sales follow-up of business enquiries
Legal bases: Art. 6 para. 1 lit. b GDPR and, where necessary, Art. 6 para. 1 lit. f GDPR.
There is currently no generally defined recurring deletion period for prospective customer and company records. Data is stored for as long as this is necessary to document previous business communications, maintain an existing or potential business relationship, or prevent unwanted renewed contact.
If a data subject submits a legitimate request for deletion, their personal contact data will be deleted unless statutory retention obligations or other permissible reasons require continued storage.
The company record itself may remain in the CRM insofar as it no longer contains any personal data.
In order to permanently respect an expressed request for deletion or no future contact and to avoid renewed unwanted contact, a contact restriction notice limited to the information necessary for this purpose may be stored in the company record.
12. Email Transmission and Processing of Website Enquiries
We use a technical SMTP connection to transmit messages submitted through our website forms.
Personal data contained in an enquiry is processed for the technical transmission and subsequent processing of the message.
Mail-related protocol and log data generated during technical transmission is deleted after 14 days.
After transmission, incoming messages may be processed in our business email environment. We use Microsoft 365 and Exchange Online, among other services, for this purpose. Further information can be found in Section 15 of this Privacy Policy.
Legal bases: Art. 6 para. 1 lit. b GDPR and Art. 6 para. 1 lit. f GDPR.
Our legitimate interest lies in the reliable technical transmission, processing and documentation of incoming business enquiries.
13. Data Backups
We use technical backup functions to safeguard our website and its data.
These backups may also contain database content and therefore, where applicable, personal data.
The backup copies are stored exclusively in German data centres operated in compliance with the GDPR. No additional external cloud or backup service provider is used for this purpose.
For major changes to the website, baseline versions are permanently archived. According to our internal review, these permanently archived baseline versions contain no personal data.
In addition, ongoing smaller backups are created for technical recoverability. These are deleted or replaced by newer backup versions depending on operational backup and recovery requirements.
The processing is carried out for data security, recoverability and maintaining website operations.
Legal basis: Art. 6 para. 1 lit. f GDPR.
Our legitimate interest lies in safeguarding and ensuring the recoverability of our technical systems.
14. Microsoft Bookings
We use Microsoft Bookings, a Microsoft service, for online appointment scheduling.
The following data in particular may be processed:
- name
- email address
- telephone number, if provided
- appointment data
- information relating to the requested meeting
- technical connection and usage data
The processing is carried out for the organisation and execution of the appointment you have booked.
Legal basis: Art. 6 para. 1 lit. b GDPR.
15. Microsoft 365
We use services provided through Microsoft 365 for business communication, appointment organisation and collaboration.
Based on our current system setup, these include in particular:
- Exchange Online
- Microsoft Teams
- Microsoft SharePoint
- Microsoft Forms
- Microsoft Bookings
Personal data is processed within these services only insofar as necessary for communication, collaboration, processing enquiries or carrying out business processes.
Microsoft 365 Copilot is currently not specifically used to process data from website enquiries, recruitment processes or CRM records.
Legal bases: Art. 6 para. 1 lit. b GDPR and Art. 6 para. 1 lit. f GDPR.
Our legitimate interest lies in secure and efficient business communication and collaboration.
Analytics, Marketing & External Services
16. Google Tag Manager
We use Google Tag Manager provided by:
Google Ireland Limited
Gordon House, Barrow Street
Dublin 4
Ireland
Google Tag Manager is used for the technical management and delivery of website tags and, in particular, enables the control of analytics and marketing services.
Where optional analytics or marketing services are loaded via Google Tag Manager, this is done in accordance with the consent decision you have made.
Legal basis: Art. 6 para. 1 lit. a GDPR in conjunction with Section 25 para. 1 TDDDG, insofar as consent is required.
17. Google Analytics 4
Where you have given your consent, we use Google Analytics 4.
The provider is:
Google Ireland Limited
Gordon House, Barrow Street
Dublin 4
Ireland
Google Analytics helps us understand how visitors use our website and how we can improve the information we provide.
The following information in particular may be processed:
- pages visited
- time and duration of visits
- interactions and events
- source of a website visit
- device and browser information
- technical information
- approximate geographical information
- conversion and usage information
Google Analytics is used in accordance with your consent decision.
Legal basis: Art. 6 para. 1 lit. a GDPR in conjunction with Section 25 para. 1 TDDDG.
You can withdraw your consent at any time with effect for the future via the website's privacy settings.
Google may also process data outside the European Economic Area. The applicable requirements and safeguards under Chapter V GDPR apply to such data transfers.
18. Google Ads and Conversion Tracking
Where you have given your consent, we use Google Ads and the associated conversion tracking.
The provider is:
Google Ireland Limited
Gordon House, Barrow Street
Dublin 4
Ireland
Conversion tracking enables us to determine whether users carry out certain actions on our website after clicking on an advertisement placed by us, for example contacting us or completing another defined conversion.
The data may also be used to evaluate the effectiveness of our advertising measures and optimise campaigns.
Legal basis: Art. 6 para. 1 lit. a GDPR in conjunction with Section 25 para. 1 TDDDG.
Google may also process data outside the European Economic Area. The applicable requirements and safeguards under Chapter V GDPR apply.
19. Microsoft Clarity
Where you have given your consent, we use Microsoft Clarity.
Microsoft Clarity is a service for analysing user behaviour on our website. In particular, the service may be used to analyse usage flows, clicks, scrolling behaviour and interactions and to create heatmaps and session recordings.
The following information in particular may be processed:
- pages accessed
- click behaviour
- mouse movements
- scrolling behaviour
- technical device information
- browser information
- pseudonymous identifiers
- interactions with website content
Microsoft Clarity is used only in accordance with your consent decision.
Legal basis: Art. 6 para. 1 lit. a GDPR in conjunction with Section 25 para. 1 TDDDG.
The retention period is specified by Microsoft and cannot be individually configured by us within the Clarity project.
After the respective retention period has expired, the corresponding data, including the associated backups, is deleted.
Processing may also take place outside the European Economic Area.
You can withdraw your consent at any time via the privacy settings.
20. Leadinfo
Where you have given your consent, we use Leadinfo.
The provider is:
Leadinfo B.V.
Rivium Quadrant 141
2909 LC Capelle aan den IJssel
Netherlands
Leadinfo helps us identify and analyse visits to our website by companies.
For this purpose, IP addresses and usage information, among other data, may be processed and – where possible – assigned to companies.
We use the information obtained in particular:
- to analyse business-related website visits
- to improve the information we provide
- to assess business interest
- to support our sales activities
Leadinfo is configured in our consent management system as a consent-based service.
Legal basis: Art. 6 para. 1 lit. a GDPR in conjunction with Section 25 para. 1 TDDDG, insofar as access to the user's device or corresponding technologies is involved.
Consent can be withdrawn at any time with effect for the future via our privacy settings.
21. Job Applications
You can apply to us via our careers form or by email.
As part of an application process, we may process the following data in particular:
- name and contact details
- cover letter
- CV / résumé
- evidence of qualifications and professional experience
- certificates and references
- other application documents
- correspondence relating to the application process
- any further information you provide to us voluntarily
The processing is carried out for the purpose of conducting the application process and deciding whether to establish an employment relationship.
Legal basis: Section 26 BDSG in conjunction with Art. 6 para. 1 lit. b GDPR.
If no employment relationship is established, application documents are generally deleted no later than six months after completion of the application process, unless statutory reasons or the establishment, exercise or defence of legal claims justify longer storage.
Inclusion in an applicant pool beyond this period takes place only on the basis of separate consent.
22. Recipients of Personal Data
Personal data is disclosed only insofar as this is legally permissible and necessary for the respective processing purpose.
Recipients or categories of recipients may include in particular:
- hosting and email service providers
- Microsoft and service providers affiliated with Microsoft
- Google and service providers affiliated with Google
- Leadinfo
- technical service providers
- processors
- communication and appointment platforms
- other service providers insofar as this is necessary to provide our services
Where service providers process personal data on our behalf and the statutory requirements are met, we enter into corresponding data processing agreements in accordance with Art. 28 GDPR.
23. Data Transfers to Third Countries
Some of the services used on this website are provided by companies that may also process personal data outside the European Union or the European Economic Area.
Such transfers take place only in compliance with the requirements of Art. 44 et seq. GDPR.
Depending on the recipient, a data transfer may in particular be based on:
- an adequacy decision by the European Commission pursuant to Art. 45 GDPR
- applicable certification under a recognised data protection framework
- Standard Contractual Clauses issued by the European Commission pursuant to Art. 46 GDPR
- other appropriate safeguards provided for by law
Further information regarding the respective services can be found in the preceding sections and in the privacy settings of our website.
24. Retention Period
As a general rule, we store personal data only for as long as necessary to fulfil the respective processing purpose.
The data is subsequently deleted or anonymised unless statutory retention obligations, legitimate interests or other legal grounds require continued storage.
When determining the retention period, we take into account in particular the respective processing purpose, statutory retention and limitation periods, an existing business or contractual relationship, and technically or contractually specified deletion periods.
Specifically known periods and criteria include in particular:
- validity of a cookie consent decision: 365 days
- documented proof of cookie consent: 120 months
- form data stored locally in CFDB7: manual review and deletion at least every 12 months, unless further permissible storage is required
- mail/SMTP logs relating to website transmission: 14 days
- Google Analytics event data: 2 months
- Google Analytics user data: 14 months
- Microsoft Clarity playback data: 30 days
- Microsoft Clarity heatmaps and marked or favourited sessions: 9 months
- application documents where no employment occurs: generally no later than 6 months after completion of the application process
- ongoing website backups: depending on operational backup and recovery requirements; backup versions that are no longer required are deleted or replaced
- permanently archived baseline versions of the website do not contain personal data
- server log data: only for as long as necessary for the secure and reliable technical operation of the website or where statutory obligations require longer storage
- prospective customer and company records in the CRM: no generally defined recurring deletion period; personal data is processed in accordance with the purposes and deletion criteria described in Section 11
25. Newsletter
We currently do not offer a newsletter with a separate newsletter subscription via adasma.de.
If we offer a newsletter or comparable promotional email communication with separate registration in the future, this Privacy Policy will be updated accordingly before such a service is introduced.
26. ADASMA Customer Portal and Customer-Specific Environments
The ADASMA Customer Portal is not directly part of the website provided at adasma.de.
Customer-specific ADASMA environments and customer portals are operated on separate customer domains or in customer-specific environments.
The data protection information and contractual provisions applicable to the respective environment apply to the processing carried out there.
27. Changes to this Privacy Policy
We reserve the right to amend this Privacy Policy if legal requirements, the services used, technical procedures or our business processes change.
The version published on our website at the relevant time applies.
Questions About Data Protection
If you have any questions about data protection, you can contact us:
H&S Software Solutions GmbH
Lindenstraße 65
48431 Rheine
Phone: +49 5971 946 13-0
Email: info@hs-solutions.de