Privacy policy
This website uses no advertising networks, analytics, external fonts or embedded maps. What data still arises is listed here in full.
Note on language. Legal texts are written for German law and are legally binding in German. English versions, where available, are provided as a convenience translation; in case of doubt the German text prevails. Read the German version.
1. Controller
The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:
Gross Simulation
Andreas Gross
Gretescher Weg 168
49086 Osnabrück, Germany
Email: info@grosswebdesign.de
Phone: 0173 8427298
No data protection officer has been appointed because the requirements of Art. 37 GDPR in conjunction with § 38 of the German Federal Data Protection Act (BDSG) are not met. If you have questions about data protection, please contact the address above directly.
2. Hosting and server logs
This website is operated by a hosting provider with servers in Germany. A data processing agreement under Art. 28 GDPR is in place with the provider.
Whenever a page is called up, the web server automatically records log data transmitted by your browser:
- IP address of the requesting device
- Date and time of the request
- Name and URL of the file requested
- Amount of data transferred and a message on whether the request succeeded
- Browser used, its version and the operating system
- The page visited before, if the browser transmits it (referrer)
Purpose: delivering the website, ensuring system security and stability and investigating cases of misuse.
Legal basis: Art. 6 (1)(f) GDPR. Our legitimate interest lies in the secure and trouble-free operation of this website.
Retention: the logs are deleted automatically after seven days at the latest, unless they are needed to investigate a specific incident.
These data are not merged with other data sources and not evaluated for advertising purposes.
3. Cookies and local storage
This website sets no advertising, analytics or tracking cookies. Only technically necessary storage is used:
| Name | Purpose | Duration |
|---|---|---|
gwd_cookie_wahl | Remembers that you have taken note of the privacy notice so that it does not appear on every visit. Stored in your browser’s local storage, not transmitted as a cookie. | until you clear your browser storage |
PHPSESSID / gwd_admin | Session identifier. Only set when a form is submitted or the internal editing area is used. Contains no personal content, only a random string. | until the browser is closed |
Legal basis: § 25 (2) no. 2 of the German TDDDG. These storage operations are strictly necessary to operate the website and therefore do not require consent. Consent is therefore not requested – the notice is for your information.
You can delete or block local storage at any time in your browser settings. The notice will then appear again on your next visit.
4. Contact form
If you send us a message via the contact form, we process the details you enter: name, email address and, voluntarily, company, phone number and the content of your message.
Purpose: handling your enquiry and possible follow-up questions.
Legal basis: Art. 6 (1)(b) GDPR where your enquiry is aimed at concluding a contract, otherwise Art. 6 (1)(a) GDPR on the basis of the consent you give in the form.
Retention: until your enquiry has been dealt with and no further questions are expected. If a contract results, statutory retention periods of up to ten years apply (§ 147 German Fiscal Code, § 257 German Commercial Code).
You may withdraw any consent at any time without formality. The lawfulness of processing up to the withdrawal remains unaffected.
The form is protected against automated misuse by an additional field invisible to you. No external service such as Google reCAPTCHA is used.
5. Contact by email and phone
If you contact us by email or phone, your details are stored to handle your request. The legal basis is Art. 6 (1)(b) GDPR for contract-related enquiries, otherwise our legitimate interest in answering under Art. 6 (1)(f) GDPR. The data are deleted as soon as they are no longer needed and no statutory retention duties apply.
6. Personal proposal pages
For businesses we approach, we create personal proposal pages at their own address on this website. These pages are not publicly linked and are blocked for search engines.
We process only publicly available business information: company name, industry, location, address of the existing website and publicly stated contact details. We also store a count of page views and the time of the last view – without IP address, device identifier or assignment to an individual. Individual visitors are not recognised.
Legal basis: Art. 6 (1)(f) GDPR. Our legitimate interest lies in initiating a business relationship in the business-to-business field.
Retention: until the approach is concluded, twelve months at most. On request we delete such a page and the associated details immediately – an informal email is enough.
7. No external services
This website deliberately embeds no third-party content. In concrete terms:
- no Google Fonts or other externally loaded fonts – fonts are hosted on our own server
- no Google Analytics, Matomo or comparable analytics tools
- no embedded maps from Google Maps or other providers
- no videos from YouTube, Vimeo or similar platforms
- no social media plugins, like buttons or tracking pixels
- no content from content delivery networks – animation libraries are likewise hosted on our own server
As a result, your IP address is not passed on to third parties and no data is transferred to countries outside the European Union by this website.
8. Encryption
This website uses TLS encryption (recognisable by the padlock symbol in your browser’s address bar and by https://). This prevents third parties from reading the data you send to us.
9. Your rights
You have the following rights against us at any time:
- Access to the data stored about you (Art. 15 GDPR)
- Rectification of inaccurate data (Art. 16 GDPR)
- Erasure of your data, unless statutory retention duties apply (Art. 17 GDPR)
- Restriction of processing (Art. 18 GDPR)
- Data portability in a common format (Art. 20 GDPR)
- Withdrawal of consent with effect for the future (Art. 7 (3) GDPR)
Right to object
Where we process data on the basis of legitimate interests under Art. 6 (1)(f) GDPR, you have the right to object at any time on grounds relating to your particular situation (Art. 21 GDPR). We will then no longer process the data unless we can demonstrate compelling legitimate grounds that override your interests.
Right to lodge a complaint with a supervisory authority
Irrespective of this, you have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is:
Die Landesbeauftragte für den Datenschutz Niedersachsen
Prinzenstraße 5, 30159 Hannover, Germany
www.lfd.niedersachsen.de
10. No automated decision-making
There is no automated decision-making including profiling under Art. 22 GDPR. The calculations shown on our proposal pages are pure model calculations based on the assumptions displayed there and have no legal effect on you.
11. Changes to this policy
We adapt this privacy policy whenever changes to the website or to the legal situation make it necessary. The version available here applies.
As of: 10/2026 · Legal notice