Privacy policy

This English version is a translation provided for information only. In case of doubt, the German version applies. It is the authoritative text; this translation is intended to make the same content accessible to readers of English.

This policy describes what happens to your data when you visit regontis.io or write to us using the form on this website. We have kept it as short as possible and describe only what actually happens on this website.

This website sets no cookies and embeds no analytics or tracking services. That is also why there is no cookie banner here: there is nothing to consent to.

Exactly one thing is loaded from a third-party server: the check for automated access in the contact form (Cloudflare Turnstile, section 6a). Everything else — fonts, images, scripts, styles — comes from our own server.

1. Controller

The controller for the processing within the meaning of the General Data Protection Regulation (GDPR) is:

Explicatis GmbH
Max-Planck-Str. 6–8
50858 Köln
Germany

Telephone: +49 2234 99303-0
Email: info@explicatis.com

Regontis is a brand of Explicatis GmbH. The full provider details are set out in the imprint.

2. Data protection officer

We have appointed an external data protection officer:

Dennis Manz
Datenschutzberater.NRW GmbH
Sülzgürtel 86
50937 Köln

You can also reach him on any data protection matter using the contact details above, marked “An den Datenschutzbeauftragten” (for the data protection officer).

3. Scope

This policy applies to the website regontis.io.

It does not apply to the Regontis application itself, which runs under its own address (app.regontis.io) and which the “Login” link points to. A separate privacy policy applies to the application; there, your point of contact is usually your own employer as the controller.

4. Visiting the website: server log files

When you call up this website, your browser necessarily transmits technical data to our server. This data arises when operating any website:

• IP address of the requesting device
• date and time of access
• the address requested and the volume of data transferred
• the server's status message
• the page visited previously, if your browser transmits it (referrer)
• browser type and operating system (user agent)

This data is not combined with other data sources and is not used to identify you personally.

Purpose and legal basis: The processing is necessary in order to deliver the website technically, to ensure its stability and security and to be able to trace attacks. The legal basis is Art. 6 (1) (f) GDPR; our legitimate interest is the secure and undisturbed operation of this website.

Retention period: [[AUSSTEHEND: Speicherdauer der Server-Logfiles in Tagen — hängt von der Konfiguration des Webservers und der Vorgabe des Hosters ab.]]

Hosting: The website runs on rented infrastructure. [[AUSSTEHEND: Hosting-Anbieter mit vollständiger Firmierung und Anschrift sowie Bestätigung, dass ein Vertrag zur Auftragsverarbeitung nach Art. 28 DSGVO geschlossen ist und die Server in der EU stehen.]]

5. Contact form

You can use the form on the home page to request a demo or to send us a message.

Which data is processed

What happens to the details: Your details are not stored in a database and not stored on the web server. They are delivered solely as an email to a mailbox of Explicatis GmbH (anfrage@explicatis.com) and handled there. We also set your email address as the reply address of that message so that we can answer you directly.

Purpose and legal basis: We process the details in order to answer your enquiry. The legal basis is Art. 6 (1) (b) GDPR where the enquiry relates to a contract or its initiation, and otherwise Art. 6 (1) (f) GDPR — our legitimate interest in answering enquiries addressed to us.

Retention period: As we do not store the enquiry on the server, retention follows the email mailbox in which it is handled. We delete the message once it has been dealt with and no statutory retention periods stand in the way. If the enquiry leads to a contractual relationship, the commercial and tax retention periods of up to ten years apply.

Sending the email: We use an email delivery service for this. [[AUSSTEHEND: Anbieter des SMTP-Versands mit vollständiger Firmierung und Anschrift sowie Bestätigung, dass ein Vertrag zur Auftragsverarbeitung nach Art. 28 DSGVO geschlossen ist.]]

6. Protection against misuse of the form

So that the form cannot be misused for bulk sending, we limit the number of submissions to five per IP address and hour. For this purpose your IP address is held transiently in the server's memory when you submit and is discarded once that hour has elapsed. It is not logged, not written to a file and not combined with your enquiry; nor does it appear in the email we receive.

The form also contains a field that is invisible to humans and checks how quickly it was filled in. Both detect automated submissions without collecting any data about you.

Legal basis: Art. 6 (1) (f) GDPR; our legitimate interest is preventing misuse and overload.

6a. Check for automated access (Cloudflare Turnstile)

In the contact form we use Cloudflare Turnstile. This is a check intended to establish whether a submission comes from a person or from a program. In most cases it runs without any action on your part; only where it is unsure does a task appear.

What happens. For this check your browser loads a script from challenges.cloudflare.com and exchanges data with that server. The check itself runs in a frame of its own which contacts further machines of the provider under challenges.cloudflare.com (as measured, for example brunhild.challenges.cloudflare.com). In doing so your IP address is transmitted to the provider, together with technical details of your browser and device which the provider evaluates in order to tell a person from a program. Your browser sends the result of the check to us as a token along with the form; we then have it confirmed server-side by the provider, transmitting your IP address again.

This is the only connection to a third-party server on this website. It is established only when you open the page carrying the contact form — that is, the home page; the legal notice and this privacy policy do not establish it.

As measured, the check sets no cookies and stores nothing in your browser storage. We verified this on 4 September 2026 against the live website, before and after the check ran. The provider reserves the right to set a cookie where it needs one for detection; should that change, we will update this policy.

Without JavaScript the check does not take place — the form still works. If you would rather avoid it, you can write to us directly instead of using the form; the address is in the legal notice.

• Provider: [[AUSSTEHEND: Firmierung und Anschrift der für dieses Angebot verantwortlichen Cloudflare-Gesellschaft — je nach Vertrag Cloudflare, Inc. (USA) oder Cloudflare Germany GmbH; bitte anhand des abgeschlossenen Vertrags eintragen]]
• Data processing agreement: [[AUSSTEHEND: Bestätigung, dass ein Vertrag zur Auftragsverarbeitung nach Art. 28 DSGVO besteht, mit Datum]]
• Transfer to a third country: [[AUSSTEHEND: ob eine Übermittlung in die USA stattfindet und auf welcher Grundlage — Angemessenheitsbeschluss EU-US Data Privacy Framework mit Zertifizierungsnachweis oder Standardvertragsklauseln nach Art. 46 Abs. 2 lit. c DSGVO]]
• Legal basis: [[AUSSTEHEND: rechtlich zu prüfen — in Betracht kommt Art. 6 Abs. 1 lit. f DSGVO (berechtigtes Interesse an der Abwehr automatisierter Einsendungen); ob dafür eine Einwilligung nach § 25 TDDDG nötig ist, hängt davon ab, ob die Prüfung auf Ihr Endgerät zugreift]]
• Retention by the provider: [[AUSSTEHEND: Angabe des Anbieters]]

⚠️ While these details are outstanding, this section is not approved. It describes the actual behaviour of the website; the legal assessment is pending.

7. No cookies, no analytics, no tracking

This website

• sets no cookies and stores nothing in your browser storage,
• uses no web analytics and no usage tracking,
• embeds no advertising networks,
• creates no profiles and makes no automated decisions within the meaning of Art. 22 GDPR.

That is why we need no consent for you to visit this website and show no cookie banner.

8. Fonts, images and other content

Apart from the check described in section 6a, every part of this website is delivered from our own server:

• Fonts (Inter and Archivo) are held on our server. There is no connection to Google Fonts or any other font service; your IP address is not transmitted to anyone for this purpose.
• Images and product screenshots are likewise held on our server. We use no content delivery network.
• No videos, maps, social network buttons or other third-party content are embedded.
• The only exception is Cloudflare Turnstile in the contact form; what is transmitted there is set out in section 6a.

9. Links to social networks

In the footer you will find links to our profiles on LinkedIn, Instagram and Facebook. These are plain links, not embedded content and not buttons that transmit data. As long as you do not click one of these links, the platform in question learns nothing about your visit.

If you click a link, you leave this website. From that point on, the privacy terms of the respective platform apply; we have no influence on their processing.

10. Recipients of your data

Within our company, only those areas that need it in order to handle your enquiry have access — as a rule sales and management.

Beyond that we use service providers who act on our instructions and with whom a data processing agreement under Art. 28 GDPR is in place: the hosting provider, the email delivery service and the provider of the check for automated access (see sections 4, 5 and 6a).

Whether data is transferred to a country outside the EU or the EEA depends on the provider of the check: [[AUSSTEHEND: siehe Abschnitt 6a, Übermittlung in ein Drittland]]. For hosting and email delivery no such transfer is envisaged.

Your data is not passed on for advertising purposes and is not sold.

11. Data security

This website is delivered exclusively in encrypted form (TLS, recognisable from the “https://” in the address bar and the padlock symbol in your browser). This protects the data you send us via the form while it is in transit.

We also secure delivery with the usual browser-side protections, including a strict content security policy and HSTS. We keep our technical and organisational measures aligned with the state of the art.

12. Your rights

You have the following rights in relation to us, provided the statutory conditions are met:

• Access to whether and which data we process about you (Art. 15 GDPR)
• Rectification of inaccurate data (Art. 16 GDPR)
• Erasure of your data (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability — receiving your data in a common format (Art. 20 GDPR)
• Objection to processing based on a legitimate interest (Art. 21 GDPR)
• Withdrawal of consent with effect for the future (Art. 7 (3) GDPR) — on this website, however, we do not obtain any consent

For all of these matters an informal message to info@explicatis.com or to our data protection officer is sufficient. We reply within the statutory period of one month.

13. Right to lodge a complaint with a supervisory authority

You can lodge a complaint with a data protection supervisory authority at any time if you consider that we are not processing your data lawfully. The competent authority is the one for your habitual residence, your place of work or the place of the alleged infringement.

For us as a company based in Cologne, this is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (LDI NRW, Düsseldorf). The authority publishes its current contact details on its website.

14. Obligation to provide data

You are under no obligation to provide us with data. Without the details marked as required in the contact form, however, we cannot handle your enquiry. You can use the website itself without providing anything.

15. Changes to this policy

We adapt this policy when the processing on this website changes — because a new function has been added, for example. The version published here applies in each case. You will find the date it was last updated at the top of this page.