Privacy Policy
Last updated: 9 September 2026
We take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy.
Responsible Party
The responsible party for data processing on this website is Pascas Labs UG (haftungsbeschränkt), Im Mediapark 5, 50670 Köln, Germany. You can contact us by email at info@pascas-labs.com.
Hosting
This website is hosted by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany. The hosting provider processes technical access data to deliver the website securely and reliably. The legal basis is our legitimate interest in operating a stable and secure website under Art. 6(1)(f) GDPR.
Server Log Files
Technical access data includes the requested file, referrer, access time, browser, operating system, device type and IP address. IONOS states that visitor IP addresses in its web-hosting statistics are anonymized on collection and access data is retained for eight weeks. Hosting statistics are also processed through IONOS WebAnalytics. The purpose is to provide and protect the website and assess its technical use, based on Art. 6(1)(f) GDPR. These hosting statistics are separate from the optional Google Analytics measurement described below.
Contact by Email or Inquiry Form
If you contact us by email or through our inquiry form, we process your name, email address, selected service, message and optional company name to respond. Providing information is voluntary, but the required fields are needed for a form inquiry. Inquiries are transmitted through IONOS by email to info@pascas-labs.com and handled in our business email account; the website does not store messages in a database. The legal basis is Art. 6(1)(b) GDPR for contractual or pre-contractual inquiries, otherwise Art. 6(1)(f) GDPR based on our interest in responding. Inquiry emails are deleted when the matter is concluded and they are no longer needed, subject to statutory retention obligations. For abuse prevention, a server file outside the public website stores hashed, pseudonymous IP identifiers and submission times, but no message content. The limiter considers the last hour. Expired records are removed on the next validated form request; without further requests, they remain until that cleanup occurs. Abuse prevention is based on Art. 6(1)(f) GDPR. We do not use inquiries for automated decisions or add you to a marketing mailing list.
Cookies
We store your consent choice, its time and the policy version in your browser under pascas-consent (local storage). The choice is valid for 180 days; expired entries are removed when the website next checks them. This necessary preference storage is based on Section 25(2)(2) TDDDG and Art. 6(1)(c) GDPR to manage consent. The language is determined by the page address, without additional storage. Google Analytics and its cookies are enabled only after your consent under Section 25(1) TDDDG and Art. 6(1)(a) GDPR. Rejecting analytics does not restrict access to the website or inquiry form. No advertising pixels or external CAPTCHA are integrated. Google Search Console verification uses a static meta tag, not a visitor tracking script.
Fonts
This website uses fonts that are bundled locally with the website. When you access the page, no connection to Google servers is established for loading fonts.
Your Rights
You have the right to request access to your personal data, rectification, erasure, restriction of processing, data portability, and objection to processing based on legitimate interests. Where processing is based on consent, you may withdraw that consent at any time with effect for the future. For this and further questions on data protection, you can contact us at info@pascas-labs.com.
Right to Lodge a Complaint
You may lodge a complaint with a data protection supervisory authority. In North Rhine-Westphalia, you can contact the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen, Kavalleriestraße 2-4, 40213 Düsseldorf, Germany, at www.ldi.nrw.de.
Changes to This Privacy Policy
We reserve the right to adapt this privacy policy so that it always complies with current legal requirements or to implement changes to our services in the privacy policy.
Google Analytics 4
Only with your consent do we use Google Analytics 4, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. We measure website usage and successful inquiries to improve our services. The legal bases are Art. 6(1)(a) GDPR and Section 25(1) TDDDG. Without consent, we load no Analytics script and send no Analytics measurements to Google, including no cookieless analytics pings.
Data includes pseudonymous browser and session identifiers, timestamps, page views, usage information, language and technical connection data. Google receives the IP address when a connection is made; according to Google, GA4 does not log or store it. Granular location and device collection, Google signals, advertising personalization, User-IDs and user-provided data collection are disabled. Measurement is pseudonymous, not anonymous.
We send only approved public page addresses without query parameters or fragments. Referrals are limited to known public providers or sanitized pages on our website. A confirmed form delivery may generate a generate_lead event with the selected service category and page language. Names, email addresses, company names and messages are never sent to Google, including in hashed form. Automatic form and interaction measurement is disabled.
The _ga and _ga_YKLZDD17ZM cookies associate a browser and session. Their lifetime is configured to a maximum of 90 days, without automatic extension on returning visits. User and event data retention in GA4 is set to two months, without resetting on new activity. Aggregated standard reports may persist longer; the two-month period does not apply to those aggregate reports.
Google processes data on our behalf under its data processing terms. Processing by Google LLC and other subprocessors, including in the USA, is possible. Google relies on the EU-US Data Privacy Framework for applicable US transfers and on standard contractual clauses for other transfers where required. Information about these safeguards and Google's processing is linked below.
Consent is voluntary and can be withdrawn at any time using Cookie settings: choose Necessary only, or deselect Google Analytics and save. Further measurement stops, the page reloads and our Analytics cookies are removed. Unsent form entries are lost when the page reloads. Withdrawal does not affect the lawfulness of earlier processing. Your choice applies to this browser only; clearing browser storage causes a new consent request.
Objection to processing based on legitimate interests
Where processing is based on Art. 6(1)(f) GDPR, you may object on grounds relating to your particular situation under Art. 21 GDPR. Contact info@pascas-labs.com. We will assess your objection in accordance with the applicable legal requirements.
External links and editorial access
External information pages are opened only when you follow a link. Authorized editors use Decap CMS with DecapBridge and GitHub in the separate /admin/ area. Visiting that area loads software files from unpkg.com; signing in and publishing requires connections to the relevant services. Technical connection data, login information and account data may be processed. These connections are not established by visiting public service and contact pages. The basis for technical administration and access protection is Art. 6(1)(f) GDPR.