Legal

Privacy Policy

Information about the processing of personal data on MegaCRUD websites.

Last updated: 23 July 2026

1. Controller

SoMa-Tec UG (haftungsbeschränkt)
An der Priesterkoppel 11a
13158 Berlin-Pankow
Germany
Managing Director: Thomas Böhm
Email: somatec@megacrud.com

2. Scope

This Privacy Policy applies to megacrud.com, the live demos at demo.megacrud.com, and the documentation at docs.php.megacrud.com and docs.python.megacrud.com.

3. Hosting and Server Logs

Our websites are hosted by WebhostOne. Data is processed exclusively in Germany, for these websites at the Karlsruhe data centre. Each request processes technically necessary access data, including a masked or pseudonymised IP address, referrer URL, browser type, and requested URL. The processing is necessary to provide, secure, and diagnose the websites under Article 6(1)(f) GDPR.

Access logs are deleted or overwritten on a rolling basis after ten days. The IP address is masked; every stored IP address ends in 0.

[Conclude the data processing agreement with WebhostOne through the KCC and review this paragraph afterwards.]

4. Cookies and Sessions

We do not use analytics or marketing cookies. Where the live demos use technically necessary PHP sessions, a session cookie is set to provide the requested functionality. The legal basis is Article 6(1)(f) GDPR. The session cookie is deleted when the browser session ends; server-side session data is cleared according to the retention period applicable to the hosting plan.

5. Live Demos

The live demos allow users to enter and edit data in a demonstration environment. Do not enter real personal, confidential, or production data. Demo data is processed solely to provide the demonstration and is reset or deleted regularly.

[Add the actual demo-data reset or deletion schedule.]

6. Contact

If you contact us by email, we process the data you provide to handle your request. The legal basis is Article 6(1)(b) GDPR where your request relates to a contract, and otherwise Article 6(1)(f) GDPR. We delete the data after the request has been conclusively handled unless statutory retention obligations apply.

7. Recipients and International Transfers

We currently do not use analytics, marketing, or social-media trackers. No transfer to countries outside the EU or EEA takes place through the operation of these websites unless expressly stated otherwise in this Privacy Policy.

8. Your Rights

Subject to the applicable legal requirements, you have the right to access, rectify, erase, restrict the processing of, and receive your personal data, as well as the right to object to the processing of your personal data. You also have the right to lodge a complaint with a data protection supervisory authority. The Berlin Commissioner for Data Protection and Freedom of Information is competent in particular.

9. Changes to this Privacy Policy

We update this Privacy Policy when processing activities or legal requirements change. The current version is available on this page.