Privacy Policy
Last updated: 19 September 2026
1. Controller
Wyrmhost.net is an offering of OAK Software GmbH. The
controller within the meaning of the General Data
Protection Regulation (GDPR) is:
OAK Software GmbH
Gesellschaft für Management-Lösungen
Marspfortengasse 8
50667 Köln
Germany
Phone: +49 221 271 283 73
Email:
{{ contactAddress }}
2. Website access and server logs
When you access this website, technically necessary data
is processed. This may include, in particular, your IP
address, the date and time of access, the requested file
or URL, referrer URL, browser type and version, operating
system, hostname, HTTP status code, and amount of data
transferred.
This processing is carried out to deliver the website,
ensure its stability and security, and prevent misuse.
The legal basis is Article 6(1)(f) GDPR. Our legitimate
interest lies in the secure and reliable operation of
this website.
Access logs, WAF logs, and security-event logs on the
origin server are retained for 14 days and are then
deleted, unless statutory retention or preservation in
connection with a specific security incident is required.
3. Hosting by IP-Projects
The origin server for this website is operated in German
data centres by IP-Projects GmbH & Co. KG, Am
Vogelherd 14, 97295 Waldbrunn, Germany. IP-Projects
processes the connection and log data required to deliver
and securely operate the website on our behalf. The legal
basis is Article 6(1)(f) GDPR; processing on our behalf is
governed by Article 28 GDPR.
Log files are stored so that the customer can create
statistics. IP-Projects evaluates these log files solely
to provide the customer with centrally prepared and
aggregated statistics in accordance with the customer
information. Any further storage or use by IP-Projects or
third parties is excluded.
Further information:
IP-Projects privacy information.
4. Cloudflare
We use services provided by Cloudflare, Inc., 101
Townsend St., San Francisco, CA 94107, USA, in particular
for DNS, content delivery, TLS encryption, and protection
against abusive access. Connections to this website
therefore first pass through Cloudflare's global network.
Cloudflare may process IP addresses, routing and system
information, and information about network traffic.
The legal basis is Article 6(1)(f) GDPR. Our legitimate
interest is the fast, reliable, and attack-resistant
delivery of the website. Where Cloudflare processes data
on our behalf, an agreement under Article 28 GDPR applies.
According to Cloudflare, transfers to the United States
rely on its certification under the EU-US Data Privacy
Framework and, additionally, on the EU Standard
Contractual Clauses.
Cloudflare security and Web Application Firewall (WAF)
events are retained for 14 days and are then deleted,
unless they must be preserved in connection with a
specific security incident or due to a statutory
obligation.
Further information:
Cloudflare Privacy Policy.
5. CrowdSec
IP addresses are forwarded to CrowdSec for security
analysis and to detect and block attacks. This processing
is based on Article 6(1)(f) GDPR. Our legitimate interest
is protecting the website and its infrastructure against
abusive access and other attacks.
6. Fonts and scripts
The fonts used on this website are hosted on our own server
and delivered together with the page. No connection to
Google or any other font provider is established.
Like the fonts, the React and ReactDOM libraries required
to render this website are hosted on our own server and
delivered together with the page. No connection to
third-party content delivery networks (CDNs) is
established.
7. Cookies and similar technologies
This website itself does not use analytics, marketing, or
profiling cookies and does not use a web analytics tool.
Depending on the security features enabled, Cloudflare may
set technically necessary cookies to identify automated
or abusive access and protect the website. Where such
cookies are used, access to your device is based on
Section 25(2)(2) of the German Telecommunications Digital
Services Data Protection Act (TDDDG); subsequent data
processing is based on Article 6(1)(f) GDPR. For this
reason, no consent banner is currently used.
8. Contact by email
If you contact us by email, we process the information you
provide to respond to your enquiry and any follow-up
questions. The legal basis is Article 6(1)(b) GDPR where
the enquiry concerns entering into or performing a
contract; otherwise, it is Article 6(1)(f) GDPR. Our
legitimate interest is the appropriate handling of your
enquiry. The data is deleted once the enquiry has been
finally resolved, unless statutory retention obligations
or overriding legitimate grounds require otherwise.
9. Recipients and transfers to third countries
Recipients of personal data are limited to the technical
service providers named above and, where applicable,
other recipients where disclosure is required by law.
Data may be transferred to countries outside the European
Economic Area in connection with Cloudflare. The safeguards used are described in the relevant
sections above.
10. Your rights
Subject to the statutory requirements, you have the right
of access (Article 15 GDPR), rectification (Article 16
GDPR), erasure (Article 17 GDPR), restriction of
processing (Article 18 GDPR), and data portability
(Article 20 GDPR). You may withdraw consent at any time
with effect for the future (Article 7(3) GDPR).
Right to object: Where we process your
data on the basis of Article 6(1)(f) GDPR, you may object
to that processing at any time on grounds relating to your
particular situation (Article 21 GDPR).
You also have the right to lodge a complaint with a data
protection supervisory authority (Article 77 GDPR), in
particular in the Member State of your habitual residence,
place of work, or the place of the alleged infringement.
11. Requirement to provide data and automated decisions
You are not legally or contractually required to provide
personal data merely to visit this website. However, the
website cannot be retrieved without the technically
necessary connection data. No automated decision-making,
including profiling, takes place.
