Provider identification pursuant to section 5 DDG
The controller for the processing of personal data in connection with this website is the provider identified below.
Diego Armando Diaz Devia, trading as "IoCode SOLUTIONS" (not entered in the German commercial register)
c/o IP-Management #11289, Ludwig-Erhard-Straße 18
20459 Hamburg
Deutschland
1. Controller and scope
The controller for the processing of personal data in connection with this website is the provider identified above under "Provider identification". This notice covers access to the static website, contact by email, telephone and WhatsApp, and the external links named below.
2. Hosting and server logs
This website is hosted by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. To deliver each page, the TCP/HTTP connection transiently processes the originating IP address, date and time, the resource requested, and the browser's request headers (protocol, user agent) — the technical minimum needed to transmit a response over the internet. Of that traffic, the application retains only the timestamp, HTTP status code, bytes transferred and request duration; it does not log the IP address, full path, query parameters, referrer, user agent or authorization headers.
The legal basis is the legitimate interest in a secure and functional website (Article 6(1)(f) GDPR). A data processing agreement under Article 28 GDPR is in place with Hetzner Online GmbH; hosting takes place in data centres within the European Union/EEA under that data processing agreement. The application logs described above are rotated and deleted within 14 days at most; no Hetzner-specific retention period is claimed here beyond what is expressly stated in its DPA.
3. Contact by email, telephone and WhatsApp
The contact form on this website sends no data to an IoCode SOLUTIONS server. It generates a pre-filled mailto link locally in the visitor's browser; the message is only sent once the person confirms it in their own email client.
Where contact is made by email, the name, email address, project type and message are processed solely to handle the enquiry. The legal basis is Article 6(1)(b) GDPR where the enquiry serves to prepare or perform a contract, or Article 6(1)(f) GDPR (legitimate interest in responding to business enquiries) in all other cases. Data is deleted once it is no longer required, and at the latest after statutory retention periods expire.
Where a person calls by telephone or writes via WhatsApp, their telephone number, the profile name they have set, communication metadata and the content they provide are processed solely to handle the enquiry, on the same legal bases and deletion criteria set out in the previous paragraph. WhatsApp messages are handled with the WhatsApp Business app, provided by WhatsApp Ireland Limited. For the contact details of the people the controller communicates with via WhatsApp, WhatsApp Ireland Limited acts as processor under the WhatsApp Business Data Processing Terms; in addition, WhatsApp processes the data of its own users under its own terms and privacy policy. This may involve transfers to the United States: to WhatsApp LLC and Meta Platforms, Inc., which WhatsApp bases on the EU-U.S. Data Privacy Framework, and from them to other Meta group companies acting as sub-processors (data centres), on the basis of the European Commission's standard contractual clauses. WhatsApp may also rely on those standard contractual clauses as an alternative mechanism. The website loads no WhatsApp resource: a connection to WhatsApp is only established once the person actively opens the link.
The business email mailbox is operated through Zoho Mail (Zoho Corporation GmbH, II. Hagen 7, 45127 Essen, Germany). A data processing agreement under Article 28 GDPR is in place with Zoho; primary storage of email data takes place in data centres within the European Economic Area. Zoho group entities may access the data when necessary, including entities in India for support and debugging purposes; any resulting international transfer is subject to the safeguards required under Chapter V GDPR. Data subjects may request further information about those safeguards, or a copy of them where available, by writing to the contact address given in this notice.
Independently of when the controller considers an email no longer necessary, once deletion is initiated in the mailbox, Zoho's ordinary technical clean-up cycle for primary servers takes place roughly every six months, and backup deletion may take up to three further months. These are the processor's technical timeframes after deletion, not a general retention policy set by the controller.
4. No cookies and no tracking
This website sets no cookies and uses no analytics, marketing or tracking services (such as Google Analytics or comparable tools). No usage profiles are created and no information is shared with third parties for advertising purposes. Because no consent-requiring storage of, or access to, information on the visitor's device takes place under section 25 TDDDG, no consent banner is required.
5. External links
This website links to the GitHub, LinkedIn and WhatsApp platforms. No content, buttons or tracking pixels from these providers are embedded; a connection to the respective provider is established only once the linked page is opened through an active click. Their own privacy notices apply to any processing that follows the click.
6. Data subject rights
- Access to the personal data processed (Article 15 GDPR).
- Rectification of inaccurate data (Article 16 GDPR).
- Erasure of data, unless a statutory retention obligation applies (Article 17 GDPR).
- Restriction of processing (Article 18 GDPR).
- Data portability, where processing is based on consent or on a contract (Article 20 GDPR).
- Objection to processing based on Article 6(1)(f) GDPR (Article 21 GDPR).
Right to lodge a complaint with a supervisory authority
Without prejudice to any other administrative or judicial remedy, data subjects have the right to lodge a complaint with a data protection supervisory authority. The authority competent for the controller is:
Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW)
Kavalleriestraße 2–4
40213 Düsseldorf
Deutschland
https://www.ldi.nrw.de
Document version
2026-10-14.1
Version 2026-10-14.1 — current version of the imprint and privacy notice.
Last updated: 14 October 2026.