Privacy Policy

Last updated: October 2026

1. Data Controller

The controller responsible for the processing of personal data on this website within the meaning of the General Data Protection Regulation (GDPR) is:

DPC Software GmbH
Ludwig-Erhard-Platz 1
51373 Leverkusen
Germany

Phone: +49 (0)212 22 47 16 0
Email: info@dpc-software.de
Website: https://www.dpc-software.de

2. General Information on Data Processing

We take the protection of your personal data seriously. We process personal data exclusively in accordance with the applicable data protection laws, in particular the General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG), and the German Telecommunications Digital Services Data Protection Act (TDDDG).

Personal data means any information relating to an identified or identifiable natural person. This includes, for example, names, addresses, email addresses, telephone numbers, IP addresses, and information about user behaviour.

We process personal data primarily to provide our website, respond to enquiries, offer our services, and fulfil legal obligations.

3. Legal Bases for Processing

We process personal data on the basis of the applicable legal provisions. Depending on the purpose of the processing, the following legal bases may apply:

  • Article 6(1)(a) GDPR: The data subject has given consent.

  • Article 6(1)(b) GDPR: Processing is necessary for the performance of a contract or to take steps at the request of the data subject prior to entering into a contract.

  • Article 6(1)(c) GDPR: Processing is necessary for compliance with a legal obligation.

  • Article 6(1)(f) GDPR: Processing is necessary for the purposes of our legitimate interests, provided that these interests are not overridden by the interests or fundamental rights and freedoms of the data subject.

Where we store information on your device or access information already stored on your device, the applicable provisions of the TDDDG also apply. Where consent is required, we obtain it before carrying out the relevant processing.

4. Website Provision and Server Log Files

When you access our website, our web server automatically collects certain information. This may include:

  • IP address of the device accessing the website

  • Date and time of access

  • Page or file requested

  • Previously visited page (referrer URL)

  • Browser and operating system used

  • Amount of data transferred and status of the request

Processing this data is technically necessary to make our website available, ensure its stability and security, and investigate potential technical issues.

Legal basis: Article 6(1)(f) GDPR. Our legitimate interest lies in the secure and reliable operation of our website.

Log files are stored only for as long as necessary for these purposes and are subsequently deleted or anonymised, unless legal retention obligations or specific security incidents require longer storage.

Hosting provider: 
IONOS SE
Elgendorfer Straße 57
56410 Montabaur
Germany
Website: https://www.ionos.com/

5. Contact by Email or Telephone

If you contact us by email or telephone, we process the information you provide to handle your enquiry and respond to any follow-up questions.

This may include your name, contact details, the content of your message, and the date and time of your contact.

Legal basis: Article 6(1)(b) GDPR if your enquiry relates to a contract or pre-contractual measures. In other cases, the legal basis is generally Article 6(1)(f) GDPR. Our legitimate interest is to respond to enquiries and communicate with prospective customers, customers, and business partners.

We delete the data once your enquiry has been fully handled and no legal retention obligations or other legitimate grounds for continued storage apply.

6. Contact and Enquiry Forms

Our website may provide forms for contacting us and submitting enquiries. If you complete one of these forms, we process the information you provide, which may include:

  • Name

  • Email address

  • Company or educational institution

  • Telephone number, where requested

  • Content of the enquiry

  • Any additional information you voluntarily provide

We use this information solely to handle your enquiry and communicate with you in connection with it.

Legal basis: Article 6(1)(b) GDPR for enquiries relating to pre-contractual measures or contracts; otherwise, Article 6(1)(f) GDPR, based on our legitimate interest in handling incoming enquiries.

Form data is transmitted via an encrypted connection, provided that the website is correctly configured to use HTTPS.

The data is deleted once it is no longer required to handle the enquiry, unless legal retention obligations or other lawful grounds for storage apply.

Form software used: We use HappyForms, a WordPress plugin, to provide contact and enquiry forms on our website. The information you submit through these forms is processed to handle your enquiry and communicate with you. The data is processed in accordance with the purposes and legal bases described in this section.

7. Enquiries About Stata Licences, Evaluation Licences, and Training

If you submit an enquiry through our website concerning Stata licences, evaluation licences, training, consulting services, or technical support, we process the information you provide to handle your enquiry and carry out the requested pre-contractual or contractual measures.

Depending on the nature of your enquiry, this may include your name, business contact details, company or educational institution, information about your licensing requirements, training preferences, and other information you provide.

Where necessary to handle your enquiry, provide a licence, or fulfil a contract, data may be shared with relevant service providers or the software manufacturer. Such disclosure takes place only where necessary for the relevant purpose and permitted by law.

Legal basis: Article 6(1)(b) GDPR. Where processing is required by law, Article 6(1)(c) GDPR applies. Further processing may be based on Article 6(1)(f) GDPR where the relevant legal requirements are met.

The data is deleted once it is no longer required for the relevant purpose, unless legal retention obligations or other lawful grounds require longer storage.

8. Cookies and Similar Technologies

Our website may use cookies and similar technologies. Cookies are small text files that may be stored on your device. Some are necessary for the technical operation of the website, while others may be used, for example, to analyse usage or provide additional functions.

We distinguish between:

  • Technically necessary technologies: These are required to provide essential website functions.

  • Optional technologies: These are used only where permitted and, where required, after you have given your prior consent.

Technically necessary technologies are used on the applicable legal basis. The statutory requirements of the TDDDG apply to the storage of information on your device or access to information already stored there. Any associated processing of personal data must also have an appropriate legal basis under the GDPR.

You can change or withdraw your consent to optional technologies at any time with effect for the future through our website’s cookie settings.

Information about the specific cookies used, their providers, purposes, and storage periods is available in our website’s cookie settings.

9. WordPress and Elementor

Our website is based on WordPress. We use Elementor to design and display individual pages.

These systems may process technically necessary data to display website content, provide functions, and ensure the secure operation of the website. Whether and to what extent personal data is transmitted to external providers depends on the specific configuration and the functions enabled.

We use these systems to operate, design, and maintain our website.

Legal basis: Article 6(1)(f) GDPR, insofar as processing is necessary for the secure and functional operation of our website. Where consent or another legal basis is required, processing takes place on that basis.

10. Multilingual Website Using WPML

We use the WPML WordPress plugin to provide our website content in different languages.

The plugin enables us to offer a multilingual website and manage the different language versions. The personal data processed and any transfers to third parties depend on the version of WPML used, the functions enabled, and the specific configuration.

Legal basis: Article 6(1)(f) GDPR, insofar as processing is necessary to provide and manage the multilingual website. Where individual functions require consent, they are used only after the relevant consent has been obtained.

11. Newsletter Using Brevo

If you subscribe to our newsletter, we process your email address and any additional information you voluntarily provide in order to send you our newsletter.

We use a double opt-in procedure. After registering, you receive an email asking you to confirm your subscription. This procedure helps us verify that the registration was initiated by the holder of the email address provided.

We may store the registration and confirmation timestamps, as well as technical log data, to document your consent.

We use Brevo to send and manage our newsletter. The data required for newsletter distribution is transmitted to and processed by this service provider on our behalf, insofar as this is covered by our configuration and contractual arrangements.

Legal basis: Article 6(1)(a) GDPR, based on your consent.

You may withdraw your consent at any time with effect for the future, for example by clicking the unsubscribe link included in each newsletter. The lawfulness of processing carried out before the withdrawal remains unaffected.

After you unsubscribe, your email address is removed from the active newsletter mailing list. Data required to demonstrate your consent or comply with legal obligations may continue to be stored to the extent necessary.

Further information about data processing by Brevo is available in the provider’s privacy policy: https://www.brevo.com/legal/privacypolicy/

12. Internal Administration and Customer Communication Using myCorazon

We use myCorazon for internal administration and, where applicable, the handling of customer enquiries, insofar as this is necessary for our business operations.

This may involve processing personal data relating to prospective customers, customers, and business partners, such as contact details, enquiry information, contractual information, and communication records.

The processing serves to manage our business relationships and handle enquiries.

Legal basis: Article 6(1)(b) GDPR where processing is necessary to take pre-contractual measures or perform a contract. Otherwise, Article 6(1)(f) GDPR may apply where we have a legitimate interest in managing our business relationships efficiently. Legal retention obligations may require processing under Article 6(1)(c) GDPR.

Data is deleted once it is no longer needed for these purposes and no legal retention obligations or other lawful grounds for continued storage apply.

13. Use of Artificial Intelligence (AI) Applications

We may use artificial intelligence (AI) applications to support internal workflows, for example for text creation, translation, research, or the preparation of information. Personal data is processed only to the extent necessary for the relevant purpose and where an appropriate legal basis exists.

Where personal data is transmitted to external AI service providers, this is done only in compliance with applicable data protection requirements and, where necessary, on the basis of appropriate contractual and technical safeguards. Confidential or sensitive information is not submitted to such services without appropriate review and authorisation.

14. Recipients of Personal Data and Data Processing on Our Behalf

We disclose personal data only where this is necessary for the purposes described, where we are legally required to do so, where you have given your consent, or where another legal basis permits the disclosure.

Recipients may include, in particular:

  • Hosting and IT service providers

  • Providers of technical systems used on our website

  • Providers of form and newsletter services

  • Service providers used for internal administration and customer communication

  • Software manufacturers and other contractual partners, where disclosure is necessary to handle an enquiry or fulfil a contract

  • Public authorities and other public bodies, where we are legally required to disclose data

Where service providers process personal data on our behalf, we conclude data processing agreements in accordance with Article 28 GDPR where required and ensure that the applicable data protection requirements are met.

15. Data Retention and Deletion

We store personal data only for as long as necessary for the relevant processing purpose or as required by statutory retention obligations.

Once the purpose of processing has ceased to apply, the data is deleted unless statutory retention obligations or other lawful grounds require it to be retained.

The specific retention period depends on the category of data, the purpose of processing, and the applicable legal requirements.

16. Your Rights as a Data Subject

Subject to the applicable legal requirements, you have the following rights:

  • Right of access (Article 15 GDPR): You may request confirmation as to whether we process personal data concerning you and, where applicable, receive further information about that processing.

  • Right to rectification (Article 16 GDPR): You may request the correction of inaccurate personal data or the completion of incomplete data.

  • Right to erasure (Article 17 GDPR): You may request the deletion of your personal data under the conditions set out by law.

  • Right to restriction of processing (Article 18 GDPR): You may request the restriction of processing under the conditions set out by law.

  • Right to data portability (Article 20 GDPR): Subject to the applicable legal requirements, you may request to receive the personal data you have provided in a structured, commonly used, and machine-readable format or to have it transmitted to another controller.

  • Right to object (Article 21 GDPR): You may object at any time, on grounds relating to your particular situation, to processing based on Article 6(1)(e) or Article 6(1)(f) GDPR. This also applies to profiling based on those provisions. We will then cease processing the relevant data unless we demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing is necessary for the establishment, exercise, or defence of legal claims.

  • Right to withdraw consent (Article 7(3) GDPR): You may withdraw any consent you have given at any time with effect for the future. The lawfulness of processing carried out before the withdrawal remains unaffected.

To exercise your rights, please contact us using the contact details provided in the “Data Controller” section.

17. Right to Lodge a Complaint with a Data Protection Supervisory Authority

Under Article 77 GDPR, you have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data infringes data protection law.

In particular, you may contact the supervisory authority responsible for our registered place of business.

For companies based in North Rhine-Westphalia, Germany, this is generally:

Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW)
Website: https://www.ldi.nrw.de/

18. Obligation to Provide Personal Data

The provision of personal data may be required by law, necessary to enter into a contract, or necessary for us to handle an enquiry.

If you do not provide the data required for an enquiry or service, we may be unable to process your enquiry fully or provide the requested service.

Where information is voluntary, we indicate this in the relevant form or at the relevant point, where required.

19. Automated Decision-Making and Profiling

As part of the website processing described in this Privacy Policy, we do not use decisions based solely on automated processing that produce legal effects concerning you or similarly significantly affect you, unless we expressly inform you otherwise.

20. Security of Data Processing

We implement appropriate technical and organisational measures to protect personal data against loss, manipulation, unauthorised access, and other unlawful processing.

We review our security measures in line with technological developments and adapt them where necessary to meet applicable legal requirements.

Please note that data transmission over the internet may involve security vulnerabilities despite appropriate safeguards. Complete protection against access by third parties cannot be guaranteed in every case.

21. Changes to This Privacy Policy

We reserve the right to amend this Privacy Policy if legal requirements, our website, or the services we use change.

The latest version published on our website shall apply.