Privacy policy

Last updated: 25 September 2026

1. Controller

247-IT.com, owner Dirk Rothkögel, Bergstr. 14, 71083 Herrenberg, Germany
Email: mail@247-it.com

2. In a nutshell

  • This website sets no cookies and uses no advertising or tracking services.
  • For visitor statistics we use the cookieless Cloudflare Web Analytics.
  • We count downloads without any personal data.
  • We only store email addresses if you join the waitlist and confirm it via double opt-in.
  • The ADCS Health Check script itself does not transmit any data – neither to us nor to anyone else.

3. Hosting and delivery (Cloudflare)

This website runs on the platform of Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA ("Cloudflare") (Cloudflare Workers, content delivery network). When you visit the site, Cloudflare processes technically necessary data, in particular your IP address, date and time, the requested address, the referring page and browser and operating system details. This is required to deliver the website and to protect it against attacks.

The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is the secure, fast and reliable provision of the website. We do not store IP addresses ourselves. Our application logs contain no IP addresses and are deleted automatically after a few days. We have a data processing agreement with Cloudflare pursuant to Art. 28 GDPR.

4. Visitor statistics (Cloudflare Web Analytics)

To understand how the website is used, we use Cloudflare Web Analytics. The service sets no cookies, uses no local storage and builds no user profiles. It records aggregated data such as pages viewed, referrer, country, browser, device type and load times. Individual visitors are not recognised.

The legal basis is Art. 6(1)(f) GDPR (legitimate interest in measuring reach and improving the website) and Section 25(2) no. 2 TDDDG.

5. Download counting

When you download the script, we store the date and time, the file name, the version, the language of the page and the host name of the referring page (e.g. "certmon.de", without path). We do not store your IP address or browser identifier. This data does not allow us to identify you.

6. ADCS Monitor waitlist

For the waitlist we store your email address and – optionally – company, environment size and role, plus your language, the time of sign-up and confirmation, and the version of the consent text. The purpose is to inform you when the ADCS Monitor launches; the optional details help us plan the product.

The legal basis is your consent (Art. 6(1)(a) GDPR). We use double opt-in: your sign-up only becomes effective after you click the link in our confirmation email and confirm on our website. Unconfirmed entries are deleted automatically after 30 days. Confirmed entries are kept until you unsubscribe or the purpose no longer applies; we delete the waitlist no later than six months after the ADCS Monitor launches.

You can withdraw your consent at any time with effect for the future – via the unsubscribe link in every email or by writing to mail@247-it.com. Your data will then be deleted.

We do not store IP addresses here either. To prevent abuse, the number of sign-ups per IP address is briefly limited in memory without the address being stored.

7. Spam protection (Cloudflare Turnstile)

The sign-up form is protected by Cloudflare Turnstile. Turnstile is only loaded when you use the form. Cloudflare processes your IP address and technical characteristics of your browser and device to detect automated sign-ups. Turnstile sets no advertising cookies and builds no profiles.

The legal basis is Art. 6(1)(f) GDPR (legitimate interest in preventing abuse) and Section 25(2) no. 2 TDDDG.

8. Sending emails (Resend)

We send confirmation emails via Resend, a service of Resend, Inc., USA. Emails are sent from servers in the EU (Ireland region). Your email address, the content of the email and technical delivery data (e.g. delivery status) are processed for this. The legal basis is Art. 6(1)(a) GDPR; we have a data processing agreement with Resend pursuant to Art. 28 GDPR.

9. Transfers to the USA

Cloudflare and Resend are based in the USA, so access from the USA cannot be ruled out. Cloudflare is certified under the EU-US Data Privacy Framework, for which an adequacy decision of the European Commission exists (Art. 45 GDPR). In addition, and for Resend, the European Commission's standard contractual clauses apply (Art. 46(2)(c) GDPR).

10. Contact by email

If you write to us, we process your details to handle your request (Art. 6(1)(b) or (f) GDPR) and delete them once they are no longer needed and no retention obligations apply.

11. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). You can withdraw consent at any time (Art. 7(3)). Just write to mail@247-it.com.

You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is the State Commissioner for Data Protection and Freedom of Information Baden-Württemberg (LfDI), Lautenschlagerstraße 20, 70173 Stuttgart, Germany, www.baden-wuerttemberg.datenschutz.de.

12. Other

There is no automated decision-making, including profiling. You are not obliged to provide any data; without an email address, however, you cannot join the waitlist.