Contact
E-Mail: info (at) netsody.io
Liability for contents
As a service provider, we are responsible for our own content on these pages in accordance with general legislation pursuant to Section 7 (1) of the German Telemedia Act (TMG). According to §§ 8 to 10 TMG, however, we are not obligated as a service provider to monitor transmitted or stored third-party information or to investigate circumstances that indicate illegal activity.
Obligations to remove or block the use of information under the general laws remain unaffected. However, liability in this regard is only possible from the point in time at which a concrete infringement of the law becomes known. If we become aware of such infringements, we will remove this content immediately.
Liability for links
Our offer contains links to external websites of third parties, on whose contents we have no influence. Therefore, we cannot assume any liability for these external contents. The respective provider or operator of the pages is always responsible for the content of the linked pages. The linked pages were checked for possible legal violations at the time of linking. Illegal contents were not recognizable at the time of linking.
However, a permanent control of the contents of the linked pages is not reasonable without concrete evidence of a violation of the law. If we become aware of any infringements, we will remove such links immediately.
Copyright
The content and works created by the site operators on these pages are subject to German copyright law. The reproduction, editing, distribution and any kind of exploitation outside the limits of copyright require the written consent of the respective author or creator. Downloads and copies of this site are only permitted for private, non-commercial use.
Insofar as the content on this site was not created by the operator, the copyrights of third parties are respected. In particular, third-party content is identified as such. Should you nevertheless become aware of a copyright infringement, please inform us accordingly. If we become aware of any infringements, we will remove such content immediately.
Source: e-recht24.de
Privacy Policy
Last updated: 9 September 2026
1. Scope of this Privacy Policy
This Privacy Policy applies to the following public Netsody websites and services:
netsody.io, including the Netsody blog
docs.netsody.io
artifacts.netsody.io
download.netsody.io
It also applies when you contact us using an email address published on these websites.
artifacts.netsody.io and download.netsody.io provide public software artifacts, installation files, binaries, and related files for download.
2. Joint controllers
The following persons jointly determine the purposes and essential means of the processing described in this Privacy Policy and are therefore joint controllers within the meaning of Articles 4(7) and 26 GDPR:
Kevin Röbert
Heiko Bornholdt
Common contact point for data protection matters:
Email: info (at) netsody.io
Kevin Röbert and Heiko Bornholdt have agreed that the information obligations under Articles 13 and 14 GDPR are fulfilled jointly through this Privacy Policy and that requests from data subjects are coordinated through the common contact point stated above.
They jointly ensure compliance with the data protection obligations applicable to the processing described in this Privacy Policy, including the establishment of appropriate legal bases, the implementation of appropriate technical and organisational measures, the engagement of processors in accordance with Article 28 GDPR, and the handling of requests from data subjects.
This constitutes the essence of the arrangement between the joint controllers within the meaning of Article 26(2) GDPR.
You may use the common contact point for all questions and requests concerning the processing of your personal data. Irrespective of the allocation of responsibilities between the joint controllers, you may exercise your rights under the GDPR against either Kevin Röbert or Heiko Bornholdt.
3. Provision and hosting of the websites
Our public website, blog, documentation, artifact repository, and download service are provided using server infrastructure hosted by:
IONOS SE
Elgendorfer Str. 57
56410 Montabaur
Germany
IONOS provides the server infrastructure on which our origin systems are operated. In the course of providing this infrastructure, IONOS may process personal data on our behalf. IONOS acts as a processor within the meaning of Article 28 GDPR.
We have concluded the applicable agreement on processing on behalf with IONOS.
When you access one of the websites or services covered by this Privacy Policy, technical connection and request information is processed in order to transmit the requested content or file to your device.
Depending on the respective request and technical configuration, this information may include IP addressing information, the date and time of the request, the requested host, URL, file, or resource, the HTTP method, the response status, the amount of data transferred, information contained in HTTP headers, the referring page if transmitted by your browser, and information concerning the browser, command line client, package management software, or other client software used for the request.
In the case of artifacts.netsody.io and download.netsody.io, the requested resource may identify the software artifact, installation script, binary, version, architecture, or other file requested by your client.
The processing is necessary to deliver the requested content or file, maintain the availability and stability of our systems, identify technical faults, protect our infrastructure against misuse and attacks, and investigate security incidents.
The legal basis is Article 6(1)(f) GDPR.
Our legitimate interests are the secure, reliable, and efficient operation of our public information and download services, the distribution of Netsody software and related artifacts, the prevention of misuse, and the protection of our information technology systems.
The provision of connection data is not required by law or contract. However, the processing of technical connection information is necessary to transmit website content or requested files over the Internet. Without this processing, the requested content or file cannot be delivered to your device.
4. Server logs
Our web servers create technical access and error logs.
Access logs may contain information such as the source IP address, date and time of the request, requested host, requested URL or file, HTTP method, response status, amount of data transferred, referrer information where transmitted, and information about the requesting client.
Access logs are retained for 7 days and are then deleted.
Error logs contain technical information generated when errors or exceptional conditions occur during the processing of requests. Depending on the error, these logs may also contain information relating to the relevant request, including IP addressing information, requested resources, timestamps, and technical client or connection information.
Error logs are retained for 30 days and are then deleted.
The purpose of these logs is to operate and secure the websites and download services, diagnose errors, identify abnormal or malicious requests, investigate security incidents, and protect our systems against attacks and misuse.
The legal basis is Article 6(1)(f) GDPR.
Our legitimate interests are the security, availability, integrity, and reliable operation of our systems and public services.
If particular log information is required for the investigation of a specific security incident, the prevention of further misuse, compliance with a legal obligation, or the establishment, exercise, or defence of legal claims, the relevant information may be retained separately for as long as necessary for that specific purpose.
5. Cloudflare
We use services provided by:
Cloudflare, Inc.
101 Townsend Street
San Francisco, California 94107
United States
Cloudflare provides authoritative domain name services as well as reverse proxy, content delivery, caching, availability, performance, and security functions for our public websites and download services.
For hostnames proxied through Cloudflare, requests from visitors are processed by Cloudflare before they reach our origin server.
Cloudflare may process information such as IP addresses, requested URLs and resources, timestamps, HTTP headers, traffic routing information, technical connection information, system configuration information, and information used to identify and mitigate malicious or abusive traffic.
Website content and publicly available files may be transmitted through and temporarily cached within Cloudflare infrastructure.
We use Cloudflare to improve the availability, performance, resilience, and security of our public websites and download services and to protect them against attacks and abusive traffic.
The legal basis is Article 6(1)(f) GDPR.
Our legitimate interests are the secure, reliable, resilient, and efficient provision of our public websites and download services and the protection of our infrastructure against attacks and misuse.
To the extent that Cloudflare processes personal data on our behalf, Cloudflare acts as a processor within the meaning of Article 28 GDPR. The processing is governed by the applicable Cloudflare Data Processing Addendum.
Cloudflare operates a globally distributed network. Personal data may therefore be processed outside the European Economic Area.
For transfers to the United States, Cloudflare states that it participates in the EU U.S. Data Privacy Framework. Where an adequacy decision cannot be relied upon, or for other transfers for which appropriate safeguards are required, the Cloudflare Data Processing Addendum provides for the use of the European Commission Standard Contractual Clauses and supplementary safeguards where applicable.
Cloudflare may store information on your device or access information stored on your device where this is technically necessary for security functionality, for example in connection with a security challenge.
We do not use Cloudflare cookies for advertising or cross site tracking.
To the extent that storage of or access to information on your device is strictly necessary to provide a service expressly requested by you, no consent under Section 25(1) TDDDG is required pursuant to Section 25(2) no. 2 TDDDG.
6. Documentation search
The search function provided within our documentation uses a locally generated search index.
Search terms entered into the documentation search are processed in your browser. We do not transmit your search terms to an external search service for the purpose of performing the search.
Requests required to download the documentation and its static search index are subject to the processing described in the preceding sections.
7. Local browser storage
The documentation may store a presentation preference selected by you, such as your preferred colour mode, in the local storage of your browser.
This information is used only to provide the interface preference selected by you. We do not use this information for analytics, advertising, user profiling, or tracking across websites.
To the extent that storage of or access to such a preference is strictly necessary to provide a functionality expressly requested by you, no consent under Section 25(1) TDDDG is required pursuant to Section 25(2) no. 2 TDDDG.
8. No analytics or advertising tracking
We do not use web analytics services, advertising trackers, behavioural advertising technologies, or technologies intended to create profiles of visitors across websites on the websites covered by this Privacy Policy.
In particular, we do not use website visitor or download data for personalised advertising.
9. Contact by email
You can contact us using the email addresses published on our websites.
When you send us an email, we process the information contained in your message and the technical information associated with its transmission.
Depending on your message and the email systems involved, this may include your name, email address, organisation, recipient address, subject, message content, attachments, message identifiers, timestamps, mail routing information, and information necessary for spam prevention and delivery troubleshooting.
Incoming email is received using a mail server operated by us. Our mail infrastructure uses mailcow and associated components for the technical handling of email.
Incoming messages may be subject to automated technical checks for spam, malicious content, and other indicators of abuse. These checks serve exclusively to protect our mail infrastructure and its users. They do not constitute automated decision making within the meaning of Article 22 GDPR.
We process email correspondence to receive, assess, answer, and manage your request, to communicate with you, and to maintain the security and reliability of our email infrastructure.
If you are personally a party to a contract with us, or if you request measures before entering into a contract with us, processing necessary for those purposes is based on Article 6(1)(b) GDPR.
For other enquiries, including enquiries sent on behalf of an organisation, the legal basis is Article 6(1)(f) GDPR.
Our legitimate interests are communicating with persons who contact us, responding appropriately to enquiries concerning Netsody, our software, research, cooperation, technical matters, and other legitimate matters, and maintaining the security and reliability of our communications infrastructure.
Technical mail server logs may contain information such as mail server addresses, sender and recipient addresses, timestamps, message identifiers, delivery status information, protocol information, spam assessment information, and error information.
Technical mail server logs are retained for no longer than 30 days.
The legal basis for processing technical mail server logs is Article 6(1)(f) GDPR. Our legitimate interests are secure email operation, spam and abuse prevention, troubleshooting, and investigation of delivery or security incidents.
If individual log information is required to investigate a specific security incident, prevent further misuse, comply with a legal obligation, or establish, exercise, or defend legal claims, the relevant information may be retained separately for as long as necessary for that specific purpose.
Email correspondence that does not become part of an ongoing relationship is normally deleted no later than twelve months after the final substantive communication.
Correspondence may be retained for a longer period where this is necessary for an ongoing relationship, compliance with a legal obligation, the establishment, exercise, or defence of legal claims, or another documented purpose for which continued processing is lawful.
Where correspondence or attachments are subject to statutory retention obligations, the relevant information is retained for the period required by law. Processing for compliance with such obligations is based on Article 6(1)(c) GDPR.
Sending us an email is voluntary.
If you would like us to respond to your request, we require an address through which we can contact you and the information necessary to understand and process the request.
10. Amazon Simple Email Service
We use Amazon Simple Email Service, Amazon SES, for the technical delivery of outgoing email.
The service is provided for accounts based in Germany by:
Amazon Web Services EMEA SARL
38 Avenue John F. Kennedy
L 1855 Luxembourg
Luxembourg
We use Amazon SES in the AWS Region Europe Frankfurt, region identifier eu-central-1.
When we send an email through Amazon SES, information required for the transmission of that message is processed by AWS.
This information may include the sender address, recipient address, message headers, subject, message content, attachments, message identifiers, and technical delivery information.
Information relating to unsuccessful delivery, complaints, or other delivery events may also be generated as part of the email delivery process.
Amazon SES is used for the technical transmission of outgoing email. It is not used as our primary mailbox or email archive.
The legal basis for processing through Amazon SES is the legal basis applicable to the respective email communication as described in section 9.
AWS processes customer data on our behalf as a processor within the meaning of Article 28 GDPR. The AWS Data Processing Addendum forms part of the applicable AWS contractual terms.
Although we configure Amazon SES to use the Europe Frankfurt region, AWS is a globally operating service provider and processing involving AWS affiliates or authorised subprocessors outside the European Economic Area cannot be excluded in every circumstance.
Where personal data is transferred to a country outside the European Economic Area and no applicable adequacy decision exists, AWS provides for appropriate safeguards including the European Commission Standard Contractual Clauses in its Data Processing Addendum.
11. External links
Our website, blog, and documentation contain links to websites and services operated by third parties.
A normal external link does not cause us to load content from the linked service merely because you visit our page.
If you choose to follow an external link, your browser establishes a connection to the destination service. The operator of that service is then responsible for the processing carried out in connection with its service.
The websites covered by this Privacy Policy do not automatically load social media feeds, social media widgets, videos, or comparable third party embeds.
Any future integration of external content will be assessed separately before it is introduced.
12. Recipients of personal data
Within our area of responsibility, personal data is accessible only to persons who require access for the purposes described in this Privacy Policy.
Depending on the processing activity, personal data may also be processed by the following recipients or categories of recipients:
IONOS SE as provider of our server infrastructure.
Cloudflare, Inc. and authorised subprocessors involved in providing the Cloudflare services described in section 5.
Amazon Web Services EMEA SARL and authorised subprocessors involved in providing Amazon SES as described in section 10.
Public authorities, courts, or other recipients where disclosure is required by law or where disclosure is necessary for the establishment, exercise, or defence of legal claims.
We do not sell personal data.
13. International data transfers
Some service providers described in this Privacy Policy operate globally. Personal data may therefore be processed in countries outside the European Economic Area.
Where the European Commission has adopted an adequacy decision for the relevant country or transfer mechanism, a transfer may be based on that adequacy decision.
Where no applicable adequacy decision exists, we use appropriate safeguards within the meaning of Chapter V GDPR where required. These safeguards may include the European Commission Standard Contractual Clauses together with supplementary measures where appropriate.
You may contact us at info (at) netsody.io if you require further information concerning the safeguards applicable to a particular transfer or wish to obtain information about how a copy of the relevant safeguards can be obtained. Appropriate redactions may be made where necessary to protect confidential information or the rights of third parties.
14. General storage principles
We retain personal data only for as long as necessary for the purposes for which it is processed.
Specific retention periods or retention criteria are stated in the relevant sections of this Privacy Policy.
Where no fixed period can reasonably be specified, the retention period is determined by the purpose of processing, the need to maintain the security and reliability of our systems, the status of the relevant communication or relationship, applicable limitation periods, and statutory retention obligations.
When personal data is no longer required and no legal basis for continued processing applies, it is deleted or irreversibly anonymised.
15. Your rights
Subject to the requirements and limitations provided by the GDPR, you have the right to request access to personal data concerning you pursuant to Article 15 GDPR.
You have the right to request rectification of inaccurate personal data pursuant to Article 16 GDPR.
You have the right to request erasure pursuant to Article 17 GDPR.
You have the right to request restriction of processing pursuant to Article 18 GDPR.
Where the requirements of Article 20 GDPR are met, you have the right to data portability.
You also have the right to object to certain processing pursuant to Article 21 GDPR as explained separately in section 16.
If processing is based on consent, you have the right to withdraw that consent at any time with effect for the future. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
The processing activities currently described in this Privacy Policy do not rely on consent unless expressly stated otherwise.
To exercise your rights, you may contact us at info (at) netsody.io.
You may also address a request directly to Kevin Röbert or Heiko Bornholdt. Your rights are not restricted by the internal allocation of responsibilities between the joint controllers.
Where necessary to protect personal data against unauthorised disclosure, we may request information reasonably required to verify your identity.
16. Right to object
Where we process personal data on the basis of Article 6(1)(f) GDPR, you have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you.
If you object, we will no longer process the relevant personal data unless we demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or unless the processing is necessary for the establishment, exercise, or defence of legal claims.
You can exercise your right to object by contacting us at info (at) netsody.io.
17. Right to lodge a complaint
You have the right to lodge a complaint with a data protection supervisory authority if you consider that the processing of personal data concerning you infringes the GDPR.
You may in particular contact a supervisory authority in the Member State of your habitual residence, your place of work, or the place of the alleged infringement.
You may also contact the supervisory authority competent for either of the joint controllers.
18. Automated decision making
We do not use personal data within the scope of this Privacy Policy for automated individual decision making within the meaning of Article 22 GDPR or for profiling.
Automated technical filtering of email for spam, malware, and abuse prevention does not result in decisions that produce legal effects concerning you or similarly significantly affect you.
19. Security
We implement appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, and unauthorised access.
These measures are reviewed and adapted where appropriate in light of the nature of the processing, available technology, implementation costs, and relevant risks.
20. Changes to this Privacy Policy
We may update this Privacy Policy if our public websites, technical infrastructure, service providers, processing activities, or applicable legal requirements change.
The version published on this page is the current version.
The date of the most recent revision is stated at the beginning of this Privacy Policy.