.

CCM19 on the Privacy Shield, DATA PRIVACY FRAMEWORK and the USA

Registration CCM19 is a service that is programmed and operated in Germany. Here we briefly summarize what we do and, above all, what we do NOT do, as we are often asked about this. We comply with the current legal framework, take the GDPR & Privacy Shield seriously and do not transfer data to insecure third countries. Even though the EU adequacy decision - EU-U.S. Data Privacy Framework - currently applies, we are not convinced that the data is actually handled appropriately and, in the interests of our customers, we proactively set up our infrastructure as if this decision does not apply.

What we do NOT do.

  1. We do not use US or non-German / non-European cloud structures such as AWS, Azure or Google Cloud, not even in 2nd or 3rd line - Read more here...
  2. We do not use CDNs from the USA or other unsafe third countries such as Akamai, Cloudflare, Fastly or others
  3. We do not use software products from Microsoft such as Windows, Office 365 or Outlook
  4. We do not use any software from Google (except Google Ads) such as Gmail for processes within the scope of CCM19
  5. We do not use Teams / Slack or other US service providers for our internal processes for processing personal data, but OpenSource or other European alternatives, e.g. RocketChat, Nextcloud, Zammad and many more.

What we do

  1. All servers / computers are located in Germany and are NOT subject to the Cloud Act and NO data is transferred to the USA
  2. The servers of our promotion website are located at OVH Gmbh in Limburg an der Lahn
  3. The server clusters of the CCM19 cloud service have been located at Hetzner Online GmbH from Gunzenhausen in the data center in Falkenstein im Vogtland since March 2023, some enterprise instances are located on cloud servers which in turn run on computers in the data centers Falkenstein im Vogtland or Nuremberg. Some internal services without personal data also run in the data centers in Helsinki in Finland.
  4. Our support emails are routed via our email server at all-inkl.com in Dresden
  5. The primary DNS server for access is also located at all-inkl.com in Dresden
  6. All internal tools such as ticket management / team chat etc. run on open source tools on our own service servers at OVH GmbH, Hetzner Online GmbH or at all-inkl.com and are specially isolated, e.g. RockeChat, Zammad, Nextcloud and many more.
  7. All computers in the network - including internal computers and laptops of all employees in all departments - run Linux and are encrypted
  8. All connections / data are of course SSL / TLS etc. encrypted
  9. Access is from our company headquarters in Bonn or via the employees' own access from their home office in the Rhineland.
  10. We offer Paypal and Stripe for payment purposes - as data-saving alternatives we also offer payment by direct debit or invoice.
  11. We also use github, where you can find our official documentation and various other plugins, as a git hoster. We do not process any personal data here.
  12. We use Bitbucket from Atlassian as our internal Git platform. We do not process any personal data here.

At the customer's request, we are of course also happy to take part in corresponding meetings with Microsoft Teams, Zoom or other providers (via browser or app), but this is then up to the respective customer to decide and only ever affects the data of the respective customer. Wherever possible, we use data-saving or European or open source alternatives.

 

We use all kinds of tools such as Google Analytics, Adsense, etc. on test sitesexclusively for testing purposes for CCM19, even in the long term, so that we can reliably check the CCM19 functions in real use. But only for test purposes and not in productive use on our main CCM19 sites.

Hetzner Online GmbH
Industriestr. 25
91710 Gunzenhausen
Germany

Ansbach Register Court, HRB 6089
VAT ID No. DE 812871812
Managing Directors: Martin Hetzner, Stephan Konvickova, Günther Müller

As a German company, Hetzner Online GmbH is not subject to the Cloud Act.

OVH GmbH
St. Johanner Str. 41-43
66111 Saarbrücken
Germany
USt-IdNr.: DE245768940
Commercial register: Saarbrücken Local Court - HRB 15369
Supervisory authority: Trade Supervisory Office Saarbrücken

OVH GmbH is a subsidiary of the OVH SAS Group, a company registered in the Lille Trade and Companies Register under number 537 407 926, with registered office at 2, Rue Kellermann, 59100 Roubaix.

The data center of OVH GmbH, where some of CCM19's servers are located, is physically located in Limburg an der Lahn. OVH is not subject to the Cloud Act - here is a quote from OHV

"As part of our expansion into North America, we have created a legal separation so that all our services outside the USA are not subject to the Patriot Act or the CLOUD Act."

 

ALL-INKL.COM - Neue Medien Münnich
Owner: René Münnich
Hauptstraße 68 | D-02742 Friedersdorf

The servers there are located in a data center in Dresden and, as a purely German company, are not subject to the Cloud Act.

 

Does CCM19 really host its cloud in Germany?

The best proof is always the one that everyone can credibly derive for themselves. So here are the instructions on how you can find out for yourself.

1. Determine the IP address of the cloud service - you can easily do this via the whoIS system: https://who.is/dns/cloud.ccm19.de - there you will find the following result as shown in the screenshot. Click on the link to go to the external page.

DNS entry cloud.ccm19.de

2. Check the IP address: 148.251.5.29 yourself. You can do this very easily via one of the providers that holds this data: https://db-ip.com/148.251.5.29 - see screenshot for result

Ip Info Data