Legal

Privacy notice

Information pursuant to Art. 13, 14 GDPR. As of: May 2026.

1. Controller

Controller within the meaning of the GDPR and other national data-protection laws:

NetCell-IT
Felix Netzel
In der Wüste 23a
51381 Leverkusen, Germany
Email: info@netcell-mailguard.de
Phone: +49 2171 7949180

2. Processing overview

This notice covers data processing on the website netcell-mailguard.de. It does not describe data processing by the NetCell MailGuard product itself when installed at a customer's site — there the customer is the controller (see section 11).

On this website we process personal data only to the extent necessary:

  • Server log files when the website is accessed (section 5)
  • Language preference cookie to deliver the correct language version (section 6)
  • Contact details from the contact form or by direct email (section 7)

We use no web analytics, no tracking, no third-party cookies, no social-media plugins, no ads on this website.

3. Legal bases for processing

  • Art. 6 (1) (b) GDPR — contract or pre-contractual measures (answering enquiries from the contact form)
  • Art. 6 (1) (c) GDPR — legal obligations (tax-law retention)
  • Art. 6 (1) (f) GDPR — legitimate interests (server logs for defending against attacks, technical security)
  • Art. 6 (1) (a) GDPR — consent (where consent is explicitly given)

4. Security measures

We implement technical and organisational measures pursuant to Art. 32 GDPR: TLS encryption of the entire website (HTTPS, HTTP/2, HTTP/3), servers in German data centres, regular security updates, access controls, logging of administrative access.

5. Provision of the website and server log files

When you access this website the web server records the following data in a log file:

  • IP address of the requesting device
  • Date and time of access
  • URL accessed and HTTP status
  • User agent (browser identification)
  • Referrer (previous URL, if transmitted)

Legal basis: Art. 6 (1) (f) GDPR — legitimate interest in providing and securing the website. Storage period: 30 days, then automatic deletion. No combination with other data takes place.

6. Cookies and consent (§ 25 TDDDG)

This website sets a single cookie:

  • nc_lang — visitor's language preference (e.g. "de" or "en"). Storage period: 1 year. Function: technically necessary under § 25 (2) no. 2 TDDDG so the website is shown in the chosen language on the next visit. No consent required.

We set no tracking cookies, no advertising cookies, no third-party cookies. We therefore do not show a cookie banner — it would be an empty promise.

7. Contact form and email contact

If you contact us via the contact form or by email we process the data you provide (name, email, optionally company, message content) to answer your enquiry. Legal basis: Art. 6 (1) (b) GDPR (pre-contractual measure) or Art. 6 (1) (f) GDPR (legitimate interest in answering).

Storage period: until the enquiry is finally handled, at most 12 months. In case of a contract, longer retention applies under commercial-law and tax-law obligations (see section 9). No transfer to third parties.

8. Fonts

This website uses the "Inter" font — self-hosted on our servers, no calls to Google Fonts or other third parties. No font data is transferred to external servers when the website is accessed.

9. Contract conclusion and customer data

If you enter into a contract with us (e.g. acquisition of a Pro or Custom licence for NetCell MailGuard), we process the contract data to fulfil the contract: company name, address, contact person, email, licence key, hardware fingerprint of the authorised server, billing address, bank details. Legal basis: Art. 6 (1) (b) GDPR. Retention according to commercial-law and tax-law obligations (HGB § 257, AO § 147 — up to 10 years).

10. Licence validation by NetCell MailGuard

When you operate NetCell MailGuard on your own servers, the software periodically contacts our licence server at license.netcell-it.com to validate the licence. The following are transmitted:

  • Licence key (for authentication)
  • Hardware fingerprint of the server (for licence binding)
  • Number of configured domains (as a usage counter)
  • Software version
  • Server IP address (via the HTTP connection)

No content of the email processed by MailGuard is transmitted. The licence server serves licence validation only. Legal basis: Art. 6 (1) (b) GDPR (contract performance — you agreed to a licence). Storage period: until termination of the licence.

11. Processing by the NetCell MailGuard product at the customer site

If the customer operates NetCell MailGuard on their own servers and processes inbound and outbound mail with it, the customer is themselves the controller within the meaning of the GDPR for that processing. We (NetCell-IT) have no access to the mail content processed by MailGuard.

For this reason no data processing agreement under Art. 28 GDPR is required between you and NetCell-IT — we are not a processor, only a software vendor.

12. Retention and deletion

Personal data is deleted as soon as the processing purpose ceases and no statutory retention obligations stand in the way. Specifically:

  • Server logs: 30 days
  • Contact requests without a contract: 12 months
  • Contract data: up to 10 years (HGB § 257, AO § 147)
  • Licence validation data: until termination of the licence

13. Transfer to third parties

Your personal data is only transferred to third parties when:

  • You have given express consent (Art. 6 (1) (a) GDPR),
  • The transfer is necessary to perform the contract (Art. 6 (1) (b) GDPR) — e.g. to a payment service provider for a paid licence,
  • There is a legal obligation (Art. 6 (1) (c) GDPR).

Hosting providers: this website is operated on NetCell-IT's hosting infrastructure (own servers in a German data centre). No third-party hosting like AWS, Cloudflare, Google Cloud.

14. Transfer to third countries

No transfer to countries outside the EU/EEA takes place when this website is used.

15. Your rights as a data subject

You have the following rights against us:

  • Access under Art. 15 GDPR
  • Rectification under Art. 16 GDPR
  • Erasure under Art. 17 GDPR ("right to be forgotten")
  • Restriction of processing under Art. 18 GDPR
  • Data portability under Art. 20 GDPR
  • Objection to processing based on legitimate interests under Art. 21 GDPR
  • Withdrawal of consent under Art. 7 (3) GDPR with effect for the future

Rights can be exercised informally by email to info@netcell-mailguard.de. We respond within the statutory period of one month (Art. 12 (3) GDPR).

16. Right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint with a data-protection supervisory authority (Art. 77 GDPR). The authority responsible for us is:

Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen
Kavalleriestraße 2–4
40213 Düsseldorf, Germany
www.ldi.nrw.de

17. Currency of this notice

As of: May 2026. We reserve the right to amend this privacy notice so it always meets current legal requirements or to reflect changes in our processing. The current version is always available here.

This English version is provided for convenience. In case of conflict the German original (Datenschutzerklärung) prevails.