Privacy Policy

1. Data Controller

The data controller responsible for processing your personal data on this website is:

Hucke & Sanker Ltd.
David Sanker
Email: [email protected]
Phone: +49 176 62529197

2. Data Collection on This Website

Server Log Files

The website provider automatically collects and stores information in server log files, which your browser automatically transmits. These are:

• Browser type and version
• Operating system
• Referrer URL
• Hostname of the accessing computer
• Time of the server request
• IP address

This data is not merged with other data sources. The basis for data processing is Art. 6 para. 1 lit. f GDPR, which permits the processing of data for the fulfillment of a contract or pre-contractual measures.

Contact Forms

When you contact us via contact form or email, we store the data you provide (name, email address, message content) for the purpose of processing your inquiry and for possible follow-up questions. We do not share this data without your consent.

The processing of this data is based on Art. 6 para. 1 lit. b GDPR if your inquiry is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in effectively processing inquiries addressed to us (Art. 6 para. 1 lit. f GDPR).

3. Third-Party Services

Appointment Scheduling

We use a self-hosted scheduling system (FunnelCraft) for appointment booking. When you book an appointment, your data (name, email, appointment details) is processed on our own servers and stored in accordance with GDPR. Calendar events are created via Google Calendar API. No third-party scheduling service receives your data.

Content delivery network (Cloudflare)

This site is delivered through the network of Cloudflare, Inc. (101 Townsend Street, San Francisco, CA 94107, USA), which caches it and protects it against attacks. In doing so Cloudflare processes your IP address and the technical data of each request. Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in fast and secure delivery). Cloudflare is certified under the EU-U.S. Data Privacy Framework (participant list of the U.S. Department of Commerce, checked 2026-09-10); the transfer to the United States rests on the European Commission's adequacy decision for that framework.

Spam protection of the contact form (Cloudflare Turnstile)

The contact form is protected against automated submissions by Cloudflare Turnstile. Turnstile loads only once you interact with the form and then checks in the background whether a human is writing; in doing so Cloudflare processes your IP address and technical characteristics of your browser. Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in protecting the form against abuse). The transfer to the United States rests, as described above, on the EU-U.S. Data Privacy Framework.

Fonts

The fonts used on this site (Inter, JetBrains Mono) are delivered from our own server. No request is made to Google Fonts or any other font provider, so no third party learns that you visited this site.

4. Your Rights

Under GDPR, you have the following rights regarding your personal data:

• Right of access (Art. 15 GDPR) - You can request information about your stored data
• Right to rectification (Art. 16 GDPR) - You can request correction of inaccurate data
• Right to erasure (Art. 17 GDPR) - You can request deletion of your data
• Right to restriction (Art. 18 GDPR) - You can request restriction of processing
• Right to data portability (Art. 20 GDPR) - You can request your data in a portable format
• Right to object (Art. 21 GDPR) - You can object to processing based on legitimate interests

To exercise these rights, please contact us at [email protected].

5. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by law (e.g., tax and commercial retention periods of 6-10 years). After the retention period expires, we delete or anonymize your data.

6. Data Security

This website uses TLS/SSL encryption for security reasons and to protect the transmission of confidential content. You can recognize an encrypted connection by the "https://" prefix in your browser's address bar and the lock icon.

7. Cookies

Without your consent, this website sets no cookies at all — not even a technically necessary one (measured 2026-09-10).

Always active — Plausible Analytics. We measure traffic with Plausible, which we host ourselves on our own server in Frankfurt am Main, Germany. Plausible sets no cookies and assigns no persistent identifier; your IP address is not stored, but combined with a daily-changing random value into a hash that cannot be reversed and becomes meaningless after 24 hours. The data never leaves our server. Because it cannot identify you, it runs without consent under Art. 6(1)(f) GDPR (legitimate interest in understanding which pages are read); consent under § 25 TDDDG is not required because nothing is stored on or read from your device.

Only after you consent — advertising measurement. If you accept in the cookie banner, we additionally load:

• Google Ads conversion tracking (Google Ireland Ltd.) — records that a visit which arrived from one of our ads resulted in an enquiry. Sets cookies.
• LinkedIn Insight Tag (LinkedIn Ireland Unlimited Company) — measures and targets LinkedIn advertising. Sets cookies.

Until you accept, both are delivered in a non-executable form and cannot run or set anything. Google Consent Mode v2 is set to denied by default. The legal basis is your consent, Art. 6(1)(a) GDPR and § 25(1) TDDDG. Declining costs you nothing: every part of this site works identically.

Changing your mind. Your choice is stored in your browser's local storage (key consent_v2) for 182 days and is then re-requested; this is not a cookie and is never transmitted to us. To change or withdraw it at any time, reset your cookie choice, or clear this site's data in your browser. Withdrawal takes effect immediately and does not affect the lawfulness of processing carried out beforehand.