Privacy Policy

1. Controller

2. Hosting

This website is hosted on our own server at Hetzner Online GmbH (Industriestrasse 25, 91710 Gunzenhausen, Germany; data center Nuremberg). Your personal data (e.g. IP addresses in log files) is processed on servers in Germany. Processing is based on Art. 6 para. 1 lit. f GDPR (legitimate interest in secure website operation).

A data processing agreement (DPA) has been concluded with Hetzner Online GmbH.

3. Web Analytics – Umami Analytics

We use Umami Analytics, a privacy-friendly, cookie-free open-source web analytics software. Umami is self-hosted on our own server at Hetzner (Nuremberg, Germany). No cookies are set, no personal data is stored, and no data is transferred to third parties.

The analytics is GDPR-compliant and does not require consent (no consent banner required). Only anonymized usage behavior is collected (page views, referrer, browser type – without IP storage).

4. Contact form

When you submit an enquiry to us via the contact form, your details from the form, including the contact details you provide there, will be stored by us for the purpose of processing the enquiry and in the event of follow-up questions. We do not share this data without your consent.

The processing of the data entered in the contact form is based on Art. 6 para. 1 lit. b GDPR (pre-contractual measures) or Art. 6 para. 1 lit. f GDPR (legitimate interest). The data you enter will remain with us until you request deletion, revoke your consent to storage, or the purpose for data storage no longer applies.

5. YouTube Videos (Two-Click Solution)

YouTube videos are embedded on this website. We use the privacy-friendly youtube-nocookie.com domain and implement a two-click solution: YouTube videos are only loaded after you have actively given your consent.

Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Legal basis after consent: Art. 6 para. 1 lit. a GDPR. For more information see Google's privacy policy.

You can revoke your consent at any time in the footer under "Cookie Settings".

6. Microsoft Bookings

For appointment booking we use Microsoft Bookings (Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA). When you book an appointment, your data (name, email, other details you provide) is transferred to Microsoft. Processing is based on Art. 6 para. 1 lit. b GDPR (contract performance/initiation) and EU Standard Contractual Clauses concluded with Microsoft. More information: privacy.microsoft.com

7. Google Fonts (locally embedded)

This website loads web fonts, where used, exclusively locally from its own server. No connection to Google servers takes place; your IP address is not transmitted to Google.

8. Your rights

You have the following rights with regard to your personal data:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object to processing (Art. 21 GDPR)
• Right to withdraw consent (Art. 7 para. 3 GDPR)
• Right to lodge a complaint with the supervisory authority (Art. 77 GDPR)

To exercise your rights, please contact: contact@cusoso.com