Privacy Policy

We host the content of our website with the following provider:

External hosting

This website is externally hosted. Personal data collected on this website is processed on the hosting provider’s systems. This may include IP addresses, contact enquiries, metadata and communication data, contact details, names, website access data and other data generated through the use of a website.

External hosting is used for the purpose of performing contracts with our potential and existing clients in accordance with Art. 6(1)(b) GDPR and in our legitimate interest in providing a secure, fast and efficient online service through a professional provider in accordance with Art. 6(1)(f) GDPR.

We use the following hosting provider: Cloudflare, Inc. 101 Townsend Street San Francisco, CA 94107 USA

Data transfers to the United States

When Cloudflare is used, personal data may be transferred to the United States. Cloudflare, Inc. is certified under the EU-U.S. Data Privacy Framework.

Where required, Cloudflare also uses Standard Contractual Clauses approved by the European Commission and other appropriate safeguards for international data transfers.

Data processing agreement

The processing of personal data within the services provided by Cloudflare is governed by Cloudflare’s Data Processing Addendum. This sets out the data protection obligations applicable when personal data is processed on behalf of the website operator.

Data protection

The operators of this website take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with applicable data protection legislation and this Privacy Policy.

When you use this website, various items of personal data are collected. Personal data is data that can be used to identify you personally. This Privacy Policy explains what data we collect, what we use it for and how and for what purpose the processing takes place.

Please note that data transmission over the internet, for example when communicating by email, may have security vulnerabilities. Complete protection of data against third parties is not possible.

Information about the controller

The controller responsible for data processing on this website is: Der Hentrich – Web and Software Services Christian Hentrich Schillerstr. 3 22946 Trittau Germany Email: info@der-hentrich.com

The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data such as names or email addresses.

Storage period

Unless a more specific storage period is stated in this Privacy Policy, your personal data will remain with us until the purpose for processing the data no longer applies. If you submit a legitimate request for deletion or withdraw your consent to data processing, your data will be deleted unless we have other legally permissible reasons for storing it, such as retention periods required under tax or commercial law. In such cases, the data will be deleted once those reasons no longer apply.

General information on the legal bases for data processing on this website

Where you have consented to data processing, we process your personal data on the basis of Art. 6(1)(a) GDPR. Where your data is required for the performance of a contract or for taking steps prior to entering into a contract, we process your data on the basis of Art. 6(1)(b) GDPR. We also process your data where this is necessary to comply with a legal obligation on the basis of Art. 6(1)(c) GDPR. Data processing may also be based on our legitimate interests in accordance with Art. 6(1)(f) GDPR.

Recipients of personal data

As part of our business activities, we work with various external parties. In some cases, this requires personal data to be transferred to these parties. We only disclose personal data where this is necessary for performing a contract, where we are legally required to do so, where we have a legitimate interest in disclosure under Art. 6(1)(f) GDPR, or where another legal basis permits the transfer.

Withdrawal of your consent to data processing

Many data processing operations are only possible with your express consent. You may withdraw consent you have already given at any time. The lawfulness of data processing carried out before the withdrawal remains unaffected.

Right to object to data collection in specific cases and to direct marketing under Art. 21 GDPR

Where data processing is based on Art. 6(1)(e) or (f) GDPR, you have the right at any time, on grounds relating to your particular situation, to object to the processing of your personal data. If you object, we will no longer process the personal data concerned unless we can demonstrate compelling legitimate grounds for the processing or the processing is required for the establishment, exercise or defence of legal claims.

Where your personal data is processed for direct marketing purposes, you have the right at any time to object to the processing of personal data concerning you for such marketing. If you object, your personal data will no longer be used for direct marketing purposes.

Right to lodge a complaint with a supervisory authority

In the event of infringements of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority. This right is without prejudice to any other administrative or judicial remedies.

Right to data portability

You have the right to receive data that we process automatically on the basis of your consent or in performance of a contract in a commonly used, machine-readable format, either for yourself or for a third party. If you request the direct transfer of the data to another controller, this will only take place where technically feasible.

Access, rectification and erasure

Within the scope of applicable legal provisions, you have the right at any time to receive information free of charge about your stored personal data, its origin and recipients and the purpose of the data processing, and, where applicable, the right to request rectification or erasure of this data.

Right to restriction of processing

You have the right to request restriction of the processing of your personal data. This right applies in the following cases:

Where you have restricted the processing of your personal data, this data may, apart from storage, only be processed with your consent, for the establishment, exercise or defence of legal claims, for the protection of the rights of another natural or legal person, or for reasons of important public interest.

• If you dispute the accuracy of the personal data stored by us, we generally require time to verify this.
• If the processing of your personal data was or is unlawful, you may request restriction of data processing instead of erasure.
• If we no longer require your personal data but you need it for the establishment, exercise or defence of legal claims, you have the right to request restriction of processing instead of erasure.
• If you have objected under Art. 21(1) GDPR, a balance must be made between your interests and ours.

SSL or TLS encryption

For security reasons and to protect the transmission of confidential content, such as enquiries that you send to us as the website operator, this website uses SSL or TLS encryption. You can recognise an encrypted connection by the fact that the browser address changes from “http://” to “https://” and by the lock symbol in your browser.

When SSL or TLS encryption is enabled, the data you transmit to us cannot be read by third parties.

Objection to promotional emails

We hereby object to the use of contact information published as part of legal notice requirements for sending unsolicited advertising and information materials. The website operators expressly reserve the right to take legal action in the event of unsolicited promotional information, such as spam emails.

Server log files

The website provider automatically collects and stores information in server log files that your browser automatically transmits to us. These include:

This data is not combined with data from other sources.

This data is collected on the basis of Art. 6(1)(f) GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimisation of the website. Server log files must therefore be collected.

• Browser type and browser version
• Operating system used
• Referrer URL
• Hostname of the accessing computer
• Time of the server request
• IP address

Cloudflare Turnstile

To protect our newsletter form against automated subscriptions, we use Cloudflare Turnstile from Cloudflare, Inc. in invisible mode. A security check runs in the background without requiring visitors to click a checkbox.

Turnstile processes technical signals including IP addresses, browser information (User-Agent), connection characteristics (TLS fingerprint) and information about the website being accessed. This is used to detect and prevent automated requests. Processing is based on our legitimate interest in protecting the newsletter form pursuant to Art. 6(1)(f) GDPR.

Further details are available in Cloudflare’s Turnstile Privacy Addendum: https://www.cloudflare.com/turnstile-privacy-policy/

Contact form

If you send us an enquiry using the contact form, the information you provide in the form, including the contact details entered there, will be stored by us for the purpose of processing your enquiry and in case of follow-up questions. We do not disclose this data without your consent.

This data is processed on the basis of Art. 6(1)(b) GDPR where your enquiry relates to the performance of a contract or is necessary in order to take steps prior to entering into a contract. In all other cases, processing is based on our legitimate interest in efficiently handling enquiries addressed to us under Art. 6(1)(f) GDPR or on your consent under Art. 6(1)(a) GDPR where such consent has been requested. Consent may be withdrawn at any time.

The data entered by you in the contact form remains with us until you request its deletion, withdraw your consent to storage or the purpose for storing the data no longer applies, for example after your enquiry has been completely processed. Mandatory statutory provisions, in particular retention periods, remain unaffected.

Enquiries by email, telephone or fax

If you contact us by email, telephone or fax, your enquiry, including all personal data resulting from it, such as name and enquiry, will be stored and processed by us for the purpose of handling your request. We do not disclose this data without your consent.

This data is processed on the basis of Art. 6(1)(b) GDPR where your enquiry relates to the performance of a contract or is necessary in order to take steps prior to entering into a contract. In all other cases, processing is based on our legitimate interest in efficiently handling enquiries addressed to us under Art. 6(1)(f) GDPR or on your consent under Art. 6(1)(a) GDPR where such consent has been requested. Consent may be withdrawn at any time.

Data submitted to us through contact enquiries remains with us until you request its deletion, withdraw your consent to storage or the purpose for storing the data no longer applies, for example after your request has been completely processed. Mandatory statutory provisions, in particular statutory retention periods, remain unaffected.

Newsletter

If you subscribe to a newsletter through this website, we process the data you provide in the subscription form. This includes your first name and email address and, where provided, your last name, company and role or position. We also store which newsletter topics you selected.

To document your consent, we also store the time of subscription and the consent text and version used at that time. The processing is based on your consent pursuant to Art. 6(1)(a) GDPR.

Newsletter data is processed in a Cloudflare D1 database configured with EU jurisdiction. Further information about Cloudflare can be found in the “Hosting” section of this Privacy Policy.

You may withdraw your consent to receive newsletters at any time with effect for the future. In particular, you may use the unsubscribe option included in the relevant newsletter. After unsubscribing, your data will no longer be used to send the newsletter you unsubscribed from.

Data stored for newsletter purposes is generally processed for as long as the relevant newsletter subscription remains active. After withdrawal or unsubscription, data is deleted unless it remains necessary to honour the withdrawal, prevent further mailings, or comply with legal documentation or retention obligations.