Privacy Policy
This English version is provided for convenience only. In case of any discrepancy, the German version is legally binding.
We take the protection of personal data seriously. This privacy policy explains which personal data we process on this website and in the course of business communication.
1. Controller
The controller within the meaning of the General Data Protection Regulation is:
Huelake Software Solutions UG (haftungsbeschränkt)
Kirschdell 2
53937 Schleiden
Deutschland
Represented by the managing director Jordan Scholzen.
Email: info@huelake.com
2. Hosting, cloud infrastructure and technical service providers
This website and the connected technical systems are operated, among other things, via Microsoft Azure.
In addition, we use technical service providers for hosting, communication, development, analytics, error monitoring, IT security and payment processing.
These may include in particular Microsoft Azure, Azure DevOps, Microsoft 365, Google, Stripe, Sentry as well as other technical infrastructure and cloud providers.
Where required, data processing agreements have been concluded with the relevant service providers.
3. Server log files
When this website is accessed, information is automatically transmitted by your browser to our server.
This includes in particular the IP address, the date and time of the request, browser type, browser version, operating system, referrer URL and the pages accessed.
The processing serves to ensure the technical operation, security and stability of the website on the basis of Art. 6 (1) lit. f GDPR.
4. Contacting us and business communication
If you contact us via the contact form, by email, by phone or via Microsoft Teams, we process the data you provide in order to handle your enquiry and for business communication.
This may include in particular your name, email address, phone number, company details, message content, file attachments and technical connection data.
The legal basis is Art. 6 (1) lit. b GDPR where the processing relates to the initiation or performance of a contract, otherwise Art. 6 (1) lit. f GDPR.
Business communication, contract enquiries and project-related documents may be stored for a longer period for documentation, traceability, security and subsequent contract handling.
5. Microsoft 365, email and Microsoft Teams
We use Microsoft 365 and Microsoft Teams for email communication, calendars, document management and online meetings.
The provider is Microsoft Ireland Operations Limited.
This may involve processing your name, email address, message content, meeting data, calendar data, technical connection data, IP address and shared files.
Depending on usage and configuration, processing by Microsoft entities outside the European Union cannot be ruled out.
6. Contact form and Google reCAPTCHA
We use Google reCAPTCHA to protect our contact forms against misuse and automated access.
The provider is Google Ireland Limited.
Through reCAPTCHA, Google may process information about your usage behaviour, your IP address, browser data as well as mouse and keyboard input in order to detect automated access.
The legal basis is Art. 6 (1) lit. f GDPR. Our legitimate interest lies in protecting our website against spam, misuse and automated attacks.
7. Consent management
To manage consent we use a self-hosted consent management system without any third-party integration.
We store your choices regarding permitted or rejected services so that external content or non-essential services are only loaded after the corresponding consent.
The legal basis is Art. 6 (1) lit. c GDPR as well as Art. 6 (1) lit. f GDPR.
8. Cookies and comparable technologies
We use technically necessary cookies or comparable technologies where these are required for the operation of the website, for security or for storing your consent.
The legal basis for this is § 25 (2) TDDDG as well as Art. 6 (1) lit. f GDPR.
We do not carry out advertising profiling or cross-site marketing tracking.
9. Analytics with Plausible Analytics
This website uses the privacy-friendly web analytics software Plausible Analytics in a self-hosted variant.
Plausible does not process cookies and serves exclusively for the statistical evaluation of the use of our website.
We do not carry out personal profiling or cross-site tracking.
The legal basis is Art. 6 (1) lit. f GDPR. Our legitimate interest lies in the technical and economic optimisation of our website.
10. External content and YouTube
This website may embed external content, in particular videos from YouTube.
The provider of YouTube is Google Ireland Limited.
External content is only loaded after you have expressly consented.
Only after your consent can a connection to the servers of the respective provider be established. In doing so, personal data, in particular your IP address, browser data and usage data, may be transmitted to third-party providers.
The legal basis is your consent pursuant to Art. 6 (1) lit. a GDPR and § 25 (1) TDDDG. You can withdraw your consent at any time with effect for the future.
11. Error analysis and monitoring with Sentry
We use Sentry for technical monitoring, error analysis and improving the stability of our systems.
This may involve processing technical information about error states, the devices used, browser information, operating system, IP address, the time of the error and the affected parts of the program.
The processing serves the stability, security and optimisation of our systems on the basis of Art. 6 (1) lit. f GDPR.
We take care not to store any sensitive content, passwords or credentials in error logs.
12. Newsletter and communication with existing customers
We may inform customers or business contacts who have already been in touch with us or have enquired about services by email about similar services, technical information or company news.
The legal basis is Art. 6 (1) lit. f GDPR in conjunction with § 7 (3) UWG, to the extent legally permitted.
You may object to the use of your email address for such information at any time, without incurring any costs other than the transmission costs at the basic rates.
13. Job applications by email
If you apply to us by email, we process the personal data you provide exclusively for the purpose of the application procedure.
This may include in particular contact details, CV, references, qualifications, cover letter and other information you provide.
The legal basis is § 26 BDSG as well as Art. 6 (1) lit. b GDPR.
Application documents are deleted as soon as they are no longer required for the application procedure and no statutory retention obligations or legitimate interests stand in the way.
14. Payment processing
Payment for our services can be made by bank transfer or via Stripe.
For payments by bank transfer we process in particular invoice data, payment data, bank details, booking data and communication data.
For payments via Stripe, payment, invoice, contact and transaction data may be processed by Stripe. The provider is Stripe Payments Europe Ltd.
The processing takes place for the performance of the contract on the basis of Art. 6 (1) lit. b GDPR and to fulfil legal obligations on the basis of Art. 6 (1) lit. c GDPR.
15. Recipients of personal data
Recipients of personal data may in particular be technical service providers, hosting providers, cloud providers, email and communication service providers, payment service providers, tax advisers, legal advisers and public authorities to the extent required by law.
16. International data transfers
Where personal data is transferred to service providers outside the European Union or the European Economic Area, this only takes place within the limits of what is legally permitted.
Where required, we use appropriate safeguards pursuant to Art. 46 GDPR, in particular EU standard contractual clauses or other legally recognised protection mechanisms.
Processing of personal data outside the European Union, in particular in the USA, cannot be ruled out for individual service providers we use.
17. Storage period
We store personal data only for as long as this is necessary for the respective purposes or as long as statutory retention obligations exist.
Business communication, contract enquiries, project documents and billing-relevant information may be stored for a longer period for documentation, traceability, security, subsequent contract handling and legal defence.
Documents relevant under commercial and tax law may be stored for the statutory retention periods.
18. Your rights
You have the right to information, rectification, erasure, restriction of processing, data portability and to object to processing based on Art. 6 (1) lit. f GDPR.
Where processing is based on your consent, you can withdraw it at any time with effect for the future.
To exercise your rights you can contact us at any time: info@huelake.com
19. Right to lodge a complaint
You have the right to lodge a complaint with a data protection supervisory authority.
The competent supervisory authority in North Rhine-Westphalia is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia.
20. Changes to this privacy policy
We reserve the right to adapt this privacy policy if technical, legal or organisational changes arise.