Privacy policy
The German version of this privacy policy is authoritative.
1. Controller
Kupermann IT und Managementberatung
Owner: Michael Kupermann
Luegallee 118
40545 Düsseldorf, Germany
Email: kontakt@firescore.de
2. Data collected when visiting this website
When you visit this website, the hosting provider (Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany) automatically stores information in server log files (IP address, date and time, requested file, browser type). Processing serves the reliable operation of the website. Legal basis: Art. 6 (1) lit. f GDPR. Log files are deleted automatically after a short period.
3. Contact by email
If you contact us by email, we process your details to handle the inquiry (Art. 6 (1) lit. b GDPR). The data is deleted once it is no longer required and no statutory retention obligations apply.
4. Contact form
Details submitted through the contact form, that is your name, company, email address and your message, are processed solely to handle your enquiry. The legal basis is Art. 6 (1) lit. b GDPR for contract-related enquiries and otherwise your consent under Art. 6 (1) lit. a GDPR, which you may withdraw at any time with effect for the future. The message is delivered to us as an email and stored on our own mail server. It is not passed to third parties for advertising purposes.
5. Access to protected content
We release the case study and the self-test on request only. For this we collect your business email address and, if you provide them, your name and company. We check automatically whether a mail server can be reached for the domain of your address, and then send a one-time access link to that address. Addresses at free mail providers are reviewed by hand before release.
The legal basis is your consent under Art. 6 (1) lit. a GDPR. The details are stored on our server in Germany and deleted no later than 24 months after your last request. Your IP address is processed briefly when you submit the form, in order to prevent abuse and automated bulk requests. It is not stored together with your request and is deleted automatically after one hour. The legal basis for this is our legitimate interest in abuse-free operation under Art. 6 (1) lit. f GDPR. The same applies to the contact form. Your address is not used for advertising; we would ask for separate consent for that. You can withdraw informally by writing to kontakt@firescore.de and we will delete the entry.
6. Sending email
We run our mailboxes on our own server in Germany. For delivering outgoing email we use the SMTP relay service of Google (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) on the basis of a data processing agreement. Sender, recipient and the content of the respective message are transmitted insofar as this is necessary for delivery.
7. Web fonts
The fonts on this website (Source Serif 4) are hosted locally on this website’s server. No connection to third-party servers, in particular not to Google Fonts, is established when pages are loaded.
8. Audience measurement
We measure how our pages are used with Umami. The software runs on our own server in Germany, no data flows to third parties, and no connection to an external provider is made. We record the page visited, the referrer, the approximate origin at country level, device type, browser and screen size.
The measurement works without cookies and without any persistent identifier. Your IP address is not stored; it only feeds into an irreversible checksum that is formed with a new random value every day and is therefore worthless after a day at the latest. Recognition across several days or across other websites is impossible. The legal basis is our legitimate interest in designing our offering to meet demand, under Art. 6 (1) lit. f GDPR.
If your browser sends the “Do Not Track” signal, you are not counted. You can also block the measurement with any common content blocker.
9. Cookies
This website embeds no advertising networks. An ordinary visit to this website sets no cookie at all, not even when you fill in the forms. A single cookie appears only once you use an access link for the protected content. It is called fs_zugang, contains no plain-text data but a signed value, and expires after 90 days. This cookie is technically necessary in order to provide the access you explicitly requested (§ 25 (2) no. 2 TDDDG) and therefore requires no consent. For this reason no consent banner is required.
10. Your rights
You have the right to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21). You also have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR).
11. Data processing in FireScore projects
For surveys within client projects: processing on the basis of a data processing agreement under Art. 28 GDPR, encrypted storage, no transfer to third parties, deletion after completion of the second survey at the latest. Details are governed by the agreement with the respective company.
Last updated: August 2026