Privacy notice

Controller

Tobias Weckesser · PreTeSo, Pielsticker Str. 23, 45326 Essen, Germany. For privacy enquiries: welcome@preteso.com.

Website and hosting

We use STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany, as our hosting provider and data processor. Website visits involve processing technical access data, particularly your IP address, the time of access and the content requested. This supports website delivery and security based on our legitimate interest under Article 6(1)(f) GDPR. According to STRATO, visitor log files are retained for no more than seven days; access logs with anonymised IP addresses or hostnames are available for six weeks.

Contact form and email

When you contact us through our form or by email, we process your contact details, message and attachments to handle your enquiry. The legal basis is Article 6(1)(b) GDPR for pre-contractual steps or contracts with you; otherwise it is Article 6(1)(f) GDPR based on our legitimate interest in business communication. Providing information is voluntary; without sufficient details we may be unable to respond. STRATO provides email and archiving services. Messages are also processed on our work computers. We have a data processing agreement with STRATO. For archiving, STRATO uses IONOS SE (Germany) and Dropsuite Ltd. (Singapore). For third-country transfers involving Dropsuite, our agreement provides for EU Standard Contractual Clauses under Article 46(2)(c) GDPR. You may contact us for information and a copy of these safeguards. The form requires an email address and message; your name is optional. Enquiries are sent to welcome@preteso.com; there is no separate form database. To prevent automated abuse, we use signed form tokens valid for one hour and server-side counters with a keyed hash of the IP address that is not directly readable. Counters apply for no more than one hour and are replaced on the next form submission after expiry. The legal basis is Article 6(1)(f) GDPR and our legitimate interest in protecting the form. No additional browser cookies are set for this purpose.

Retention

We retain personal data for as long as it is needed to handle your enquiry or conduct our business relationship. Further retention takes place where statutory retention duties apply or the data is needed to establish, exercise or defend legal claims. Statutory retention is based on Article 6(1)(c) GDPR, particularly in conjunction with section 147 of the German Fiscal Code (AO); necessary retention for legal claims is based on Article 6(1)(f) GDPR. The data is then deleted.

Language, display and external services

By default, we use your browser or system language and your system colour scheme. A manually selected language or display preference is saved only for the current tab session in Session Storage (preteso-language and preteso-theme). This serves the setting you expressly requested (section 25(2)(2) TDDDG); to the extent personal data is processed, Article 6(1)(f) GDPR applies based on our interest in providing that setting. You can delete the entries in your browser; restoring a browser session may restore them. Previous persistent preferences are removed. We do not use analytics or advertising tracking services, external video players or newsletter forms. Fonts and graphics are served through our own website.

Your rights

Subject to the statutory conditions, you have rights of access, rectification, erasure, restriction of processing and data portability (Articles 15–20 GDPR). You may withdraw consent at any time with future effect; the lawfulness of prior processing remains unaffected. Where processing relies on legitimate interests, you may object on grounds relating to your particular situation (Article 21 GDPR). We stop processing unless overriding compelling legitimate grounds or necessary legal claims justify continuing. You may object to direct marketing at any time without giving reasons. Contact: welcome@preteso.com.

Right to complain

You may complain to a data protection supervisory authority, particularly where you reside, work or where an alleged infringement occurred. The authority responsible for our business location is the North Rhine-Westphalia Commissioner for Data Protection and Freedom of Information (LDI NRW), Kavalleriestraße 2–4, 40213 Düsseldorf, Germany; poststelle@ldi.nrw.de; www.ldi.nrw.de. The website use and enquiry handling described here do not involve automated decisions, including profiling, with legal or similarly significant effects.

Updated: 12 October 2026

Back to home ↗