Controller
Mohamed Fessi, trading as exawerk, Weißenburger Straße 5, 44135 Dortmund, Germany. Email: info@exawerk.de.
Website and hosting
Hostinger hosts this website. When you visit, technical data such as your IP address, time, requested address, browser information and HTTP status are processed to deliver and secure the website and resolve errors. The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is secure website operation. Technical logs are kept only as long as needed for these purposes or to investigate a security incident.
Contact form and email
We process your name, email address, message, enquiry type and optional organisation name to answer your enquiry. For enquiries about a contract or steps before a contract, the basis is Article 6(1)(b) GDPR. For other enquiries, the basis is Article 6(1)(f) GDPR and our interest in answering your message. Providing data is voluntary. We need an email address and message to answer a form enquiry. There is no file upload.
Retention
Ordinary enquiries are deleted after six months unless an ongoing relationship, open enquiry or legal retention requirement needs longer storage. A further working relationship may require other retention periods. Please do not send health information or identity documents through the form.
Recipients and service providers
The enquiry is sent over an encrypted SMTP connection to info@exawerk.de. Hostinger provides hosting and email services and processes data on our behalf. Where providers process data outside the European Economic Area, transfers use the applicable safeguards in the Hostinger data processing agreement, such as standard contractual clauses or adequacy decisions. See that agreement for details and the current subprocessor list.
Necessary technical functions
The contact form uses a session with a CSRF security token. The session cookie only protects the form and expires at the end of the browser session. To prevent abuse, we keep a keyed hash of the IP address and times of form attempts for a one-hour rate-limit window. Expired records are deleted on the next form attempt. The basis is Article 6(1)(f) GDPR and our interest in preventing spam and attacks. Information stored on your device for the requested form function is based on Section 25(2)(2) TDDDG.
No analytics or marketing services
This website has no analytics or marketing cookies, advertising pixels, embedded external videos, maps or social feeds. Fonts, photos and icons are loaded locally. We do not make automated decisions about applications or carry out profiling.
Your rights
Under the GDPR, you may request access, correction, deletion, restriction of processing and data portability. You may object to processing based on legitimate interests for reasons relating to your situation. You may withdraw any consent with effect for the future. Contact info@exawerk.de. You may also complain to a data protection authority, including the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia.
External links and updates
An external link takes you away from our website. The destination provider is responsible for processing on that site. We update this notice when the website or processing changes. Updated: 9 October 2026.