1. Controller
The controller for processing personal data on this website under the General Data Protection Regulation (GDPR) is:
Dotcase-Özgür Kadir Taskesen
Schwalbenweg 18, 31582 Nienburg/Weser, Germany
Email: info@dotcaseglobal.com · Telephone: 0176 74731359
2. Website and technical delivery
This website presents the company, its products, media channels and brands. Fonts, images and scripts are served from our own webspace. No analytics, marketing or third-party embeds are active. The previous visit counter is not part of this website.
Language is selected through the page address. The new website creates no localStorage entry for this purpose. A previously stored “dotcase_lang” entry is not read by this website and can be deleted through your browser settings.
3. Hosting and recipients
We use Hostinger International Ltd., 61 Lordou Vironos Street, 6023 Larnaca, Cyprus, for hosting. Hostinger receives the data required to deliver and operate the website. Further information from the provider: https://www.hostinger.com/legal/privacy-policy.
Hosting and email providers process data within their respective functions. This policy does not promise that all processing takes place exclusively within the European Economic Area.
4. Server logs
When you request a page, the hosting server processes technical connection data, including your IP address and the requested page address. The existing hosting configuration also records the date and time of access, data volume, referrer URL, browser type and operating system. This processing supports secure and stable operation. The legal basis is Article 6(1)(f) GDPR; our legitimate interest is reliable provision of the website.
5. Contact form and email
When you contact us through the form or by email, we process your name, email address, optional company and message to answer your enquiry. The form also transmits the selected category and language. The message is submitted through the server-side PHP mail function to info@dotcaseglobal.com; the email provider is Hostinger. In production, message contents are not stored in a website database or local message log.
The legal basis is Article 6(1)(b) GDPR where your enquiry concerns a contract, and otherwise Article 6(1)(f) GDPR, with our legitimate interest in answering enquiries. We delete the enquiry once it has been fully dealt with and no statutory retention duties, such as those for business correspondence, apply.
Acceptance by the email system does not confirm delivery to the inbox. Fields marked as required are needed to process an enquiry through this form.
6. Contact-form security
Opening the contact form sets the first-party session cookie DOTCASEFORM. It contains a session identifier, not a contact message. It is configured as HttpOnly and SameSite=Lax, and is Secure over HTTPS. Browsers that restore sessions may restore session cookies.
The session associates security tokens with the form to protect against forged requests. These tokens are valid for no more than one hour. Their validity is distinct from retention of server-side session files.
To limit abusive requests, the server stores an HMAC value of the connection IP, generated with a secret key, and attempt timestamps outside the publicly accessible web directory. The HMAC value is pseudonymous, not anonymous. At most five attempts count within a rolling 15-minute window. Expired entries are removed when the next form attempt is processed or when cleanup runs; this window alone is not a promise of physical deletion after 15 minutes.
This processing protects the form against abuse. The legal basis is Article 6(1)(f) GDPR; the legitimate interest is providing a secure contact channel. Session storage required for the requested form function relies on section 25(2), point 2, TDDDG.
7. Cookie settings and optional services
Your cookie-settings selection is stored as “dotcase:consent:v1” in sessionStorage for the current tab session. It contains the selected categories, not a contact message. Your browser may preserve it when restoring a tab. If storage is blocked, the selection applies only to the current page.
Analytics, marketing and external media are inactive. “Accept all” does not add services that have not been configured. “Reject all” leaves ordinary pages and necessary functions available. You can change or reset the selection through “Cookie settings” in the footer. Reset removes the stored key and disables optional categories. Storage serves the management of the selection you requested.
8. Links to other websites
Our pages link to other websites, such as our product sites (sanvela.de, scoutsprint.com, mindlabtest.com), the Shopify App Store or Amazon. Your browser connects to the provider only when you open the link; that provider’s privacy policy applies there.
9. Your rights
You have rights of access (Article 15 GDPR), rectification (Article 16), erasure (Article 17), restriction (Article 18) and data portability (Article 20), as well as the right to object to processing based on legitimate interests on grounds relating to your particular situation (Article 21). You can contact info@dotcaseglobal.com.
10. Complaint to a supervisory authority
You may lodge a complaint with a data protection supervisory authority. The authority responsible for us is: Die Landesbeauftragte für den Datenschutz Niedersachsen, Prinzenstraße 5, 30159 Hannover, Germany, www.lfd.niedersachsen.de.
11. Data security
The website is delivered over HTTPS (TLS). This does not promise end-to-end encryption of emails.
Date and scope
24 October 2026. This policy concerns the Dotcase Global corporate website. Separate product websites, apps and shops may have their own privacy information.