Privacy policy
Last updated: October 2026. The German version is legally binding.
1. Controller
GDT IT Consult GmbH, represented by its managing director Thomas Niehoff, Görresstraße 39, 48147 Münster, Germany, email: GDT-IT-Consult@pm.me. crocodilebytes is a brand of GDT IT Consult GmbH.
Contact for data protection questions: Thomas Niehoff, address as above.
2. In short
- This website sets no cookies and uses no analytics or tracking services.
- Fonts and all other files are served from our own server; no data is sent to third parties such as Google.
- We process personal data only when you request a trial license, buy a license or write to us.
3. Visiting the website
The web server stores technically necessary access data (IP address, date and time, requested address, browser and operating system, referring page) to run the site securely. Legal basis: Art. 6(1)(f) GDPR. The data is deleted automatically after a short time.
The website is run by an external hosting provider under a data processing agreement pursuant to Art. 28 GDPR. Connections are encrypted with SSL/TLS.
4. Trial license request
To issue a trial license we process first name, last name, company, address (street, postal code, city, country), email address and NAV version in use. Legal basis: Art. 6(1)(b) GDPR (steps taken at your request prior to a contract).
We first send an email with a confirmation link so that nobody can misuse your address. Unconfirmed requests are deleted automatically after 7 days. Confirmed requests are forwarded to us by email and deleted from the website database after 90 days; our license management keeps them as long as the license exists.
To prevent abuse we store a daily, keyed hash of your IP address for at most 24 hours; the address cannot be derived from it. Legal basis: Art. 6(1)(f) GDPR.
5. Purchase and payment
When you buy, we also process billing address, VAT ID where applicable and payment data to perform the contract and issue invoices (Art. 6(1)(b) and (c) GDPR). Payment is by bank transfer or PayPal (PayPal (Europe) S.à r.l. et Cie, S.C.A., 22–24 Boulevard Royal, L-2449 Luxembourg), whose privacy notice also applies. Invoice data is kept for the statutory periods (§ 147 AO, § 257 HGB).
Orders on this website (purchase or renewal) are transferred automatically to our internal invoicing system, which we operate ourselves, to issue the invoice. Once payment is received, your license term is updated automatically.
Before a trial ends and before a license expires we remind you by email about renewal (Art. 6(1)(f) GDPR; our legitimate interest is informing you about your license). Every reminder contains a link to unsubscribe from further reminders with one click.
6. License check in the software
GDT Where Used PLUS connects to our license server over an encrypted connection at start-up. It transmits your license data, the names of projects you create and the dates of imported versions. Your source code is never transmitted. Legal basis: Art. 6(1)(b) GDPR.
7. Contact by email
If you write to us, we process your details to handle your enquiry (Art. 6(1)(b) or (f) GDPR) and delete them when no longer needed and no retention duty applies.
8. Your rights
You have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20) and objection to processing based on Art. 6(1)(f) GDPR (Art. 21). Write to niehoff@g-d-t.de.
You may lodge a complaint with a supervisory authority, for example the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia, Kavalleriestraße 2–4, 40213 Düsseldorf, Germany.