ssl-contact
DE EN

Data protection for ssl-contact.de

As of: 09.10.2026

This policy describes which personal data we process when you use ssl-contact.de or a contact form from ssl-contact.de. In short: we set no cookies, use no analytics or tracking services, and do not store the messages sent through the contact forms.

1. Controller

G.I.G OOD
Maragidik Street No. 19
8000 Burgas, Bulgaria
UIC: 208570125
E-mail: info@ssl-contact.de

Please also send all questions about data protection to this address.

2. Visiting ssl-contact.de

When you open our pages, your browser transmits technically necessary data to our server: IP address, date and time, the address requested, status code, amount of data transferred, the page visited before, and your browser’s identification. The server records this data in log files so that we can keep the service secure and investigate faults and attacks. The logs are deleted after 14 days.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is secure and trouble-free operation.

We set no cookies and do not use your browser’s storage. Fonts, scripts and images come from our own server; we do not load content from third parties.

3. Hosting

Our servers are operated by IONOS SE, Elgendorfer Straße 57, 56410 Montabaur, Germany, in data centres in Germany. We also send our e-mails via IONOS. IONOS processes the data on our behalf (Art. 28 GDPR).

4. Creating and managing a contact form

When you create a contact form, we store:

  • the e-mail address to which the form is to send the messages,
  • the domain of your website,
  • the settings of the form (fields, language, colours, font),
  • the time of creation, of your consent to the terms of use and of the confirmation of your address,
  • whether the form is ad-free.

We need this data to provide the form (Art. 6(1)(b) GDPR). We do not store your IP address with the form.

Protection against misuse: To prevent forms from being created in bulk through our site and other people’s mailboxes from being flooded with confirmation e-mails, we limit the number of operations per connection and per e-mail address. For this purpose we store checksums of your IP address and of the e-mail address stated for two days, not the values themselves. The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is protecting the service and uninvolved third parties.

Deletion: You can delete your form yourself at any time. It is deactivated immediately, and we delete the stored information no later than 30 days afterwards. We delete forms whose e-mail address is not confirmed after 30 days. We keep information about a purchase as described in section 6.

5. E-mails about your form

To the stored address we send the e-mails that are necessary to operate the form: confirmation and embed code, links for changing, deleting and paying, invoices, and notices concerning your form, for example about changes to the service or the expiry of a price period.

The legal basis is Art. 6(1)(b) GDPR, and for notices about the service also our legitimate interest under point (f). These e-mails are not a newsletter and end when you delete your form. We do not send a newsletter.

6. Purchasing the ad-free version

For the invoice we collect company, name, address, country and, if available, your VAT identification number. The legal basis is Art. 6(1)(b) and (c) GDPR: the contract and our legal obligations when invoicing. We also store the time at which, before the purchase, you requested immediate activation and confirmed the expiry of your right of withdrawal, so that we can prove this declaration (Art. 6(1)(b) and (f) GDPR).

Payment via Stripe: The payment is handled by Stripe Payments Europe, Limited, 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland, on its own payment page. We transmit to Stripe your e-mail address, the amount and the description of the service with the form ID. You enter your payment details, for example the card number, only at Stripe. We do not receive them. Stripe processes this data under its own responsibility and may also transfer it to the USA. Stripe relies on the EU-U.S. Data Privacy Framework and on standard contractual clauses for this. Details can be found in Stripe’s privacy policy: stripe.com/privacy.

Checking the VAT identification number: If you state a number from another EU country, we check its validity via the European Commission’s VIES service and transmit the number for this purpose. This is necessary to calculate VAT correctly (Art. 6(1)(c) GDPR).

Retention: We keep invoices and the related information for ten years in accordance with commercial and tax law.

7. Contact forms on our users’ websites

When you visit a website that embeds a contact form from ssl-contact.de, the following applies:

  • Loading the form: Your browser retrieves the form from our server (extern.ssl-contact.de). This produces the log data described in section 2. We set no cookies here either.
  • Counting: For each form we count how often it was loaded and submitted, with the date and the domain of the embedding website. We do not store IP address, browser identification or the page visited.
  • Sending a message: Your entries are transmitted to our server in encrypted form and sent from there by e-mail to the operator of the website. We do not store or read the content of your message. It does not appear in the server’s log files either.
  • Advertisements: Free forms show an advertisement above the form and in the message after sending. Text and image come from our server. The advertising partner learns nothing about your visit unless you click on the advertisement. The link of the advertisement only contains the information that the visit comes from a form by ssl-contact.de and where the advertisement was shown.

The operator of the respective website is responsible for the data you enter into such a form. We transmit it on the operator’s behalf (Art. 28 GDPR). Please contact the operator with questions about your message and to exercise your rights regarding this data.

8. Contacting us

If you write to us by e-mail or via the contact form on ssl-contact.de, we process your details in order to answer your enquiry (Art. 6(1)(b) or (f) GDPR). The message reaches us as an e-mail. We delete it as soon as the enquiry has been dealt with and there is no obligation to retain it.

9. Recipients

Your data is received only by the parties named in this policy: IONOS (hosting and sending e-mails, as processor), Stripe (payment), the European Commission (checking the VAT identification number), and our tax advisers and the tax authorities where the law requires it. We do not sell data and do not pass it on for advertising purposes.

10. Your rights

You have the right of access to your data (Art. 15 GDPR), to rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). A message to info@ssl-contact.de is sufficient.

Objection: Where we process data on the basis of legitimate interests (Art. 6(1)(f) GDPR), you may object at any time on grounds relating to your particular situation (Art. 21 GDPR).

Complaint: You can lodge a complaint with a data protection supervisory authority, for example where you live. The authority responsible for us is the Commission for Personal Data Protection, 2 Prof. Tsvetan Lazarov Blvd., 1592 Sofia, Bulgaria, www.cpdp.bg.

11. Required information, automated decisions

Without an e-mail address and domain we cannot provide a form, and without invoice details we cannot sell an ad-free version. No further information is required. There is no automated decision-making or profiling.

12. Changes

We adapt this policy when the service or the legal situation changes. The version published here applies.