Data Protection

We have drawn up this privacy policy (version September 18, 2026) to explain to you, in accordance with the General Data Protection Regulation (EU) 2016/679, what information we collect, how we use data, and what choices you have as a visitor to this website.

Unfortunately, these explanations sound very technical, but we have endeavored to describe the most important things as simply and clearly as possible.

Controller

The controller responsible for data processing on this website is:

sourceWAY GmbH
Adalbertsteinweg 97
52070 Aachen
Germany

Email: [email protected]

Further details are available in our legal notice. We have not appointed a data protection officer, as there is no statutory obligation to do so under Article 37 GDPR in conjunction with section 38 of the German Federal Data Protection Act (BDSG).

Automatic Data Storage

When you visit websites these days, certain information is automatically created and stored, including on this website.

When you visit our website, as you are currently doing, our web server (the computer on which this website is stored) automatically saves data such as:

- the address (URL) of the accessed website

- the browser and browser version

- the operating system used

- the address (URL) of the previously visited page (referrer URL)

- the host name and IP address of the device from which access is made

- the date and time

- in files (web server log files)

Web server log files are generally stored for two weeks and then automatically deleted. We do not share this data, but cannot rule out the possibility that this data may be viewed in the event of illegal behavior. The legal basis for this processing is Article 6 (1) (f) GDPR. Our legitimate interest lies in the technically sound provision and the security of this website.

Rights under the General Data Protection Regulation

Under the GDPR and the German Federal Data Protection Act (BDSG), you are generally entitled to the following rights:

- Right of access (Article 15 GDPR)
- Right to rectification (Article 16 GDPR)
- Right to erasure ("right to be forgotten") (Article 17 GDPR)
- Right to restriction of processing (Article 18 GDPR)
- Right to notification, meaning the obligation to provide information in connection with the rectification or erasure of personal data or the restriction of processing (Article 19 GDPR)
- Right to data portability (Article 20 GDPR)
- Right to object (Article 21 GDPR)
- Right not to be subjected to a decision based solely on automated processing, including profiling (Article 22 GDPR)

Where processing is based on your consent, you may withdraw that consent at any time with effect for the future (Article 7 (3) GDPR). The lawfulness of processing carried out up to the point of withdrawal remains unaffected.

If you believe that the processing of your data violates data protection law or that your data protection rights have otherwise been infringed, you can lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, your place of work or the place of the alleged infringement (Article 77 GDPR). The authority responsible for us is:

Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen
Kavalleriestraße 2-4
40213 Düsseldorf
Germany
https://www.ldi.nrw.de/

TLS encryption with https

We use https to ensure secure data transmission over the internet (data protection by design, Article 25, Paragraph 1 GDPR). By using TLS (Transport Layer Security), an encryption protocol for secure data transmission over the internet, we can ensure the protection of confidential data. You can recognize the use of this data transmission security by the small lock symbol in the top left corner of the browser and the use of the https scheme (instead of http) as part of our internet address.

Web Analytics

We use web analytics to collect statistics about the use of our website. These statistics are important to us so that we can continuously improve our presence and content. Data protection is our top priority, which is why we rely on the open source analytics tool Rybbit. Rybbit is not provided by a third party. We operate it ourselves on our own infrastructure at track.sourceway.de. The data collected does not leave our area of responsibility. It is not transmitted to the maker of the software, to any other third party, or to any country outside the European Union.

In the configuration we use, Rybbit works without cookies. No information is stored on your device or read from it, which means that no consent under section 25 (1) of the German Telecommunications Digital Services Data Protection Act (TDDDG) is required. Rybbit does not follow your browsing across websites and does not create personal user profiles.

Each page view records the page accessed, the page title, the time spent, the entry and exit page, the previously visited page (referrer), any campaign parameters (UTM parameters), browser type and version, operating system, device type and screen resolution, the approximate location at country, region and city level derived from the IP address, as well as the date and time of the visit.

Your IP address is processed only transiently, in order to determine the approximate location and to generate a session identifier. It is not stored. The session identifier is derived from a hash of the IP address and the browser identifier (user agent), using a random value that changes every day. Any inference back to the IP address is therefore ruled out, and no recognition takes place beyond the change of day.

The legal basis is Article 6 (1) (f) GDPR. Our legitimate interest lies in the statistical evaluation of the use of our website and in its analysis, optimization and technically sound operation. Your legitimate interests are taken into account by the fact that the evaluation is carried out without cookies, without storing your IP address and without merging the data with other data sets.

The analytics data is deleted after 14 months. You may object to this processing at any time under Article 21 (1) GDPR, using the contact details stated above. You can also prevent the collection by preventing the analytics script from loading in your browser, for example by using a script or tracking blocker.

Further information about Rybbit is available at https://rybbit.io/.