DRAFT — DO NOT PUBLISH. Owner confirmations have been incorporated. Before publication, confirm whether a data protection officer has been appointed and verify that the deployed site and the email mailbox use the services described below.
Privacy notice
This notice describes the current static website candidate. It must be updated if the live site adds an index database connection, AI processing, forms, analytics, tracking, cookies, or other external services.
1. Data controller and privacy contact
IndexConsult GmbH is the controller responsible for the processing described in this notice.
IndexConsult GmbH
Berliner Straße 116
63065 Offenbach am Main
Germany
For privacy questions or to exercise your rights, contact us at contact@indexbook.com. If a data protection officer has been appointed, their contact details must be added here before publication.
2. Hosting and technical access data
The website is hosted by ALL-INKL.COM – Neue Medien Münnich, owner René Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany. ALL-INKL processes technical data needed to deliver and secure the website on IndexConsult GmbH’s behalf.
This may include the IP address of the requesting device, date and time, time-zone difference, requested file or URL, access status, transferred data volume, referrer, browser, operating system, browser language, and browser version. The purposes are to deliver the website, maintain its operation, and protect the provider’s systems. The legal basis is our legitimate interest in a secure and reliable website (Article 6(1)(f) GDPR).
ALL-INKL states that website log files are deleted no later than seven days after collection, unless longer retention is needed in an individual case, for example to investigate an attack. ALL-INKL also states that customer data is stored in Germany. An Article 28 GDPR data processing agreement applies to the hosting relationship, as confirmed by IndexConsult GmbH.
3. Index profile enquiries by email
The Finder in this website candidate does not submit a request to a server. It opens your email application and prepares a message addressed to contact@indexbook.com. Your search text and selected criteria are sent to IndexConsult GmbH only if you choose to send the email.
When we receive your message, we process the sender details, message content, and any index criteria you include to answer your enquiry and, where relevant, respond to a pre-contractual request. The legal basis is Article 6(1)(b) GDPR for steps taken at your request before entering into a contract, or Article 6(1)(f) GDPR for responding to general business enquiries. Our legitimate interest is handling and following up on enquiries addressed to us.
The recipients are authorised IndexConsult GmbH personnel and the email service provider operating the contact@indexbook.com mailbox, ALL-INKL.COM – Neue Medien Münnich. We normally delete enquiries within six months after the matter is closed. We may retain relevant records for longer where required by statutory retention duties or where necessary to establish, exercise, or defend legal claims.
Providing information by email is voluntary. If you do not send the prepared message, IndexConsult GmbH does not receive its contents through this website. Email may pass through systems operated by your own email provider; its handling is governed by that provider’s privacy information.
4. Cookies, analytics, and external content
The current website candidate does not use analytics or advertising tools, does not set cookies or use local storage, and does not embed external content or load external assets. The website has no newsletter. Technical access data described in section 2 is still processed to deliver and secure the site.
5. Your rights
Subject to the conditions in the GDPR, you may request access to, correction or erasure of your personal data, restriction of processing, and data portability. Where processing is based on our legitimate interests, you may object on grounds relating to your particular situation. Where processing is based on consent, you may withdraw it at any time with effect for the future.
You also have the right to lodge a complaint with a supervisory authority. The competent authority for private-sector organisations established in Hesse is the Hessian Commissioner for Data Protection and Freedom of Information, Postfach 3163, 65021 Wiesbaden, Germany; email: poststelle@datenschutz.hessen.de.
6. Automated decisions and profiling
The current static website candidate does not make decisions about you using automated processing and does not profile visitors. The index data source and any AI-assisted Finder are not connected to this candidate.
7. Effective date and updates
Proposed effective date: 25 September 2026. Use this date only if the notice is first published on that date. If the site goes live later, replace it with the actual publication date.
We may update this notice when our services or data processing change. The date above will show when the current version took effect.