Privacy Policy
This translation is provided for convenience; the German version at interfays.de is legally binding.
Your privacy is important to us. It is one of MARCODES GmbH’s principles to respect your privacy and to comply with all applicable laws and regulations regarding any personal data we process about you on our website www.interfays.com. Interfays is a service of MARCODES GmbH.
In accordance with Art. 13 of the General Data Protection Regulation (GDPR), we inform you below about which personal data we process when you visit this website, for what purposes, and on what legal basis.
Controller
The controller responsible for data processing on this website is:
MARCODES GmbH
Lena-Christ-Str. 2
82031 Grünwald
Germany
Managing Director: Marco Hochmuth
Phone: +49 89 244 19 0 19
Email: hi@interfays.com
Hosting
This website is hosted on a server operated by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. The server is located in a data center in Germany. Hetzner processes the data generated when you visit the website on our behalf. We have concluded a data processing agreement with Hetzner pursuant to Art. 28 GDPR.
To set up and maintain the server, we use Laravel Forge by Laravel Holdings Inc., USA. Laravel Forge only has administrative access to the server in order to install and update software; the website is not delivered through it, and during regular operation Laravel Forge does not process any visitor data. However, access to data on the server cannot be technically ruled out. Laravel Holdings Inc. is certified under the EU-U.S. Data Privacy Framework; any transfer to the USA is based on the adequacy decision of the European Commission of July 10, 2023 (Art. 45 GDPR).
These service providers are used on the basis of Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure, reliable, and efficient provision of our website.
Log data
When you visit our website, your browser transmits data to our server for technical reasons. This includes:
- the IP address of your device
- the date and time of access
- the page or file requested (URL)
- the type and version of your browser and your operating system (user agent)
- the previously visited page (referrer), if your browser transmits it
This data is required to deliver the website to your device. Our server does not keep a log of all requests. It only logs errors that occur during delivery. Such an entry may contain the IP address, the date and time, the requested address, and the previously visited page. We do not combine this data with other data.
The processing is based on Art. 6(1)(f) GDPR. Our legitimate interest lies in technically delivering the website and ensuring its stability and security, for example in order to detect attacks and errors. The error logs are automatically deleted after 14 days unless they are needed for longer in an individual case to investigate a security incident.
Cookies
This website does not use cookies for analytics, marketing, or tracking purposes. Only technically necessary cookies are set:
- Session cookie (“interfays_session”): assigns your requests to a session during a visit, for example when you submit the contact form.
- XSRF-TOKEN: protects the contact form against cross-site request forgery attacks, in which third parties submit forms in your name.
These cookies contain no information about you personally and are not analyzed for any other purpose. They are set each time a page is loaded and expire 120 minutes after your last page view.
Storing these cookies on your device is permitted without consent under Section 25(2) No. 2 of the German Telecommunications Digital Services Data Protection Act (TDDDG), as they are strictly necessary to provide the function you have requested. The associated processing is based on Art. 6(1)(f) GDPR; our legitimate interest lies in the secure provision of the contact form. You can block or delete cookies in your browser settings; in that case, the contact form may not work.
Contact form
If you send us an inquiry via the contact form, we process the details you enter:
- Name
- Email address (required field)
- Phone number
- Your message
We use these details exclusively to process your inquiry and to get in touch with you. The entries are stored in our website’s content management system (Statamic) on our own server and are additionally sent by email to hi@interfays.com. They are not passed on to third parties.
To protect against automatically sent spam messages, the form contains a field that is invisible to humans (known as a honeypot). We do not use any third-party services for this.
The legal basis is Art. 6(1)(b) GDPR if your inquiry is related to the performance of a contract or is necessary for taking pre-contractual measures. In all other cases, the processing is based on our legitimate interest in answering inquiries addressed to us (Art. 6(1)(f) GDPR).
If your inquiry does not result in an order, we delete your details no later than six months after processing has been completed. The entries in the content management system are automatically deleted six months after receipt. If it does result in an order, we retain the details for as long as statutory retention obligations require.
Contact by email or phone
If you contact us by email or phone, we process your details (for example, name, email address, phone number, and the content of your inquiry) in order to handle your request. The legal basis is Art. 6(1)(b) GDPR if your inquiry is related to a contract or pre-contractual measures, otherwise Art. 6(1)(f) GDPR based on our legitimate interest in answering your inquiry. With regard to deletion, the provisions above for the contact form apply accordingly.
Our mailbox hi@interfays.com and the sending of form notifications are provided on our behalf via Microsoft 365 by Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. A data processing agreement pursuant to Art. 28 GDPR is in place with Microsoft. Microsoft is certified under the EU-U.S. Data Privacy Framework; any transfer to the USA is based on the adequacy decision of the European Commission (Art. 45 GDPR). The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in reliable email communication.
Fonts
The fonts used on this website are stored locally on our server and loaded from there. No connection to servers of Google or other third-party providers is established when you access the website.
No analytics or tracking services
We do not use any analytics, tracking, or marketing services on this website and do not embed any third-party content such as videos, maps, or social media plugins. All images, including those of our portfolio projects, are loaded from our own server.
External links
Our website contains links to external websites, for example to www.marcodes.com and www.kfz-gutachten-meisterwerk.de. Data is only transferred to these websites once you click a link. Please note that we have no control over the content and policies of these websites and cannot accept responsibility or liability for their privacy practices. The privacy notices of the respective provider apply.
Security of your personal data
For security reasons, this website uses SSL/TLS encryption. You can recognize an encrypted connection by “https://” in your browser’s address bar.
When we collect and process personal data, and for as long as we retain it, we protect it by commercially reasonable means to prevent loss and theft as well as unauthorized access, disclosure, copying, use, or modification.
Although we do our best to protect the personal data you provide to us, please note that no method of electronic transmission or storage is 100% secure and no one can guarantee absolute data security. We will comply with the laws applicable to us with respect to any data breach.
How long we retain your personal data
We retain your personal data only for as long as we need it. This period depends on what we use your data for in accordance with this privacy policy. Once your personal data is no longer needed, we delete it or anonymize it by removing all details that identify you.
Where necessary, however, we retain your personal data in order to comply with statutory retention obligations, for example under commercial or tax law, if an inquiry results in an order.
Children’s privacy
Our products and services are not directed at children under the age of 13, and we do not knowingly collect personal data from children under the age of 13.
Your rights
Under the GDPR, you have the following rights with regard to your personal data:
- Right of access to the data we process (Art. 15 GDPR)
- Right to rectification of inaccurate or incomplete data (Art. 16 GDPR)
- Right to erasure (Art. 17 GDPR)
- Right to restriction of processing (Art. 18 GDPR)
- Right to data portability (Art. 20 GDPR)
- Right to object to processing (Art. 21 GDPR)
If you believe that information we hold about you is inaccurate, out of date, or incomplete, please contact us. We will take reasonable steps to correct this information. Please note that we may need to request certain information from you to verify your identity. We will not discriminate against you for exercising any of your rights.
Right to object: Where we process your data on the basis of Art. 6(1)(f) GDPR, you have the right to object to this processing at any time on grounds relating to your particular situation. We will then no longer process your data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing serves the establishment, exercise, or defense of legal claims.
Right to lodge a complaint with a supervisory authority
If you believe that we have violated an applicable data protection law, you can contact us at any time. We will review your complaint promptly and respond to you in writing. Irrespective of this, under Art. 77 GDPR you have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is:
Bayerisches Landesamt für Datenschutzaufsicht (BayLDA, Bavarian State Office for Data Protection Supervision)
Promenade 18
91522 Ansbach
www.lda.bayern.de
Obligation to provide data and automated decision-making
Providing your data is neither a statutory nor a contractual requirement. Without your email address, however, we cannot respond to an inquiry submitted via the contact form. No automated decision-making, including profiling, within the meaning of Art. 22 GDPR takes place.
Changes to this privacy policy
We may, at our discretion, change this privacy policy to reflect updates to our business processes, current acceptable practices, or legislative or regulatory changes. If we decide to change this privacy policy, we will publish the changes here at the same link through which you are accessing this privacy policy.
Where required by law, we will obtain your consent or give you the opportunity to opt in to or out of any new use of your personal data.
Contact us
If you have any questions or concerns regarding your privacy or would like to exercise your rights, you can contact us using the following details:
MARCODES GmbH, Attn: Marco Hochmuth
Email: hi@interfays.com
Phone: +49 89 244 19 0 19
Contact form: www.interfays.com/contact
Last updated: October 2026