som-software GmbH
Privacy
English translation. Read the German original.
som-software GmbH takes the protection of your personal data seriously. This notice explains which data is processed when you use our website or contact us.
Controller and contact details
som-software GmbH
Tiberstr. 17
48249 Dülmen
Represented by managing directors André Löschmann and Markus Brinkbäumer
Phone: +49 2594 9 19 08 70
Fax: +49 2594 9 19 08 79
Email: info@som-software.de
Website provision and hosting
The website is hosted by ALL-INKL.COM. When it is accessed, technically necessary connection data is processed. This includes, in particular, the IP address, time of access, requested address, browser and operating system information and, where applicable, the previously visited page (referrer). This processing serves to deliver the website, analyse errors and prevent misuse. The legal basis is Article 6(1)(f) GDPR; our legitimate interest is the secure and reliable operation of our website.
The hosting provider processes data under the agreements applicable to hosting. Where it acts as a processor, this is based on a contract under Article 28 GDPR. Whether and for how long technical access records are stored in server log files depends on the logging and deletion rules configured for the hosting service. Log data is not combined with contact form information to create usage profiles. Further information about the provider is available at ALL-INKL.COM privacy information.
Cookies and similar storage functions
This website does not use analytics or marketing cookies and does not embed advertising trackers. Only the following technically necessary storage functions are used for the features you access:
| Name | Purpose | Duration |
|---|---|---|
| som_privacy | Remembers that you have closed the cookie notice. The value contains no personal identifier. | 180 days |
| som_contact | Associates the contact form security token with your session. It is set only when you use the form. | Until the end of the browser session; the form token is valid for a maximum of 30 minutes |
| som_theme (Local Storage) | Stores your chosen light or dark display mode. It is saved only after you make a choice and contains no personal identifier. | Until you change your choice or delete the website data in your browser |
Storage is used for the requested function on the basis of Section 25(2)(2) TDDDG. Where personal data is processed, we rely on Article 6(1)(f) GDPR. Our interest is a usable website and protection of the contact form against abusive enquiries. You can delete or block cookies and locally stored website data in your browser. If session cookies are blocked, form submission may not be available; you can still contact us by email or phone. You can reopen the notice at any time using “Cookies & privacy” in the footer.
Contact form, email and phone
When you contact us, we process your details to handle your enquiry and ask follow-up questions if needed. The contact form requires your name, email address and message; company and phone details are optional. The selected area of interest helps us direct your enquiry. The message is emailed to info@som-software.de. Messages are not additionally stored in a website database.
Processing is based on Article 6(1)(b) GDPR where your enquiry relates to a contract or pre-contractual measures. In other cases, Article 6(1)(f) GDPR is the basis; our legitimate interest is to respond appropriately to your enquiry. If you give consent for a separate purpose, Article 6(1)(a) GDPR applies. Consent can be withdrawn with effect for the future.
We retain enquiries for as long as needed to process them and any follow-up questions. They are then deleted unless statutory retention requirements or necessary evidence require otherwise. A contact enquiry does not subscribe you to advertising or a newsletter.
Protection against spam and abusive form submissions
The contact form uses a session token, server-side input validation, a completion-time check, a hidden verification field and request limits. No external CAPTCHA service is loaded. To enforce the limits, identifiers derived from the connection address using a server-side key and request timestamps are stored temporarily. The IP address is not stored in plain text in this file, and form entries are not stored there.
The limits use time windows of no more than one hour. Expired entries are removed during the next processing operation. The legal basis is Article 6(1)(f) GDPR; our legitimate interest is protecting our form and email infrastructure.
Cori examples and embedded content
The Cori section, labelled as an example, shows predefined workflows. It is not connected to a live AI system on this website. Inputs in this example section are processed only in the browser, are not sent to AI and are not stored permanently. No real quotes or orders are created through it.
Fonts are provided by the system fonts on your device. Images, icons and website scripts are loaded from our own hosting. No external font services, analytics tools, embedded videos or social networks are loaded automatically. External websites are accessed only when you select a corresponding link; the privacy notices of their respective operators apply.
Recipients and transfers
Personal data is accessible to the people responsible for handling it and to necessary hosting, email and technical support providers within their respective roles. Data is shared only on an applicable legal basis, particularly for contract processing, compliance with a legal obligation or necessary processing on our behalf. The website does not embed external tracking or AI services to which visitor data is automatically transferred.
Security
We take appropriate technical and organisational measures under Article 32 GDPR to protect your data. These include protection against unauthorised access and misuse, and encrypted website transmission via HTTPS. Nevertheless, internet data transmission, particularly subsequent email communication, may have security vulnerabilities. Complete protection cannot be guaranteed.
Your rights
Subject to the statutory conditions, you have the right to access your personal data, have inaccurate data rectified, request erasure or restriction of processing, and receive data portability (Articles 15–20 GDPR). Where processing is based on your consent, you may withdraw it at any time with effect for the future. This does not affect the lawfulness of earlier processing. To exercise your rights, please use the contact details above.
Right to object
You have the right to object at any time, on grounds relating to your particular situation, to processing of your personal data based on Article 6(1)(e) or (f) GDPR. We will then stop processing the data concerned unless there are compelling legitimate grounds overriding your interests, rights and freedoms, or processing serves to establish, exercise or defend legal claims. You may object to processing for direct marketing at any time.
Right to lodge a complaint
You may lodge a complaint with a data protection supervisory authority, particularly in the member state of your residence, place of work or the alleged infringement. In North Rhine-Westphalia, the competent authority is the State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia: www.ldi.nrw.de.
Version: October 2026
