With this privacy policy, we inform you in accordance with Art. 13 and 14 of the General Data Protection Regulation (GDPR, German: DSGVO) about which personal data we process when you visit our website www.softlare.de or contact us, for what purposes and on what legal basis this is done, and what rights you have. The German version of this privacy policy is the legally binding one; this translation is provided for information purposes only.
Scope: This privacy policy applies only to our website www.softlare.de and to contacting us. It does not apply to our SBM software or the SBM employee app. Where we process personal data in connection with SBM (e.g. when operating the databases or providing support), we do so on behalf of our customers as a processor (Art. 28 GDPR); the controller is the respective customer company, and the contracts concluded with it apply.
Softlare GmbH
Hafenstr. 93 A
67547 Worms
Germany
Phone: +49 (0) 6241 678 789-0
Email: info@softlare.de
Represented by the managing director, Ural Ikinci
Our company is not legally required to appoint a data protection officer and has therefore not appointed one. If you have any questions about data protection, you can reach us using the contact details above.
We process personal data on the following legal bases:
Information is stored on your device and accessed there (for example by cookies) only with your consent under § 25 Abs. 1 of the German Telecommunications Digital Services Data Protection Act (Telekommunikation-Digitale-Dienste-Datenschutz-Gesetz, TDDDG), unless this is strictly necessary for us to provide a service you have expressly requested (§ 25 Abs. 2 Nr. 2 TDDDG).
We store personal data only for as long as is necessary for the respective purpose or required by statutory retention periods (in particular up to six years for commercial letters under § 257 HGB, the German Commercial Code, and up to ten years for tax-relevant documents under § 147 AO, the German Fiscal Code). After that, the data is deleted. We state the specific periods for the individual processing operations.
We use carefully selected service providers who process data on our behalf and in accordance with our instructions (processors under Art. 28 GDPR), for example for hosting. We have concluded data processing agreements with them. Beyond this, we only pass on data if a legal basis permits this, for example to authorities where there is a legal obligation.
Some of the providers named below are based in the USA or have their parent company there. Transfers to the USA take place on the basis of the European Commission’s adequacy decision on the EU-US Data Privacy Framework (Art. 45 GDPR), insofar as the recipient is certified under it, and additionally on the basis of the European Commission’s standard contractual clauses (Art. 46(2)(c) GDPR). We point out possible transfers for the individual services.
Our website is operated on servers of Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, in a data centre in Germany. Hetzner processes the data as a processor.
Each time our website is accessed, your browser automatically transmits data to our server, which is stored in log files:
The processing serves to deliver the website, to ensure the security and stability of our systems and to analyse errors. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in a secure and functioning website. The log files are deleted after 14 days at the latest, unless a specific security incident requires longer retention for investigation. The data is not combined with other data sources or analysed for identification purposes.
We use cookies that are strictly necessary for the operation of the website – for example to protect forms against misuse (security token) and to store your cookie selection. The legal basis is § 25 Abs. 2 Nr. 2 TDDDG in conjunction with Art. 6(1)(f) GDPR. We use all other cookies and comparable technologies only with your consent.
To manage your consents, we use Cookiebot from Usercentrics A/S, Havnegade 39, 1058 Copenhagen, Denmark, as a processor. When you visit the website, your consent decision, a randomly generated consent ID, the date and time, your shortened IP address, browser information and the domain accessed are processed. Your selection is stored in the cookie “CookieConsent” on your device for up to twelve months; the record of your consent is stored by Usercentrics on servers in the EU and deleted after twelve months. To determine the appropriate language and region of the banner, Usercentrics uses a service provider in the USA (Akamai); a transfer to the USA is possible in this context (see section 2.4). The processing serves as proof of consent (Art. 7(1) GDPR); the legal basis is Art. 6(1)(c) GDPR and, for the cookie, § 25 Abs. 2 Nr. 2 TDDDG.
You can withdraw or change your consent at any time with effect for the future – via the “Cookie settings” link in the footer of every page. An up-to-date overview of the cookies used, with their purpose and storage period, can be found at the end of this privacy policy.
If you contact us by email, by phone or via a form on our website, we process the data you provide (e.g. name, company, email address, phone number, your message and the date and time) in order to handle your enquiry. Mandatory fields are marked as such; without this information we cannot handle your enquiry. Form entries are stored on our server and forwarded to us by email; incoming emails are checked for spam and malware by a service provider based in Germany before delivery.
The legal basis is Art. 6(1)(b) GDPR if your enquiry relates to a contract or pre-contractual measures, and otherwise Art. 6(1)(f) GDPR (our legitimate interest in responding to enquiries). We delete the data as soon as your enquiry has been dealt with conclusively, unless statutory retention obligations prevent this.
To protect our forms against spam and automated attacks, we use Google reCAPTCHA (part of Google Cloud). The provider is Google Cloud EMEA Limited, 70 Sir John Rogerson’s Quay, Dublin 2, Ireland (“Google”), which operates reCAPTCHA as our processor. reCAPTCHA is only loaded when you start filling in a protected form. In the process, your IP address, information about your browser and device, your behaviour on the page (e.g. time spent and entries) and a cookie are processed in order to assess whether the entry comes from a human. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in protecting our website against abusive requests. Access to your device takes place under § 25 Abs. 2 Nr. 2 TDDDG because it is necessary for the secure submission of the form that you have requested. Processing by Google’s sub-processors in the USA is possible (see section 2.4). The data is not used for advertising purposes. If you wish to avoid reCAPTCHA, you can reach us at any time by email or phone.
To book online presentations and consultation appointments, we use the Cal.com service of Cal.com, Inc., 2261 Market St #4382, San Francisco, CA 94114, USA. The booking form is only loaded when you click an appointment button or open an appointment page. In the process, your IP address and technical information are transmitted, and Cal.com sets technically necessary cookies. When you make a booking, we process the data you enter (in particular name, email address, company if applicable, phone number and comments, as well as the selected appointment) in order to arrange and hold the appointment and to remind you of it.
The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures at your request) and, for access to your device, § 25 Abs. 2 Nr. 2 TDDDG. Cal.com processes the data as a processor in the USA. According to its own information, Cal.com is certified under the EU-US Data Privacy Framework; standard contractual clauses also apply (see section 2.4). We delete the appointment data when it is no longer needed for initiating or conducting a business relationship and there are no retention obligations. Alternatively, you can arrange an appointment with us at any time by phone or email. Further information: cal.com/privacy.
The following services are only loaded once you have consented to the respective category via the cookie banner (Art. 6(1)(a) GDPR, § 25 Abs. 1 TDDDG). Without consent, no connection to these providers is established. You can withdraw your consent at any time via “Cookie settings”; the lawfulness of the processing carried out until the withdrawal remains unaffected.
With your consent, we use Google Analytics 4 from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”), which acts as our processor, to statistically analyse and improve the use of our website (e.g. pages accessed, time spent, clicks on buttons, origin of visits, device, browser and approximate region). For this purpose, Google Analytics uses cookies (e.g. “_ga”, “_ga_*”) with a storage period of up to two years and pseudonymous identifiers. According to Google, IP addresses of users in the EU are not logged or stored by Google Analytics 4, but are only used on servers in the EU to determine the approximate location and are then discarded. The analytics data is automatically deleted after 14 months at the latest. The data is processed on Google servers; a transfer to Google LLC in the USA is possible (see section 2.4). Further information: policies.google.com/privacy.
With your consent, we use Google Tag Manager from Google Ireland Limited. Tag Manager is a tool with which we integrate other services into our website; it does not itself analyse any usage data, but it does process your IP address when it loads.
Via Tag Manager, we use the Meta Pixel of Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland (“Meta”). This allows us to measure the effectiveness of our adverts on Facebook and Instagram and to show adverts there to visitors to our website. In particular, your IP address, browser information, the pages visited and actions performed, as well as the cookie “_fbp” (storage period up to three months), are processed. If you are logged in to Facebook or Instagram, Meta can attribute the visit to your account. We are jointly responsible with Meta for the collection and transfer of the data to Meta (Art. 26 GDPR); you can find the agreement at facebook.com/legal/controller_addendum. Meta is solely responsible for any further processing. A transfer to Meta Platforms, Inc. in the USA is possible (see section 2.4). Further information: facebook.com/privacy/policy.
With your consent, we also record your visit to our SBM product pages in our own CRM system in order to see which advertising and content lead to appointment requests. For this purpose, we store a random visitor ID in your browser's storage (localStorage) for 90 days and process the page viewed, the origin of the visit (campaign parameters, referring website, type of click ID), your interactions (e.g. buttons, film, FAQ, time on page, scroll depth) and the booking ID of an arranged appointment, which allows the visit to be linked to that appointment. Name, e-mail address and telephone number are not recorded; the IP address is not stored in these records. The legal basis is your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG). The records are deleted after 91 days. You can withdraw your consent at any time via the cookie settings.
On our contact page, you can display a map from Google Maps provided by Google Ireland Limited. The map is only loaded when you click “Load map” or have consented to the “Marketing” category. In the process, your IP address and information about your use of the map in particular are transmitted to Google; Google may set cookies. The legal basis is your consent (Art. 6(1)(a) GDPR, § 25 Abs. 1 TDDDG). A transfer to Google LLC in the USA is possible (see section 2.4). Further information: policies.google.com/privacy.
We receive applications via our applicant portal (cv.softlare.de), which is integrated into the careers page and operated on our servers in Germany, and by email. We process your details and documents (e.g. contact details, CV, references, qualifications) exclusively for the application process. The legal basis is Art. 6(1)(b) GDPR (initiation of an employment relationship). Where you voluntarily provide us with special categories of personal data (such as information on a severe disability), we process these under Art. 9(2)(b) GDPR.
If no employment relationship is established, we delete your data six months after the end of the application process; this period serves to defend against possible claims (Art. 6(1)(f) GDPR, § 15 Abs. 4 AGG, the German General Equal Treatment Act). Longer storage, for example for future vacancies, only takes place with your consent. If you are hired, the data is transferred to your personnel file.
We maintain profiles on Facebook, Instagram, LinkedIn, X and YouTube. On our website, these are only linked; no plugins are integrated, so no data is transmitted to these networks when you visit our website. Only when you follow a link do the data protection provisions of the respective provider apply.
If you visit our profiles, the operators process your data under their own responsibility. For statistics on our pages on Facebook, Instagram and LinkedIn, we are jointly responsible with Meta or with LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland, respectively (Art. 26 GDPR); the operators have undertaken to fulfil the data subject rights. The legal basis for our presence is Art. 6(1)(f) GDPR (communication with customers, prospective customers and applicants).
We embed fonts, images and videos from our own server. No data is transmitted to third parties such as Google Fonts or video platforms in the process. Links to external websites (e.g. to download our remote support software) take you to services of other providers, who are themselves responsible for their data processing.
Our website is transmitted exclusively in encrypted form (TLS, recognisable by “https://”). We take technical and organisational measures to protect your data against loss, manipulation and unauthorised access, and adapt these to the state of the art.
You have the following rights vis-à-vis us with regard to the personal data concerning you:
An informal message to the contact details given in section 1 is sufficient for your request. The competent supervisory authority for our company is the State Commissioner for Data Protection and Freedom of Information of Rhineland-Palatinate (Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Rheinland-Pfalz), Hintere Bleiche 34, 55116 Mainz, postal address: Postfach 30 40, 55020 Mainz (www.datenschutz.rlp.de). You can also contact the supervisory authority of your place of residence or place of work.
You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you that is carried out on the basis of Art. 6(1)(f) GDPR. We will then no longer process the data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.
If your data is processed for direct marketing purposes, you can object to this processing at any time; we will then no longer use your data for these purposes.
No particular form is required for the objection; the easiest way is to send an email to info@softlare.de.
You are under no legal or contractual obligation to provide us with personal data. However, without the information required for an enquiry, appointment booking or application, we cannot process it. No automated decision-making, including profiling within the meaning of Art. 22 GDPR, takes place.
This privacy policy is dated October 2026. We will adapt it if our website, the services we use or the legal situation change. The version published on this page applies in each case.
Cookie declaration
The following overview is generated automatically by Cookiebot and shows all cookies used on this website with their provider, purpose and storage period, as well as your current consent status.
Deutsch
English
Magyar
Polski
Română
Türkçe
Українська
Български