Controller and scope
This notice covers assetra.eu, enquiries about Assetra and the related licensing and customer portal services. The controller is IT World One UG (haftungsbeschränkt), represented by managing director Lukas Bielik. Full contact details appear below.
IT World One UG (haftungsbeschränkt)Obernheideweg 69
33129 Delbrück · Germany
+49 5250 929 29 80
info@assetra.eu
Hosting and technical data
The website is hosted at Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. Access technically involves processing IP addresses, time, requested address, browser/user-agent information and, where supplied, referrer information. Security and error logs support availability, troubleshooting and abuse prevention. The legal basis is Article 6(1)(f) GDPR; our legitimate interest is secure and reliable operation.
Hetzner ↗Enquiries and support
When you contact us by email or phone, we process contact details, messages and voluntarily provided information for replies, offers and support. Depending on the enquiry, Article 6(1)(b) GDPR applies to pre-contractual steps or contract performance, or Article 6(1)(f) to business enquiries and support. Enquiry links open your email application; only you send the message. Please do not send passwords or unnecessary personal data.
Licensing and customer portal
For licence delivery, activation, contract management and portal access, we process company/contact details, email address, plan/subscription status, licence keys, activation identifiers or device fingerprints, invoice references and security events. Purposes are contract performance (Article 6(1)(b) GDPR), statutory record-keeping (point (c)) and abuse prevention (point (f)). Required information is identified in the relevant process; without it, we may be unable to provide the contract or portal access.
Payments through Stripe
If you use an offered online payment, Stripe processes the necessary contact, billing and payment details. We receive payment status, customer/subscription identifiers and invoice references, not full card details. Legal bases are Article 6(1)(b) and (c) GDPR. Stripe may be an independent controller for its own statutory duties. Merely visiting the current product page does not load Stripe Checkout.
Stripe ↗Transactional email through Brevo
We send operational email such as licence delivery and portal access links through Brevo (Sendinblue SAS). Recipient addresses, necessary message content and delivery information are processed. Legal bases are Article 6(1)(b) and (f) GDPR; our interest is reliable customer communication. This does not subscribe you to a newsletter.
Brevo ↗Cookies and browser storage
The product website uses no analytics or marketing trackers. No external fonts are embedded; screenshots are served from our own server. Your explicitly chosen appearance is stored as assetra-theme in localStorage until you change it or clear storage. Your chosen billing period is stored as assetra-billing in sessionStorage for the browser session. These settings are not sent to us as a user profile. Necessary portal cookies support authentication and security. Device access for explicitly requested functions: § 25(2) no. 2 TDDDG; personal data for secure operation: Article 6(1)(f) GDPR. Non-essential tracking would require separate consent.
Recipients and international transfers
Necessary recipients include authorised staff, hosting, payment and email providers, appointed advisers where needed, and authorities where legally required. Providers acting on our behalf are engaged under Article 28 GDPR. Payment/email providers and their subprocessors may transfer data outside the EEA. Articles 44 et seq. GDPR apply, including an applicable adequacy decision or standard contractual clauses with necessary supplementary safeguards. You may request information on the specific safeguards.
Retention
We erase data when its purpose ends unless retention duties or necessary evidence require otherwise. Enquiries follow their complete handling; contract, billing and licensing records follow the contract term, applicable commercial/tax retention periods and necessary limitation/evidence periods. Security data is retained only for operation, troubleshooting or a specific incident. Statutory retention relies on Article 6(1)(c) GDPR, particularly together with the German HGB and AO. You can clear browser preferences yourself.
Customer-operated installations
For customer-operated on-premises installations, the customer decides how inventory, employee and directory data is processed and is generally its controller. This website notice does not replace the customer’s notices to staff and users. Licence activation and support are separate activities. Access to customer data during commissioned support requires an agreed scope and, where applicable, processing under Article 28 GDPR.
Your rights and objection
Subject to legal conditions, you have rights of access (Article 15), rectification (16), erasure (17), restriction (18) and portability (20 GDPR). You may withdraw consent for the future without affecting prior lawfulness. For processing under Article 6(1)(f) GDPR, Article 21 allows objection on grounds relating to your particular situation. You may object to direct marketing at any time without giving reasons. Contact: info@assetra.eu. We do not use solely automated decisions with legal or similarly significant effects, including profiling, for these activities.
Complaints and updates
Under Article 77 GDPR you may complain to a supervisory authority, particularly where you live, work or where the alleged infringement occurred. For our location this includes the North Rhine-Westphalia Commissioner for Data Protection and Freedom of Information, Kavalleriestraße 2–4, 40213 Düsseldorf. We update this notice when processing changes. Last updated: 4 November 2026.
LDI NRW ↗