Privacy

Privacy notice for the ReGAIN website

This notice explains how personal data is processed when you visit our project website, hosted through Amazon Web Services (AWS), and when you contact us. Personal data is information relating to an identified or identifiable person.

Last updated: 9 November 2026

1. Controller and privacy contact

The controller responsible for processing personal data in connection with this website is:

insightfabrix solutions GmbH
Weilerstraße 14
73614 Schorndorf, Germany

Contact for privacy enquiries: Dr.-Ing. Kai Kerber
Email: kai.kerber@insightfabrix.com

2. Website hosting through Amazon Web Services

Our website is hosted through Amazon Web Services (AWS). For customers in Germany, the provider is generally Amazon Web Services EMEA SARL, 38 Avenue John F. Kennedy, L-1855 Luxembourg. Static content is stored in Amazon S3 in the Frankfurt region (eu-central-1). Amazon CloudFront delivers it through a global network of server locations.

Visits may involve the processing of technical connection and usage data, including your IP address, access time, requested pages, browser and device information, and the referring page if your browser sends it. This serves website delivery, stability, troubleshooting and protection against abuse. The legal basis for the necessary processing we initiate is Article 6(1)(f) GDPR. Our legitimate interest is providing a secure, functioning public information service.

Recipients of the data required for technical delivery are AWS and its subcontractors. Where AWS processes personal data on our behalf, the data processing agreements apply. Further information: AWS data privacy information and AWS GDPR Data Processing Addendum.

CloudFront's global delivery and service operations may involve processing outside the European Economic Area, particularly in the United States. Such transfers are subject to Articles 44 et seq. GDPR. AWS describes its contractual safeguards, including EU Standard Contractual Clauses, in its Data Processing Addendum. Our privacy contact can also provide information about the applicable safeguards.

3. Cookies and similar technologies

This website uses no analytics or advertising trackers and sets no cookies of its own. The selected language is determined by the page address and is not stored in cookies or local browser storage. Fonts and images are delivered without additional third-party embeds.

4. Contact by email

When you email us, we process your email address, the information and attachments you provide, and technical message data to handle your enquiry and reply. This website does not provide a contact form, user accounts or newsletter subscriptions.

General enquiries are handled under Article 6(1)(f) GDPR; our legitimate interest is communicating with interested parties and project participants. If your enquiry concerns entering into or performing a contract with you, Article 6(1)(b) GDPR applies.

Access is limited to people handling your enquiry and necessary IT and email service providers within their responsibilities. Disclosure to others takes place only where necessary for your enquiry on a lawful basis, with your consent, or to meet a legal obligation. Please provide only the information needed for your enquiry.

5. Links and embedded content

Our pages link to project partners, publications and other external services. Following a link establishes a connection to the respective provider, whose privacy notice applies to its processing.

Images and logos form part of our own page content. We do not embed external maps, video players or social media plugins. An ordinary link, such as a LinkedIn link or a publication DOI, is not an embed of this kind.

6. Retention periods

We retain personal data only as long as necessary for the stated purposes. Enquiry data is deleted once the matter is resolved, unless statutory retention duties or legitimate reasons require continued storage, such as establishing or defending legal claims. Where retention duties apply, we restrict processing accordingly.

We have not enabled our own S3 access logs or CloudFront access logs for this website. AWS processes technical data to deliver and protect the service in accordance with the relevant operational purposes and contractual provisions. Further details are available in the AWS data privacy information linked above.

7. Your rights

Subject to the applicable legal conditions, you have the following rights:

• Access to your personal data (Article 15 GDPR),
• Rectification of inaccurate and completion of incomplete data (Article 16 GDPR),
• Erasure of your data (Article 17 GDPR),
• Restriction of processing (Article 18 GDPR),
• Data portability for automated processing based on consent or a contract (Article 20 GDPR),
• Withdrawal of consent at any time with future effect, without affecting the lawfulness of earlier processing (Article 7(3) GDPR).

Right to object: Where processing is based on Article 6(1)(f) GDPR, you may object at any time on grounds relating to your particular situation (Article 21 GDPR). We will stop processing unless we demonstrate compelling legitimate grounds overriding your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims. You may object to direct marketing at any time without giving reasons.

To exercise your rights, contact kai.kerber@insightfabrix.com. You may also lodge a complaint with a data protection supervisory authority (Article 77 GDPR), particularly where you live or work or where the alleged infringement occurred. Our competent authority is the State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg .

8. Security and updates

The website is delivered over an encrypted HTTPS connection (TLS). However, complete security of all data transmissions over the internet cannot be guaranteed.

We update this notice when the website, services or legal requirements change. The current version is available through the Privacy link on our website.