Privacy Policy

How we handle your personal data in accordance with GDPR

1. Data Controller

The data controller responsible for processing your personal data on this website is:

Hucke & Sanker Ltd.
David Sanker
Email: [email protected]
Phone: +49 176 62529197

2. Data Collection on This Website

Server Log Files

The website provider automatically collects and stores information in server log files, which your browser automatically transmits. These are:

  • Browser type and version
  • Operating system
  • Referrer URL
  • Hostname of the accessing computer
  • Time of the server request
  • IP address

This data is not merged with other data sources. The basis for data processing is Art. 6 para. 1 lit. f GDPR, which permits the processing of data for the fulfillment of a contract or pre-contractual measures.

Contact Forms

When you contact us via contact form or email, we store the data you provide (name, email address, message content) for the purpose of processing your inquiry and for possible follow-up questions. We do not share this data without your consent.

The processing of this data is based on Art. 6 para. 1 lit. b GDPR if your inquiry is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in effectively processing inquiries addressed to us (Art. 6 para. 1 lit. f GDPR).

3. Third-Party Services

Appointment Scheduling

We use a self-hosted scheduling system (FunnelCraft) for appointment booking. When you book an appointment, your data (name, email, appointment details) is processed on our own servers and stored in accordance with GDPR. Calendar events are created via Google Calendar API. No third-party scheduling service receives your data.

CDN (Content Delivery)

We use jsDelivr CDN to deliver JavaScript libraries (Alpine.js). This may result in your IP address being transmitted to jsDelivr servers. Please refer to jsDelivr's privacy policy for details.

Google Fonts

This website uses Google Fonts for uniform font display. When you access a page, your browser loads the required fonts into your browser cache. This requires your browser to connect to Google's servers, which may result in Google learning that this website was accessed via your IP address. For more information, see Google's privacy policy.

4. Your Rights

Under GDPR, you have the following rights regarding your personal data:

  • Right of access (Art. 15 GDPR) - You can request information about your stored data
  • Right to rectification (Art. 16 GDPR) - You can request correction of inaccurate data
  • Right to erasure (Art. 17 GDPR) - You can request deletion of your data
  • Right to restriction (Art. 18 GDPR) - You can request restriction of processing
  • Right to data portability (Art. 20 GDPR) - You can request your data in a portable format
  • Right to object (Art. 21 GDPR) - You can object to processing based on legitimate interests

To exercise these rights, please contact us at [email protected].

5. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by law (e.g., tax and commercial retention periods of 6-10 years). After the retention period expires, we delete or anonymize your data.

6. Data Security

This website uses TLS/SSL encryption for security reasons and to protect the transmission of confidential content. You can recognize an encrypted connection by the "https://" prefix in your browser's address bar and the lock icon.

7. Cookies

Without your consent, this website sets no cookies for advertising or analytics.

Always active — Plausible Analytics. We measure traffic with Plausible (Plausible Insights OÜ, hosted in the EU). Plausible sets no cookies, assigns no cross-site identifier and collects no personal data; your IP address is used transiently to derive a country and is never stored. Because it cannot identify you, it runs without consent under Art. 6(1)(f) GDPR (legitimate interest in understanding which pages are read).

Only after you consent — advertising measurement. If you accept in the cookie banner, we additionally load:

  • Google Ads conversion tracking (Google Ireland Ltd.) — records that a visit which arrived from one of our ads resulted in an enquiry. Sets cookies.
  • LinkedIn Insight Tag (LinkedIn Ireland Unlimited Company) — measures and targets LinkedIn advertising. Sets cookies.

Until you accept, both are delivered in a non-executable form and cannot run or set anything. Google Consent Mode v2 is set to denied by default. The legal basis is your consent, Art. 6(1)(a) GDPR and § 25(1) TTDSG. Declining costs you nothing: every part of this site works identically.

Changing your mind. Your choice is stored locally in your browser for six months and is then re-requested. To change or withdraw it at any time, reset your cookie choice, or clear this site's data in your browser. Withdrawal takes effect immediately and does not affect the lawfulness of processing carried out beforehand.

Essential technical cookies may be used for website functionality only. These are not used for tracking.

8. Right to Complain

If you believe that the processing of your personal data violates data protection law, you have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR).

The competent supervisory authority in Germany is:

Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen
Kavalleriestr. 2-4
40213 Düsseldorf
www.ldi.nrw.de

Last updated: January 2025