Privacy Policy

adam-its.com · Last updated: 12 July 2026 · English version; a German version can be provided on request.

The short version: This site sets no cookies, runs no advertising or cross-site tracking, and loads no external resources. We collect anonymous, aggregate usage statistics only. Personal data is processed solely where you actively provide it — by emailing us or by electronically signing an NDA — and only for that purpose.

1. Controller

ITS Automotive GmbH · Neue Ramtelstr. 4/2 · 71229 Leonberg, Germany
Managing Director: Martin König · Amtsgericht Stuttgart HRB 749837
Contact: [email protected] · Tel. +49 163 2147684

2. Hosting (Cloudflare)

This website is delivered via Cloudflare Pages (Cloudflare, Inc., USA / Cloudflare Germany GmbH). When you access the site, Cloudflare technically processes connection data (IP address, requested URL, user agent, timestamp) to deliver the pages and protect against attacks. This processing is based on our legitimate interest in a secure, performant delivery of the site (Art. 6(1)(f) GDPR). Cloudflare acts as our processor; transfers to the USA are covered by the EU-U.S. Data Privacy Framework and standard contractual clauses. We do not receive or store these connection logs ourselves.

3. Anonymous usage statistics (opt-in)

To understand which parts of the site are used, we count a small set of anonymous events (e.g. "private or company track chosen", "demo dashboard reached"). For this we store no IP address, no cookie, no device identifier and no personal data — only whitelisted event names with coarse categories (track, world, age bracket) in an aggregate counter that auto-expires after 120 days. These counts cannot be linked to you. Legal basis: legitimate interest in measuring anonymous usage (Art. 6(1)(f) GDPR); recital 26 GDPR (anonymous data) applies.

Your choice: even though this data is anonymous, counting only starts if you allow it in the privacy banner. Choosing "Essential only" switches it off entirely. You can change your decision at any time via Privacy settings (also linked in every footer); we ask again after 12 months at the latest.

3a. Privacy settings and consent record

Your decision is stored on your device in localStorage as adam_consent_v1, together with a timestamp and a version number, so we can honour it and you can review or revoke it. This record never leaves your device.

4. Local storage (no cookies)

The site stores small functional flags in your browser's localStorage: your private/company choice (adam_mode), whether the intro animation was already shown (adam_splash_seen), one interface hint marker (adam_cardhint) and, on the signature status page, whether your signed PDF was already opened. These values never leave your device, are not read by us, and you can delete them at any time via your browser settings. They are strictly necessary for the functions you requested — § 25 (2) no. 2 TDDDG. No cookies are set at all, and there are no third-party scripts, fonts or pixels on this site.

5. The interactive demo

The "Build your own ADAM" demo runs entirely in your browser with sample data. Your selections are not transmitted to us, except as the anonymous aggregate events described in section 3. If you choose to request your build plan at the end and submit the form, we store the email address you enter together with your demo selections (track, world, age bracket, answers) in order to respond to your request (Art. 6(1)(b) GDPR). This data is stored encrypted at our processor Cloudflare (KV storage), deleted automatically after 180 days at the latest, and may be forwarded to us by email via the service Resend (Resend, Inc.) as processor. If the form cannot reach our server, your email application opens with a pre-filled message instead — nothing is sent unless you press send.

6. Contact by email

If you email us, we process your email address, name and the content of your message to handle your request (Art. 6(1)(b) GDPR — pre-contractual steps, or Art. 6(1)(f) GDPR). We keep such correspondence as long as needed for the request and statutory retention periods.

7. Electronic NDA signature

If you sign a non-disclosure agreement via our signature workflow (/nda/), we process: the names and email addresses of the parties, place (optional), your drawn or typed signature, the document hash, and an audit trail (timestamp, IP address, browser user agent) as evidence of the signature. Legal basis: performance / conclusion of a contract (Art. 6(1)(b) GDPR) and our legitimate interest in evidencing the signature (Art. 6(1)(f) GDPR). The data and the signed PDF are stored encrypted at our processor Cloudflare (KV storage) and automatically deleted after 90 days; the signed PDF is also sent to the parties by email. If email delivery is active, we use the service Resend (Resend, Inc.) as processor for sending the signed document.

8. Time-limited share links

Documents shared via /v/<link> are stored server-side for a limited time (typically 7 days) and are then automatically and irreversibly deleted. Access to such links is not logged by us beyond the hosting described in section 2.

9. Your rights

Access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20)
Objection to processing based on legitimate interest (Art. 21 GDPR)
Complaint to a supervisory authority — for us: Landesbeauftragter für den Datenschutz und die Informationsfreiheit Baden-Württemberg (baden-wuerttemberg.datenschutz.de)

To exercise your rights, email [email protected].

10. Changes

We will update this policy when the site's functionality changes. The current version is always available at adam-its.com/privacy.