Privacy Policy

The data controller responsible for this website is: Christian Piana / CMMX IT Gladiolenstraße 27, 85586 Poing, Germany Email: christian.piana@cmmxit.com Phone: +49 176 72865811

We collect personal data only when you voluntarily provide it through our contact form. The data collected includes: • Name • Email address • Company name (optional) • Message content We do not collect data passively through cookies, tracking pixels, or fingerprinting. We do not use Google Analytics or any third-party tracking service.

Your contact form data is processed solely to respond to your inquiry. The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures) and Art. 6(1)(f) GDPR (our legitimate interest in responding to business inquiries). We do not use your data for marketing, profiling, or automated decision-making.

To operate this website and process your inquiries, we use the following services: • Vercel Inc. (USA) — website hosting. Privacy policy: vercel.com/legal/privacy-policy • Cloudflare Inc. (USA) — DNS, security, and web analytics (cookieless, no personal data). Privacy policy: cloudflare.com/privacypolicy • Resend Inc. (USA) — email delivery for contact form submissions. Privacy policy: resend.com/legal/privacy-policy These providers act as data processors under Art. 28 GDPR. Data transfers to the USA are covered by the EU–US Data Privacy Framework (DPF) and/or Standard Contractual Clauses (SCCs).

Our contact form uses Cloudflare Turnstile to protect against spam and bot submissions. Turnstile may set a strictly necessary cookie (cf_clearance) to verify that you are a human visitor. This cookie is exempt from consent requirements under Art. 5(3) of the ePrivacy Directive as it is essential for security. No personal data is collected by Turnstile for tracking purposes.

We use Cloudflare Web Analytics to understand how visitors use our website. This service is privacy-first: it does not use cookies, does not collect personal data, and does not track individual visitors. It provides aggregate metrics only (page views, referrers, countries, device types). No consent is required.

We store your theme preference (dark/light mode) and language selection in your browser's local storage. This data never leaves your device and is not transmitted to any server.

Contact form submissions are delivered to our email inbox and are not stored on the website server. We retain correspondence for as long as necessary to respond to your inquiry and for any resulting business relationship, after which it is deleted.

Under the GDPR, you have the right to: • Access the personal data we hold about you (Art. 15) • Rectification of inaccurate data (Art. 16) • Erasure of your data (Art. 17) • Restriction of processing (Art. 18) • Data portability (Art. 20) • Object to processing (Art. 21) To exercise any of these rights, contact us at christian.piana@cmmxit.com. You also have the right to lodge a complaint with a supervisory authority. The competent authority for Bavaria is: Bayerisches Landesamt für Datenschutzaufsicht (BayLDA) Promenade 18, 91522 Ansbach, Germany https://www.lda.bayern.de

We may update this privacy policy to reflect changes in our practices or legal requirements. The updated version will be published on this page with a revised date.