Legal
Data Controller
The party responsible (controller) for the processing of your personal data on this website within the meaning of the General Data Protection Regulation (GDPR) is: Sefera GmbH Kronengasse 21 D-50667 Köln Germany Phone: +49 221 921512 801 Email: info@cognos-international.de Represented by: Dr. Matthias Afting, CEO / Executive Director
Server Log Files
Whenever you visit this website, our hosting provider automatically processes information that your browser transmits. This includes browser type and version, operating system, the page you came from (referrer), the page you accessed, the date and time of your request, and your IP address. This data is processed for the technical operation of the site, security, and error analysis on the basis of our legitimate interest pursuant to Art. 6 (1) (f) GDPR. It is not merged with other data sources.
Contact Form
If you contact us via the contact form, the information you provide (topic, first and last name, email address, message) is collected and forwarded to our team inbox so we can answer your inquiry. To deliver this email we use the transactional email service Mailgun (Sinch Email Inc., trading as Mailgun, 112 E Pecan Street, San Antonio, TX 78205, USA). Mailgun acts as our processor under Art. 28 GDPR; the message content (your name, email address, the message text) and standard email-routing metadata pass through Mailgun's EU infrastructure to reach our team. A Data Processing Agreement with the European Commission's Standard Contractual Clauses governs the transfer. The legal basis for this processing is your consent under Art. 6 (1) (a) GDPR, which you give by ticking the consent checkbox before submitting the form. If your inquiry is aimed at concluding or initiating a contractual relationship, the legal basis is additionally Art. 6 (1) (b) GDPR. The data is retained for as long as is necessary to handle your inquiry, and is then either deleted or, where statutory retention obligations apply, archived accordingly. You may withdraw your consent at any time by emailing the address above.
Cookies and Consent Management
We use the consent-management platform CookieYes (CookieYes Limited, registered in the United Kingdom) to obtain and document your consent for non-essential cookies and tracking technologies. When you visit the site for the first time, CookieYes shows a banner that lets you accept or reject each cookie category. No non-essential cookies are placed on your device until you have given explicit consent. You can change or withdraw your consent at any time by clicking Cookie Settings or by clearing your browser cookies. You can review CookieYes's Privacy Policy at cookieyes.com/privacy-policy. The legal basis for storing your consent record is Art. 6 (1) (c) GDPR (compliance with a legal obligation, namely Art. 7 GDPR).
Analytics (PostHog)
We use PostHog (PostHog Inc., 2261 Market Street #4008, San Francisco, CA 94114, USA) to understand how visitors use this site so we can improve it. Data is processed in PostHog's EU region (eu.i.posthog.com) under a Data Processing Agreement that incorporates the European Commission's Standard Contractual Clauses. What is collected once you accept the "Analytics" category in the consent banner: • page views and page-leave events • clicks on links and buttons (autocapture) • device and browser metadata (user agent, screen size, language) • truncated IP address (PostHog discards the last octet for IPv4) • a randomly generated, anonymous visitor identifier — we do not link it to your name or email What is not collected: session recordings (disabled in our configuration) and field values you type into search/navigation inputs. When you submit the contact form, an additional "contact_form_submitted" event is sent to PostHog containing the topic, your first and last name, email address, and the message text. This duplicates the data we receive via the contact endpoint so the team can review inquiries inside PostHog as well as in our email/CRM workflow. The event is only sent if you have already accepted the analytics category in the consent banner; without that consent, PostHog is not loaded and the event is silently dropped. The legal basis for this processing is your consent under Art. 6 (1) (a) GDPR — both the analytics consent in the banner and the explicit consent checkbox you tick before submitting the form. You can withdraw the analytics consent at any time through the CookieYes badge; once revoked, PostHog stops capturing on your device. We also honour the browser-level Do Not Track signal: visitors with DNT enabled are not tracked even after accepting the banner.
Web Fonts
This site loads the Outfit typeface from Google Fonts (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; for traffic from outside the EU, Google LLC, USA). When fonts are requested, your browser establishes a connection to the Google Fonts servers, which means Google receives your IP address. We are evaluating a self-hosted variant of the typeface to remove this third-party connection. Until that is in place, font loading takes place on the legal basis of Art. 6 (1) (f) GDPR (legitimate interest in a consistent visual design). You can prevent the connection by disabling JavaScript and external font loading in your browser; the site remains functional with the system fallback typeface.
Hosting
This website is hosted by Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA, with infrastructure in Vercel's European regions where available. Vercel processes connection metadata (IP addresses, request logs) on our behalf to deliver the site. A Data Processing Agreement under Art. 28 GDPR is in place with Vercel. Where data is processed in the United States, the transfer is covered by the EU–US Data Privacy Framework and supplemented by the European Commission's Standard Contractual Clauses where applicable.
Your Rights
You have the following rights regarding your personal data: access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and objection (Art. 21). Where processing is based on consent, you can withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal. To exercise any of these rights, please contact us at the address listed under "Data Controller".
Right to Lodge a Complaint
You have the right to lodge a complaint with a supervisory authority — for example, the data-protection authority of the German federal state in which Sefera GmbH is based (Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen).
Changes to this Policy
We may update this privacy policy as our services or the legal landscape evolve. The current version is always available on this page. Material changes will be communicated where required by law.