Privacy Policy

1. Controller

HCA Homecare IT-Solutions GmbH
Seestücken 19A
21077 Hamburg
Germany

Represented by:
Matthias Gerwien, managing shareholder

Email: willkommen@homecare-assistant.de

2. Scope

This Privacy Policy applies exclusively to the public marketing website at www.homecare-assistant.eu and its associated language versions. Separate privacy information applies to the application at my.homecare-assistant.eu.

3. Website delivery and server logs

When you access the website, the web server processes connection data that is technically necessary. This may include the IP address, date and time of access, HTTP method, requested URL path without query parameters, protocol used, status code, amount of data transferred, and browser and device information contained in the user agent.

We process this data to deliver the website securely and reliably, diagnose errors, and identify and prevent abusive or security-threatening access. The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is the secure and uninterrupted operation of our website.

Raw technical logs are deleted after seven days unless continued retention is necessary in an individual case to investigate a security incident or to establish, exercise or defend legal claims.

4. Hosting and email service

We use services provided by IONOS SE, Elgendorfer Strasse 57, 56410 Montabaur, Germany. The website runs on a virtual machine in a data centre in Frankfurt am Main. The mailbox willkommen@homecare-assistant.de is also provided by IONOS in Germany.

IONOS processes personal data on our behalf under a data processing agreement in accordance with Article 28 GDPR. No transfer of website data outside the European Union or European Economic Area is intended for the processing described here.

To restore service after technical failures, we create daily backups of the marketing database and operationally necessary configuration files. The backups are stored on the virtual machine operated by IONOS and deleted after 30 days. Website access logs are not included in these backups.

5. Care support centre search

The website offers a search for care support centres based on a town name or postal code. The entry is transmitted to our own server and used solely to retrieve and display matching records from our database.

The search term is not stored permanently, combined into user profiles or analysed statistically. Please enter only a town or postal code and do not enter names or other personal information.

The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is to provide visitors with a convenient search for local advice services.

6. Anonymous audience statistics

We use the self-hosted GoAccess software to evaluate access logs generated on our server for basic audience measurement. No cookies are set, no additional analytics script runs in the browser, and no data is transmitted to an analytics provider.

IP addresses are anonymised for statistical analysis. Query parameters, referrers, individual host views, location profiles and personal visitor profiles are not analysed. Identified automated traffic and bots are excluded from visitor statistics where technically possible.

The analysis helps us understand approximate reach, use of individual pages and technical errors and allows us to improve our information offering. The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is privacy-friendly audience measurement and website improvement.

Anonymous, exclusively aggregated statistics are retained for 24 months. They cannot be attributed to individual people.

7. Contact by email

If you contact us by email, we process the information you provide, in particular your email address, your name where applicable, and the contents of your message, in order to handle your enquiry and communicate with you.

If your enquiry concerns a contract or pre-contractual steps, the legal basis is Article 6(1)(b) GDPR. Other enquiries are processed under Article 6(1)(f) GDPR; our legitimate interest is the appropriate handling of incoming enquiries. Where you have given consent, the legal basis is Article 6(1)(a) GDPR.

General enquiries are deleted no later than six months after they have been fully dealt with. We retain them for longer only where this is necessary because of a contractual relationship, statutory retention requirements, or to establish, exercise or defend legal claims.

8. Cookies and access to terminal equipment

The marketing website currently does not use cookies or store information on your device for analytics or advertising purposes. Nor do we access information already stored on your device for such purposes. A consent banner is therefore not currently required.

9. External links

Our website contains links to external websites, in particular websites of listed care support centres and the separate Homecare Assistant application. Your browser connects to the relevant provider only when you follow such a link. The respective provider is responsible for the processing of data on its website.

10. Recipients of personal data

Within our company, only people who need personal data to perform their duties are given access. As an external recipient and processor, IONOS may process personal data in connection with hosting and email delivery.

We otherwise disclose data only where permitted or required by law, where you have consented, or where disclosure is necessary to establish, exercise or defend legal claims.

11. Your rights

Subject to the statutory requirements, you have the right to access your personal data, rectify inaccurate data, request erasure or restriction of processing, and receive data portability. You may withdraw consent at any time with effect for the future.

You also have the right to object at any time, on grounds relating to your particular situation, to processing based on Article 6(1)(f) GDPR. We will then cease processing the relevant data unless we can demonstrate compelling legitimate grounds or the processing is necessary to establish, exercise or defend legal claims.

To exercise your rights, contact willkommen@homecare-assistant.de.

12. Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority. Our competent authority is the Hamburg Commissioner for Data Protection and Freedom of Information, Ludwig-Erhard-Strasse 22, 20459 Hamburg, Germany, mailbox@datenschutz.hamburg.de, datenschutz-hamburg.de.

13. Automated decision-making

The marketing website does not use automated decision-making, including profiling, within the meaning of Article 22 GDPR.

14. Updates to this Privacy Policy

We update this Privacy Policy when the website functions, service providers or legal requirements change.

Last updated: July 2026