Security Protocol

PRIVACY

Sovereign data sovereignty. Cryptographic isolation. Transparency.

STATUS: LEGAL COMPLIANCE VERIFIED | ENGINE: VGT DATTRACK 1.4.0 | STAND: 28. March 2026

1. Data controller

The data controller in the sense of the General Data Protection Regulation (GDPR) and other national data protection laws is:

VisionGaiaTechnology Rene Körner Cleverstraße 11, 50668 Köln, Deutschland info@visiongaia.de

2. Präventiver Datenschutz & Architektur ("Sovereign Privacy")

We apply the principle of "Privacy by Design" (Art. 25 GDPR) radically. We use the so-called VGT Shadow Net technology. This means legally and technically:

No third-country transfers: There is no connection to external Content Delivery Networks (CDNs), Google Fonts, Cloudflare, or social media trackers. The flow of metadata (such as IP addresses) to third parties, especially in the USA, is technically excluded.
Local hosting: All resources (fonts, scripts, stylesheets) are loaded exclusively from our own server in Germany.

3. Client-Side Processing (Local-Only)

All interactive tools, AI modules, or converters on this platform operate locally as client-side applications in your browser.

Legal classification: Since entered data or documents do not leave your browser and are not transmitted to our servers, we do not collect or process personal data in the sense of Art. 4 No. 2 GDPR regarding these inputs. After closing the browser tab, all data in the memory of your device are deleted.

Geltungsbereich der Engine: Dies betrifft alle interaktiven Anwendungen und kryptographischen Module unter der Domäne visiongaia.de.

Anwendungen Prüfen

4. Provision of the Website & Logfiles

With each visit to our website, the system of our hosting provider (Strato GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin) automatically records data and information from the computer system of the calling computer.

Collected: Anonymized IP address (prefix hashing), date and time of access, requested URL, browser type and version, and operating system.
Legal basis: Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in ensuring the stability, security, and error-free operation of the website.
Retention Period: This data will be automatically and irrevocably deleted ("purged") after a maximum of 7 days.
Processing agreement: We have entered into a data processing agreement (AVV) with Strato GmbH in accordance with Art. 28 GDPR.

5. Analysis: VGT Dattrack Engine

For purely statistical reach measurement and system analysis, we use our proprietary, self-hosted engine VGT Dattrack.

Processing logic & Anonymization:

No device access: Dattrack stores no cookies on your device and reads no information from your device that would require consent under § 25 para 1 TDDDG.
Kryptographische Anonymisierung: IP-Adressen werden serverseitig unmittelbar bei Erfassung mittels HMAC-SHA256 und einem rotierenden Master-Key verschlüsselt. Es werden niemals Klardaten gespeichert.
Zero‑Knowledge: Through automated key rotation (Key‑Rotation) every 30 days, the traceability of old data packets is made mathematically impossible.

Rechtsgrundlage: Die Verarbeitung erfolgt auf Basis unseres berechtigten Interesses (Art. 6 Abs. 1 lit. f DSGVO) an der nutzerfreundlichen Ausgestaltung und der betriebswirtschaftlichen Auswertung unserer Webpräsenz. Da die Daten unmittelbar kryptographisch anonymisiert werden, überwiegen unsere Interessen die Grundrechte der Betroffenen, zumal kein Personenbezug mehr herstellbar ist.

Right to object (Opt‑Out)

Although VGT Dattrack does not store personal data, we give you absolute control. You can disable anonymous collection here.

VGT Telemetry Node System active (Anonymous telemetry is being collected)

6. LocalStorage & State Management (§ 25 TDDDG)

Diese Website nutzt keine Tracking- oder Werbe-Cookies. Um Ihre persönlichen Präferenzen (z.B. Dark-Mode, Bestätigung des Opt-Outs für VGT Dattrack) zu speichern, nutzen wir den lokalen Speicher Ihres Browsers (LocalStorage).

Legal basis: Storing these settings is essential for providing the telemedia services you explicitly requested. The legal basis for accessing your device is therefore § 25 para 2 no. 2 TDDDG. Prior consent is not legally required. The data is not transmitted to our servers.

7. Your rights as a data subject (GDPR)

If personal data about you is processed, you are a data subject under GDPR and you have the following rights against the controller:

Right of Access (Art. 15 GDPR): You can request confirmation whether we process personal data about you.
Right to Rectification (Art. 16 GDPR) and Deletion (Art. 17 GDPR) ("Right to be Forgotten").
Right to Restriction of Processing (Art. 18 GDPR).
Right to Data Portability (Art. 20 GDPR).

Right to Object (Art. 21 GDPR)

Wherever we base the processing of personal data on a balancing test (Art. 6(1)(f) GDPR), you may object to the processing at any time. Please direct your objection to: info@visiongaia.de

8. Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for our company is:

State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia (LDI NRW)
Kavalleriestraße 2-4, 40213 Düsseldorf
Website: www.ldi.nrw.de