Privacy Policy

1. Controller

The controller (data controller) responsible for the processing of your personal data under the General Data Protection Regulation (GDPR) is:

2. Data we process

Depending on how you use CAMOview, we may process the following categories of data:

• Technical data (e.g., IP address, browser information, timestamps, referrer URL) to deliver the website and for security.
• Account data (e.g., name, email address, organization, role/permissions) when you register or are added as a user.
• Authentication data (password hash and login status/session identifiers).
• Communication data (e.g., your messages and contact details when you email us or use the contact form).
• Usage data for analytics, if you have given consent (see Google Analytics below).

2.1 Website access & server logs

When you visit our website, our server may automatically store log information (e.g., IP address, date/time, requested URL, user agent). This is necessary to deliver the website, ensure stability, and protect against misuse.

Legal basis: Art. 6(1)(f) GDPR (legitimate interests in secure, reliable operation) and, where applicable, Art. 6(1)(b) GDPR (performance of contract when you access authenticated services).

3. Account creation, registration & user management

If you create an account, register, or are added by an administrator, we process the data required to create and manage your user account and to provide the CAMOview services.

• Identity and contact data (e.g., first/last name, email address)
• Organization assignment (e.g., your organization/tenant)
• User role and permissions
• Login data (password hash, login timestamps, session identifiers)

Passwords are not stored in plain text. We store a secure hash of your password.

Legal basis: We process your account and registration data to provide our services and manage your user account (Art. 6(1)(b) GDPR – performance of a contract / pre-contractual measures). We process technical/server logs to ensure the security and proper functioning of our website and services (Art. 6(1)(f) GDPR – legitimate interests). Where we are subject to legal obligations (e.g., responding to lawful requests by authorities), we process data on the basis of Art. 6(1)(c) GDPR. If we use analytics cookies/technologies, this is based on your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time via our cookie settings.

Retention: We store account core data for as long as your account exists (“stored until account deletion”). If you delete your account, we will delete or anonymise your account data within a reasonable period, unless we are required to retain certain information to comply with legal obligations or to establish, exercise or defend legal claims. Server logs are retained for 30 days and then deleted.
Backups (if applicable) may contain data for up to 30 days.

4. Contact by email or contact form

If you contact us, we process your contact details and the content of your message to handle your request. This includes replying to you and maintaining a communication history for follow-up.

Legal basis: Art. 6(1)(b) GDPR (handling requests related to a contract or pre-contractual measures) and/or Art. 6(1)(f) GDPR (legitimate interest in responding to inquiries).

Retention: Contact details may be retained for 30 days and then deleted.

5. Cookies & session storage

CAMOview uses technically necessary cookies (e.g., a session cookie) to keep you logged in and to maintain secure navigation. These cookies are required for the website to function.

You can usually delete cookies in your browser settings. Disabling necessary cookies may cause parts of the website to stop working.

6. Google Analytics (GA4)

If you consent, we use Google Analytics (Google Analytics 4) to measure and improve the use of our website. Google Analytics uses cookies and similar technologies to collect usage information (e.g., page views, approximate location, device information, interactions).

According to Google, GA4 does not log or store IP addresses and drops IP addresses collected from EU users before logging via EU domains and servers.

Legal basis: Art. 6(1)(a) GDPR (consent). You can withdraw your consent at any time via this Link.

6.1 Opt-out

• Cookie settings: withdraw consent at any time: https://camoview.c4t.aero/start.php#cookie-settings
• Google Analytics opt-out browser add-on: https://tools.google.com/dlpage/gaoptout

6.2 Data transfers

Google may process data in the United States or other countries. Google participates in the EU–U.S. Data Privacy Framework (DPF) and also provides transfer mechanisms such as EU Standard Contractual Clauses (SCCs). You should document your concrete configuration and data transfer basis for your deployment.

7. Your rights

Under the GDPR, you have the right to:

• Access your personal data (Art. 15 GDPR)
• Rectification (Art. 16 GDPR)
• Erasure (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Object to processing (Art. 21 GDPR)
• Withdraw consent at any time (Art. 7(3) GDPR), if processing is based on consent
• Lodge a complaint with a supervisory authority (Art. 77 GDPR):

Supervisory Authority (Hesse, Germany)
Der Hessische Beauftragte für Datenschutz und Informationsfreiheit (HBDI)
Gustav-Stresemann-Ring 1, 65189 Wiesbaden, Germany
Postal address: Postfach 31 63, 65021 Wiesbaden, Germany
Phone: +49 611 1408-0
Email: poststelle@datenschutz.hessen.de

8. Recipients & processors

We may use service providers (processors) to operate this website and the CAMOview service (e.g., hosting, IT support, analytics). These providers process data only on our instructions. Providers used: Strato AG, Google.

9. Security

We implement appropriate technical and organizational measures to protect your data (e.g., access control, encrypted transport (TLS), role-based permissions).

10. Updates to this policy

We may update this Privacy Policy from time to time. The latest version is always available on this page.