Legal

Privacy notice

This privacy notice covers the VeloManager marketing website only. It does not describe processing inside the signed-in product for your organisation — there we act as a processor under the applicable agreement for the fleet data you enter.

Last updated: September 2026

1. Controller

The controller in the sense of Art. 4 (7) GDPR is:

Software by Design GbR
Husumer Baum 2
24837 Schleswig
Germany
Email: datenschutz@software-by-design.de

2. Scope of this notice

This notice describes how personal data is processed when you visit the public VeloManager marketing pages (including this privacy notice). It does not cover processing inside the authenticated web or companion client of your organisation — your organisation is the controller for the fleet data it enters; we process that data as a processor under contract.

3. Cookies & local storage

This marketing site sets no tracking cookies for browsing or advertising, and writes nothing to local storage for analytics. There is no cookie banner for analytics because Matomo runs cookieless.

One deliberate exception: if you use the analytics opt-out in section 4, a single cookie (mtm_consent_removed) is stored on your device. Its only purpose is to remember your objection; it contains no identifier that could be used to track you.

After you sign in to the product, technically necessary session or authentication storage may be required to operate the service. That is separate from marketing analytics and is covered by the product terms.

4. Analytics & tracking

We measure use of this marketing site with a self-hosted Matomo instance operated by us on servers within the European Union (matomo.software-by-design.de). No analytics data is shared with third parties for advertising, and we do not embed social-media widgets or advertising scripts.

Matomo is configured to be as privacy-preserving as possible:

• Cookieless: tracking cookies are disabled (disableCookies); no cross-site or cross-device profile is created.
• Anonymised IP addresses: IP addresses are shortened before storage and are not used to identify visitors.
• Minimal data: requested page, referring page, browser type, operating system, screen size, and the approximate country derived from the shortened IP address.

Legal basis: Art. 6 (1) (f) GDPR. Our legitimate interest is understanding which marketing pages are useful so that we can improve them. You can object to this processing at any time using the button below; your visits will then no longer be counted in this browser.

If JavaScript is disabled in your browser, no analytics runs at all — the opt-out button is then not needed and not shown.

5. Server log files

Our hosting provider records technical access logs in order to operate the service securely. These logs typically include:

• Date and time of the request
• The requested URL and HTTP method
• HTTP status code and amount of data transferred
• The referring URL (if sent by the browser)
• Browser identification (user agent)
• The IP address of the requesting system

Legal basis: Art. 6 (1) (f) GDPR. Our legitimate interest is the secure operation of the website and defence against attacks. Log data is retained only for a short, technically justified period and is not merged with Matomo visitor profiles.

6. Fonts

Marketing pages load fonts from fonts.bunny.net. The font CDN may receive your IP address and referrer. Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in consistent, performant typography).

7. Contact by email

If you contact us by email, we process the data you send (name, email address, message content) to answer your request (Art. 6 (1) (b) and (f) GDPR). We do not share it with third parties except where required by law.

8. Hosting

This site is hosted on infrastructure in the European Union. The hosting provider acts as a processor under Art. 28 GDPR; an order processing agreement is in place. Processing is limited to providing this website and the related service.

9. External links

This site may link to external offerings (for example software-by-design.de or GitHub). Following a link leaves this site; we do not control processing on those destinations.

10. Your rights

Where we process your personal data, you have the right to:

• Access (Art. 15 GDPR)
• Rectification (Art. 16 GDPR)
• Erasure (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Object to processing based on legitimate interests (Art. 21 GDPR)
• Lodge a complaint with a supervisory authority (Art. 77 GDPR)

To exercise your rights, email datenschutz@software-by-design.de.

11. Changes to this notice

We update this notice when the site, the services we use, or the law changes. The current version is always available on this page.

Note on this English version

This English text is a courtesy translation. In case of doubt or legal dispute, the German Datenschutz notice.