Privacy Policy

Controller

Picologic GmbH

Weyertal 5

50937 Köln

Germany

Phone: 0221 66942877

Fax: 0221 66942870

Email: info@picologic.de

Access data and server logs

When this website is accessed, technical access data is processed so the website can be delivered securely and reliably.

• IP-Adresse
• date and time of access
• requested URL and HTTP method
• status code and transferred data volume
• referrer, if transmitted by the browser
• browser and operating system information from the user agent

The legal basis is Art. 6(1)(f) GDPR. The legitimate interest is secure operation, troubleshooting and abuse prevention. Log data is normally deleted or anonymised after a short technical retention period, unless longer storage is required to investigate security incidents.

Required cookies and sessions

The website may use technically required cookies or session identifiers, for example for CSRF protection, language handling, form security or authenticated internal views. These are not used for advertising tracking.

The legal basis is Art. 6(1)(f) GDPR and, where required, the rules for strictly necessary access to terminal equipment.

Contact inquiries

We use your name, email address and message to handle your inquiry and reply to you. Company, service and current website details are optional. Without an email address and message we cannot process an inquiry through this form. Please do not include sensitive personal data that is unnecessary for your inquiry.

For inquiries concerning a contract or steps requested before entering into a contract, the legal basis is Art. 6(1)(b) GDPR. For other inquiries, the legal basis is Art. 6(1)(f) GDPR, subject to a balancing of interests; our legitimate interest is responding to inquiries addressed to us. The required privacy checkbox acknowledges this information and is not consent to processing or marketing. Its value and an acknowledgement timestamp are not included in the contact email or separately recorded.

The form sends your inquiry to Picologic by email and sends a copy to the address you provide. Hosting and email service providers may process the data for delivery and operation. The contact form does not create a separate inquiry record in the application database. Rejected submissions log the technical rejection reason without adding your email address or IP address to that event; regular server logs remain separate.

Inquiry correspondence is retained only as long as needed to handle the inquiry and any follow-up, unless legal retention obligations or the establishment, exercise or defence of legal claims require longer storage. Invalid submissions may be temporarily retained in the session so you can correct them. You can contact info@picologic.de to exercise your rights, including objecting to processing based on legitimate interests.

Forms, comments and uploads

If forms, comments, private messages or file uploads are used, the submitted content and technical metadata required for processing are stored and processed. This can include names, contact details, message text, uploaded files, timestamps and moderation status.

The legal basis is Art. 6(1)(b) GDPR where processing is necessary for requested communication or services, Art. 6(1)(f) GDPR for moderation, security and abuse prevention, and Art. 6(1)(a) GDPR where consent is requested.

Technical tools and counters

Interactive tools, calculators or system interfaces may process the entered values in the browser and on the server where needed. Aggregate counters may store only a number of uses and the last execution time. They are not intended to store IP addresses or user identifiers in the counter file.

Independent of this, regular server logs can still contain IP addresses as described above.

CyberCheck

CyberCheck is a voluntary security and performance check for publicly reachable HTTP(S) websites. When you register a website, we process the submitted website URL, the detected host name, your email address, the confirmation and management tokens generated for the process, timestamps for consent, confirmation and checks, a hashed request IP address, the browser user agent and the technical check results.

The check results may include the requested URL, final URL after redirects, HTTP status, response time, response size, response header names and findings about basic security and performance configuration. CyberCheck does not perform penetration tests, load tests, vulnerability exploitation or scans of internal networks.

The legal basis is Art. 6(1)(a) GDPR for the requested check and confirmation process and Art. 6(1)(f) GDPR for abuse prevention, documentation and secure operation. You can pause or delete checks at any time using the management link included in every email.

EU AI Act compliant AI infrastructure

Our AI systems are developed, operated and assessed in accordance with the requirements of Regulation (EU) 2024/1689, the EU Artificial Intelligence Act.

Where permitted for the relevant AI system under the EU AI Act, we perform conformity assessment through the internal control procedure under Annex VI of the EU AI Act.

The assessment includes in particular:

• classification of the AI system and its intended purpose
• risk management and documented risk assessment
• technical documentation
• data and information flows
• logging and traceability
• human oversight
• accuracy, robustness and cybersecurity
• transparency towards users
• quality management
• monitoring during operation and throughout the full lifecycle
• documentation of substantial changes to the system

Our long-standing experience in software development, IT and AI infrastructure and the setup and operation of productive systems forms the professional basis for these internal audit and assessment processes.

For us, conformity is not a one-time check, but part of the system architecture and the full lifecycle of an AI system.

Where required by the applicable risk classification or other EU legislation, external conformity assessment or involvement of a notified body is incorporated into the compliance process.

Recipients and hosting

Data may be processed by technical service providers used for hosting, server operation, email delivery, backups, maintenance and security. These providers process data only as far as technically or contractually necessary.

Your rights

You have the right to request access, rectification, erasure, restriction of processing and data portability where the legal requirements are met. You may object to processing based on legitimate interests and withdraw consent with effect for the future.

You also have the right to lodge a complaint with a data protection supervisory authority.

No advertising tracking

This website is not intended to use advertising trackers, profiling cookies or third-party advertising networks.