Privacy policy
As of: October 2026
1. Controller
The controller responsible for data processing on this website is:
Black Oak GmbH
Mergenthalerallee 79–81
65760 Eschborn
Deutschland
Phone: +49 (0) 69 153 297 10
Email: support@dem-com.de
2. Overview
This website uses no cookies and no advertising or tracking services. We only process personal data where it is needed to run the website, to protect the request form, and to handle your request.
3. Hosting and server logs (Cloudflare)
This website is hosted by Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA (“Cloudflare”). When you open our pages, Cloudflare processes technically necessary data, in particular your IP address, date and time of access, the requested page, the amount of data transferred, and browser and operating system information (server logs). This is necessary to deliver the site and to protect it against attacks and abuse.
The legal basis is Art. 6(1)(f) GDPR (legitimate interest in a secure and stable website). Data is transferred to the USA on the basis of the EU-US Data Privacy Framework, to which Cloudflare is certified (adequacy decision of the European Commission).
4. Cloudflare Web Analytics
We use Cloudflare Web Analytics to understand how the website is used in aggregated form (e.g. page views, load times). The service works without cookies and without storing information on your device. No personal profiles are created and no data is used for advertising.
The legal basis is Art. 6(1)(f) GDPR (legitimate interest in improving our offer).
5. Cloudflare Turnstile (spam protection)
Our request form is protected by Cloudflare Turnstile. The service checks whether the input comes from a human and not from an automated program. For this, technical information from your browser (e.g. IP address, browser characteristics) is sent to Cloudflare. Turnstile is only loaded when you scroll close to the form or click into it.
The legal basis is Art. 6(1)(f) GDPR (legitimate interest in protection against spam and abuse). Transfers to the USA are covered by the EU-US Data Privacy Framework.
6. Request form (“Request a terminal”)
When you submit the form, we process the details you enter: name, company name, industry, phone number, email address and – if you like – your message. We also store the time of the request and the selected language. We do not store your IP address in plain text; to limit abuse (rate limiting) only an irreversible hash value is used for a short time.
The purpose is to handle your request and to contact you. The legal basis is Art. 6(1)(b) GDPR (steps prior to entering into a contract at your request) and Art. 6(1)(f) GDPR (legitimate interest in answering enquiries).
The data is stored in a database (Cloudflare D1). We delete your details as soon as they are no longer needed to handle your request – if no contract is concluded, after six months at the latest. At your request we will delete them earlier at any time; simply write to support@dem-com.de.
7. Contact by phone or email
If you call or write to us, we process your details to handle your matter (Art. 6(1)(b) or (f) GDPR) and delete them once the matter is closed and no statutory retention duties apply.
8. Fonts
The fonts used are stored on our own server. No fonts are loaded from third parties when you open the site and no data is sent for this purpose.
9. Cookies
This website sets no cookies and uses no local storage to recognise you.
10. Links to new.peydapp.com
The “Log in” and “Sign up” buttons lead to new.peydapp.com. That is a separate service. Once you open it, its own privacy notices apply.
11. Your rights
You have the following rights regarding your personal data: access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection to processing (Art. 21). You can withdraw any consent at any time with effect for the future (Art. 7(3) GDPR).
To exercise a right, write to us at support@dem-com.de.
You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is:
Der Hessische Beauftragte für Datenschutz und Informationsfreiheit, Postfach 3163, 65021 Wiesbaden, datenschutz.hessen.de.
12. Changes
We update this policy when our website or the legal requirements change. The version published here applies.