Privacy Policy
Available in: English | Deutsch
As of 5 October 2026
Under Art. 13 GDPR, this notice describes which personal data we process on the website aquilo-solutions.com and for the Aquilo account you use to sign in to Aquilo applications through the shared sign-in at auth.aquilo-cloud.com. What an application processes beyond that is described in its own privacy notice.
1. Controller and contact
Aquilo Solution.S GmbH, Am Haubarg 9, 24229 Strande, Deutschland, Amtsgericht Kiel, HRB 25107 KI, represented by its managing directors Mark Straßberger and Heinrich von Helmolt. Email: info@aquilo-solutions.com, phone: +49 521 950150. We have not designated a data protection officer; please send data protection requests to the email address above.
2. Visiting the website
When you open a page, our server processes the data the connection requires, in particular your IP address, the requested address, the time and information from your browser, to deliver the page and fend off attacks. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is secure and reliable operation.
To protect the contact form and newsletter signup against abuse, we derive a pseudonymous value from your IP address with a secret key and use it to count requests in hourly counters. The IP address itself is not stored; the counters are deleted after 24 hours. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is preventing automated bulk requests.
The website sets no cookies. Fonts and images are loaded from our own server, not from third parties. If you close the reading prompt below an article, your browser stores that choice locally so the prompt does not appear again; the entry does not leave your device. This storage is necessary for the function you asked for (§ 25(2) no. 2 TDDDG).
3. Audience measurement with Plausible
For statistics on how the site is used, we run the Plausible Analytics software ourselves at analytics.aquilo-cloud.com; no data goes to the software's maker. We record page views, the referring page, clicks on external links and downloads, submitted forms, how far and how long articles are read, article ratings, clicks on topic prompts and newsletter signups without the email address. For this your browser sends the page address, the referring page and the window width. From the IP address and browser identifier the server derives browser, operating system, device type, and country and where available region and city.
IP address and browser identifier are not stored. Together with a secret value that changes daily, they only serve to form an identifier that groups visits from the same day and cannot be linked afterwards. No cookies are set and nothing is stored on your device. Only aggregate figures are evaluated; the events remain stored for the statistics. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is understanding which content is used. You can object to this processing as described in section 9.
4. Contact form
Through the contact form we process your name, email address, subject, message and the page language in order to answer your request. The message is sent as an email to info@aquilo-solutions.com with your address as the reply address. Until delivery it sits in an internal sending queue and is removed from it once delivered; undeliverable messages are deleted after seven days at the latest. A delivery log without your details is deleted after 90 days.
We keep the received email for as long as handling your request requires. If it concerns a contract or its preparation, we keep it as a business letter for up to six years (§ 257 HGB). The legal basis is Art. 6(1)(b) GDPR where your request aims at a contract, otherwise Art. 6(1)(f) with the legitimate interest of answering requests, and Art. 6(1)(c) for the retention.
5. Newsletter
For the newsletter we process your email address, the language, the page where you signed up, and records of signup, confirmation and unsubscription with their time and the version of the consent text. The legal basis is your consent under Art. 6(1)(a) GDPR. The signup takes effect only once you open the link in our confirmation email (double opt-in). We store confirmation and unsubscribe links only as a cryptographic hash.
You can withdraw your consent at any time with effect for the future, through the unsubscribe link in every email or by emailing us. Unconfirmed signups are deleted after seven days. After you unsubscribe we keep the records of consent and unsubscription for three years so we can prove that sending was lawful (Art. 7(1) and Art. 6(1)(c) and (f) GDPR), and delete them afterwards.
6. Aquilo account and shared sign-in
For signing in to Aquilo applications we run the Zitadel software ourselves at auth.aquilo-cloud.com; no data goes to the software's maker. For your Aquilo account we process your email address and its verification, first and last name, display name and username, language, your password only as a cryptographic hash, any passkeys or second factors you set up, membership of an organization, and sessions and sign-ins with their time, IP address and browser information. When you sign in, the application receives your account identifier, email address and name.
The purpose is to let you sign in to the applications you use and to protect the account from access by others. The legal basis is Art. 6(1)(b) GDPR for signing in to an application you use and Art. 6(1)(f) for security; our legitimate interest is protecting your account and our systems. Sign-in and session use necessary cookies (§ 25(2) no. 2 TDDDG).
We keep the account data for as long as the account exists. At your request we delete the account; afterwards sign-in is no longer possible and the account is removed from user management. Zitadel records every change as an entry in a continuous event log. Earlier entries for a deleted account, including email address and name, remain stored there; only administrators can access them, and only for security and evidence purposes. There is currently no automatic deletion period for this log. An application you used with the account deletes its own data as described in its own privacy notice.
7. Recipients and location
Only authorized people at Aquilo have access. We run the website, audience measurement, sign-in, databases and email ourselves on servers of Hetzner Online GmbH, Industriestraße 25, 91710 Gunzenhausen, Deutschland, which provides data centre, network and storage as our processor. The servers are in Germany; backups are kept in Germany and Finland. We send and receive email through our own mail server; recipients' email providers process messages to deliver them. No data is transferred to countries outside the European Economic Area. Authorities receive data only where we are legally obliged to provide it.
8. Required information
The contact form and newsletter are voluntary; without an email address we cannot reply or send the newsletter. Sign-in is not possible without the account data. No automated decision-making within the meaning of Art. 22 GDPR takes place.
9. Your rights
Right to object under Art. 21 GDPR: You may object at any time, on grounds relating to your particular situation, to processing based on our legitimate interests under Art. 6(1)(f) GDPR, in particular the audience measurement, by emailing info@aquilo-solutions.com. We will then stop, unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.
Subject to the legal requirements, you can request access, rectification, erasure, restriction of processing and data portability (Art. 15 to 20 GDPR). You can withdraw consent at any time with effect for the future; the lawfulness of processing before the withdrawal is not affected. We answer requests within one month (Art. 12(3) GDPR).
You can lodge a complaint with a data protection supervisory authority, in particular where you live or work or where the suspected infringement took place (Art. 77 GDPR). The authority responsible for us is the Unabhängiges Landeszentrum für Datenschutz Schleswig-Holstein, Holstenstraße 98, 24103 Kiel, Germany, www.datenschutzzentrum.de, mail@datenschutzzentrum.de.