Privacy Policy (GDPR)

1. Data Controller

The controller responsible for data processing on this website under the General Data Protection Regulation (GDPR) is:

Bash-IT Support Owner: Kamran Basharat Westliche Karl-Friedrich-Straße 227 75172 Pforzheim Germany Phone: +49 176 23755364 Email: kontakt@bash-it.net

2. General Principles & Scope

We treat your personal data confidentially and strictly in accordance with statutory data protection regulations (GDPR, BDSG, TDDDG) and this privacy policy.

This website intentionally does not use advertising trackers, marketing cookies, or third-party web analytics (such as Google Analytics). Your data will never be sold or disclosed to unauthorized third parties.

3. Website Hosting & Server Log Files

This website is hosted by IONOS SE (Elgendorfer Str. 57, 56410 Montabaur, Germany) on ISO 27001-certified servers in German data centers. A Data Processing Agreement (DPA) pursuant to Art. 28 GDPR has been concluded.

When visiting our site, technical connection data is automatically processed in server log files (IP address, date/time, requested URL, status code, transferred data, browser version, operating system).

This processing is based on Art. 6 (1) lit. f GDPR (legitimate interest in stable, secure operation and defense against attacks). Server log files are deleted or anonymized within a maximum of 14 days.

4. Contact Inquiries (Form, Email, Phone)

If you contact us via callback form, email, or telephone, your details are processed solely to handle and resolve your inquiry.

The legal basis is Art. 6 (1) lit. b GDPR (pre-contractual measures or contractual fulfillment) or Art. 6 (1) lit. f GDPR (legitimate interest in communicating with prospective clients).

Data is erased once your inquiry is concluded and statutory retention periods (if any) have expired.

5. Interactive AI Project Assistant

We offer an interactive AI assistant for non-binding initial IT project assessments.

Processing via AI Infrastructure: To generate responses, we use the specialized inference API of Groq Inc. (Mountain View, CA, USA). Data transmission is encrypted and strictly purpose-bound solely for response generation. Groq does not persistently store chat prompts for training models under this API service.

Abuse Prevention (Rate Limiting): To protect against server overload and DoS attacks, your IP address is held temporarily in volatile server memory for at most 60 seconds (Art. 6 (1) lit. f GDPR).

Retention: Chat transcripts are not persistently logged on our server. Please avoid submitting sensitive personal data (e.g., passwords, financial credentials) in the chat.

6. Local Browser Storage & No Tracking Cookies

We do not use tracking or profiling cookies. Purely technical preferences are stored locally in your browser (Local Storage) pursuant to § 25 (2) No. 2 TDDDG (e.g., 'theme' for light/dark mode and consent banner acknowledgement).

This data remains strictly on your device and is not transmitted to our server.

7. Locally Hosted Fonts (Self-Hosted)

All typography (Inter, Plus Jakarta Sans, JetBrains Mono) is hosted locally on our own server. No connections to Google Fonts or external CDNs are established.

8. Your Rights Under GDPR

You have the right to free information regarding your personal data (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR), data portability (Art. 20 GDPR), and objection to processing (Art. 21 GDPR).

You can contact us at any time at kontakt@bash-it.net to exercise these rights.

9. Right to Lodge a Complaint with a Supervisory Authority

Pursuant to Art. 77 GDPR, you have the right to lodge a complaint with a supervisory authority. The competent supervisory authority for our jurisdiction is:

Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg (LfDI BW) Lautenschlagerstraße 20 70173 Stuttgart, Germany Email: poststelle@lfdi.bwl.de Website: https://www.baden-wuerttemberg.datenschutz.de

10. SSL/TLS Encryption & Status

This website utilizes modern SSL/TLS encryption with HSTS for secure data transmission.

Status: October 2026.