Legal information
Privacy policy
How Configurix handles personal data on this website, in enquiries and when delivering custom configurators and business software.
Updated:
Who is responsible?
Configurix Limited is the contact company for this website and enquiries about Configurix. Our business address is shown in the contact panel. You can send a privacy request to office@configurix.de or use the regional email address shown on this page.
This notice explains processing for our own website, sales enquiries and business administration. Where a customer uses Configurix to handle its own customer or employee data, the customer determines the purpose of that processing and Configurix acts under the applicable service agreement and data processing instructions.
What this notice covers
The notice covers website visitors, people requesting a demonstration or quote, customer contacts, users of our software and other business contacts. It applies to personal data, including business contact details that identify a person.
Configurix specializes in complex products and builds custom configurators and business software. The data used in a particular implementation depends on its agreed features, such as configuration, pricing, quotes, CRM, appointments, materials/BOM, jobs, orders or invoicing.
The information we collect
Information you provide may include your name, work email, phone number, company, company website, country, project requirements, messages and files you choose to send. A service implementation may also contain user accounts, customer contacts, project addresses, configurations, quotes, appointment details and order documents.
Technical information includes the request IP address, browser and device information, visited page, date and time, referring page, campaign parameters, session or visitor identifiers and diagnostic events. An enquiry can be linked to its source page, market and form journey.
Why we use data and the relevant legal grounds
We use enquiry details to answer requests, assess project requirements, arrange a demonstration and prepare or perform a contract. Where the request concerns a contract with you, the legal basis is steps before a contract or contractual necessity, Article 6(1)(b) GDPR.
For business-to-business contact handling, fraud prevention, diagnosing failed enquiries and maintaining the security and reliability of the service, we rely on legitimate interests where applicable, Article 6(1)(f). Those interests are handling genuine business requests and operating a secure, reliable service. We consider the interests and rights of the people concerned.
Legal duties, such as retaining required accounting records, use Article 6(1)(c). Where a particular activity requires consent, Article 6(1)(a) applies; consent can be withdrawn for the future. A customer acting as controller determines the legal basis for personal data it instructs us to process.
Enquiry forms, including unfinished forms
The website can record information entered in a demo or enquiry form before the final submission, for example when you leave a field or the page. These records can include the entered contact and project details, the page and language, technical information and form-interaction signals.
We use these records to diagnose submission problems, distinguish genuine enquiries from automated activity and recover genuine business requests. Incomplete form records are separate from confirmed enquiries. Confirmed submissions create sales/CRM records and can trigger enquiry acknowledgements and internal notifications.
Who receives personal data
Access is limited to people and service providers who need information for the relevant task, including hosting and delivery, database storage, email, technical support and configured software integrations. This website uses Vercel for its current web deployment and Supabase for database and authentication services.
The site loads the Geist font through Google Fonts. Some product demonstrations use Vimeo; the video player is loaded when you choose to play the demonstration. These services can receive technical request information. Linked third-party websites apply their own privacy notices.
Customer-specific integrations, communication tools and assisted workflows depend on the agreed implementation. Ask us for the providers and processing details relevant to your service. We may disclose information where a legal duty or a valid request from an authority requires it. We do not sell personal data.
International processing
The location of processing depends on the hosting, email, media and other providers used for the service. Access or processing outside your country, including outside the European Economic Area, may occur.
Where the GDPR applies to an international transfer, the applicable transfer mechanism must be considered, such as an adequacy decision or appropriate contractual safeguards. Contact us for the destination countries, providers and safeguards relevant to your data or proposed deployment. This notice does not promise an EU-only hosting location.
Protecting information
The website and enquiry flow use HTTPS, access restrictions, authenticated administrative functions and controls against unauthorized submissions. The measures appropriate to a customer deployment depend on its data, users and agreed architecture.
Please use the designated account and file-sharing channels for project information and do not send passwords, payment-card details or sensitive personal information in a public enquiry form. No internet transmission or storage system can be guaranteed completely secure.
How long information is retained
Incomplete demo-form records are assigned a 30-day expiry. Confirmed enquiries become CRM records and are retained according to the continuing enquiry, customer relationship, contractual needs, applicable legal requirements and any relevant dispute or legal hold.
Customer project and account data follow the service agreement, customer instructions and any required legal retention. Technical records are retained for the operational, diagnostic and security purposes for which they are needed. Contact us for the retention period or criteria applying to a particular record and to request deletion where available.
Your privacy rights
Where the GDPR applies, you may request access, correction, erasure, restriction and a copy of portable data where the conditions for those rights are met. You may object to processing based on legitimate interests and to direct marketing.
If processing relies on consent, you may withdraw it without affecting the lawfulness of earlier processing. Send requests using the contact details on this page and describe the records or service concerned. We may need information to verify your identity and locate your data.
We normally respond within one month of receiving a request under the GDPR. Where permitted, a complex request can require an extension; we will explain it. If your data is held by a Configurix customer acting as controller, contact that business first; we assist it under the relevant agreement.
Automation and decisions
Form-security signals can flag likely automated activity and help us review enquiries. The software can also support rules, calculations and assisted workflows according to the agreed scope.
The public enquiry flow does not make a decision about you that has legal or similarly significant effects solely by automated means. If you believe a genuine enquiry has been affected by security controls, contact us directly. A customer must assess any such decision-making in its own deployment.
Information you choose to provide
You can browse product information without submitting an enquiry. Fields marked as required on a form are needed to handle that request; without usable contact information we may be unable to reply. Other project information helps us assess the scope.
Only share personal data you are authorized to provide. Business information may come from you, your colleagues or the customer responsible for a software project. If you need to understand the source of a specific record, ask us.
Questions and complaints
Please contact us if you have a concern about personal data. You also have the right to complain to a relevant supervisory authority, including the authority in the place where you live, work or believe an infringement occurred.
For Ireland, the supervisory authority is the Data Protection Commission. You can find its contact and complaint information at dataprotection.ie. Your local law may provide additional rights.
Changes to this notice
We update this notice when our processing or services change. The revision date is shown at the top of this page. Contact us if you need information about the notice applying to an earlier enquiry or agreement.