In accordance with Article 13 of the EU General Data Protection Regulation (GDPR), we are providing you with information regarding which of your personal data is being processed.

Data Controller

The entity responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) and other data protection regulations is:

Pecan Development GmbH
Managing Directors: Markus Brod, Rüdiger Lehmann, Jan Kunze
Bockenheimer Landstr. 72
60323 Frankfurt am Main
Germany

Phone: +49 (0) 69 7144988-0
Email:

General Information

Legal Basis

In general, we collect and process personal data based on the following legal grounds:

a. Consent pursuant to Article 6(1)(a) of the General Data Protection Regulation (GDPR). Consent is any freely given, specific, informed, and unambiguous indication of the data subject’s wishes, expressed by a statement or by a clear affirmative action, by which the data subject indicates that they consent to the processing of their personal data.

b. Necessity for the performance of a contract or the implementation of pre-contractual measures pursuant to Article 6(1)(b) of the GDPR, i.e., the data is necessary for us to fulfill our contractual obligations toward you, or we need the data to prepare for the conclusion of a contract with you.

c. Processing to comply with a legal obligation pursuant to Article 6(1)(c) of the GDPR, i.e., processing of the data is required, for example, by law or other regulations.

d. Processing to protect legitimate interests pursuant to Article 6 (1)(f) of the GDPR, i.e., processing is necessary to protect our legitimate interests or those of a third party, unless your interests or fundamental rights and freedoms that require the protection of personal data take precedence.

The specific legal bases for the individual processing activities are listed in the following sections.

Data Subject Rights

You have the following rights regarding our processing of your data:

a. The right to lodge a complaint with a supervisory authority pursuant to Article 13(2)(d) of the GDPR and Article 14(2)(e) of the GDPR

b. Right of access pursuant to Article 15 of the GDPR

c. Right to rectification pursuant to Article 16 of the GDPR

d. Right to erasure (“right to be forgotten”) pursuant to Article 17 of the GDPR

e. Right to restriction of processing pursuant to Article 18 of the GDPR

f. Right to data portability pursuant to Article 20 of the GDPR

g. Right to object pursuant to Article 21 of the GDPR

Note: Users may object to the processing of their personal data at any time, with future effect, in accordance with legal requirements. In particular, the objection may be directed against processing for direct marketing purposes.

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, your workplace, or the location of the alleged infringement, if you believe that the processing of your personal data violates the GDPR.

Data Erasure and Retention Period

The data subject’s personal data will be erased or blocked as soon as the purpose for which it was stored no longer applies. Data may also be retained if this is provided for by European or national legislation in Union regulations, laws, or other provisions to which the controller is subject. Data will also be blocked or erased when a retention period prescribed by the aforementioned standards expires, unless further storage of the data is necessary for the conclusion or performance of a contract.

Security of Processing

We have implemented appropriate technical and organizational security measures (TOMs) that are state-of-the-art. This protects the data we process from accidental or intentional manipulation, loss, destruction, and unauthorized access.
These security measures include, in particular, the encrypted transmission of data between your browser and our server.

Data Transfer to Third Parties, Subcontractors, and Third-Party Providers

Personal data is transferred to third parties only in accordance with legal requirements. We disclose user data to third parties only when necessary, for example, for billing purposes, or for other purposes where the transfer is necessary to fulfill contractual obligations toward users.

If we use subcontractors for our online services, we have put in place appropriate contractual arrangements as well as corresponding technical and organizational measures with these companies.

If we use content, tools, or other resources from other companies (hereinafter collectively referred to as “third-party providers”) and their registered offices are located in a third country, it can be assumed that a data transfer to the third-party providers’ countries of residence will take place. We transfer personal data to third countries only if an adequate level of data protection is ensured, the user has given consent, or another legal basis exists.

Data Processing in Connection with Our Online Services

Hosting and Server Log Files

Our website’s servers are operated by the provider Host Europe GmbH, Friesenplatz 4, 50672 Cologne. We have entered into a data processing agreement with the provider in accordance with Art. 28 of the GDPR. The legal basis for using an external hosting provider is the fulfillment of a contract with our potential and existing customers pursuant to Article 6(1)(b) of the GDPR, as well as our legitimate interest in providing our website securely and efficiently in accordance with Article 6(1)(f) of the GDPR.

Each time our website is accessed, our system’s web server collects information about the device used. We collect the following data:

• Information about the browser type
• Operating system of the user’s device
• Date and time of access
• The previous website from which the user accessed our website (referrer)

We collect IP addresses only in anonymized form; therefore, we do not store any personal data as defined by the GDPR in our log files.

The server is located in Germany.

WPML

This website uses the WordPress language plugin WPML from OnTheGoSystems Limited, 22/F 3 Lockhart Road, Wanchai, Hong Kong, to offer German and
English versions of the website.

WPML uses cookies to determine the visitor’s current language, the last language visited, and the language of logged-in users.

Information about the cookies used can be found at https://wpml.org/documentation/support/browser-cookies-stored-wpml.

Matomo

We use the web analytics software Matomo on our website. Matomo is hosted on our own servers, so no data is shared with third parties.

The legal basis for using Matomo is our legitimate interest pursuant to Art. 6(1)(f) of the GDPR to analyze and optimize our website by understanding user behavior and improving the user experience.

The data processed by Matomo includes your IP address (anonymized), the location and time of your visit, device information, browser details, and information about your interaction with the website.

The purpose of data processing is the statistical analysis of user behavior and the creation of anonymous user profiles.

Collection of Information on Website Usage

When you use the website, information is automatically transmitted to us from your browser; including the name of the webpage accessed, the file, the date and time of access, the amount of data transferred, a notification of successful access, the browser type and version, the user’s operating system, the referrer URL (the previously visited page), the IP address, and the requesting provider.

This information is processed on the basis of legitimate interests pursuant to Article 6(1)(f) of the GDPR (e.g., optimizing our website) as well as to ensure the security of processing in accordance with Article 5(1)(f) of the GDPR (e.g., to defend against and investigate cyberattacks).

The information is automatically deleted no later than 14 days after the end of the connection—i.e., use of the website—unless other retention periods apply.

The collection and storage of data in log files is strictly necessary for the provision of the website. Therefore, the user has no right to erasure, objection, or rectification.

Contact Form

If you submit inquiries to us via the contact form, the information you provide in the inquiry form—including the contact details you enter there—will be stored by us for the purpose of processing your inquiry and in case of follow-up questions. We will not disclose this data without your consent.

The processing of the data entered into the contact form is therefore based exclusively on your consent (Art. 6(1)(a) GDPR). You may revoke this consent at any time with future effect. To do so, simply send us an informal email. The lawfulness of the data processing operations carried out prior to the revocation remains unaffected by the revocation.

The data you enter in the contact form will remain with us until you request that we delete it, revoke your consent to its storage, or the purpose for storing the data no longer applies (e.g., after your inquiry has been processed). Mandatory legal provisions—in particular retention periods—remain unaffected.

Links to Other Websites

While using some of our services, you may be automatically redirected to other websites.

Please note that this Privacy Policy does not apply to those sites. The privacy policy of the linked website may differ significantly from this one.

Cookies and Similar Technologies

General Information

Cookies are pieces of information that are transmitted from our web server or third-party web servers to users’ web browsers and stored there for later retrieval. Cookies may be small files or other forms of information storage.

If users do not wish to have cookies stored on their computers, they are asked to disable the corresponding option in their browser’s settings. Stored cookies can be deleted in the browser’s settings. Disabling cookies may result in limited functionality of this website.

Cookie Overview, Options for Objection

We use only necessary cookies and similar technologies; therefore, there are no options to opt out.

Changes to the Privacy Policy

We reserve the right to amend this Privacy Policy with regard to data processing in order to adapt it to changes in the legal landscape, changes to the online service, or changes in data processing.

If user consent is required or if parts of the Privacy Policy contain provisions governing the contractual relationship with users, changes will only be made with the users’ consent.

Users are asked to review the content of this Privacy Policy regularly.

Effective: November 3, 2026