Privacy policy: your data at Sharpness

1. Controller

The controller for data processing on this website is:

Sharpness Solutions GmbH
Edewechter Landstraße 161
26131 Oldenburg, Germany
info(at)sharpness.de
+49 (0) 441 21 21 63 0

The competent supervisory authority is the State Commissioner for Data Protection of Lower Saxony (Die Landesbeauftragte für den Datenschutz Niedersachsen), Prinzenstraße 5, 30159 Hannover, Germany.

2. Collection and processing of personal data

We take the protection of your data seriously. We treat your personal data as confidential and in line with the statutory data protection rules and this privacy policy.

a) Server log files

Each time our website is accessed, the web server automatically records data in server log files. Your browser transmits this data to us. It includes:

• browser type and browser version
• operating system used
• referrer URL (the page visited before)
• host name of the accessing computer
• time of the server request
• IP address

We do not evaluate this data on a personal basis and do not merge it with other data sources. The data is recorded on the basis of Art. 6(1)(f) GDPR (legitimate interest), in order to ensure the technical function and security of the website. Log files are deleted after 14 days at the latest, unless they are needed to investigate a specific security incident.

b) Contact forms and email contact

If you contact us through the contact form or by email, we store the details you provide (name, email address, message) in order to handle your enquiry and to answer any follow-up questions. This data is processed on the basis of your consent (Art. 6(1)(a) GDPR) or in order to take steps prior to entering into a contract (Art. 6(1)(b) GDPR). You can withdraw a consent you have given at any time, with effect for the future (Art. 7(3) GDPR). This does not affect the lawfulness of the processing carried out up to that point.

We delete enquiry data as soon as it is no longer needed for handling the enquiry — usually after six months where no contract is concluded. Statutory retention periods, in particular under commercial and tax law, remain unaffected.

Your data is received only by the staff responsible for handling it and by technical service providers who support us as processors under Art. 28 GDPR — in particular for hosting and email delivery. It is not passed on for any other purpose.

c) Spam protection of our forms with Cloudflare Turnstile

To protect our forms against automated submissions we use Cloudflare Turnstile, a service of Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA (for the EEA: Cloudflare Germany GmbH, Rosental 7, 80331 Munich, Germany). Turnstile replaces classic captchas: it shows no picture puzzles and sets no cookies for advertising or tracking purposes.

• Scope of processing: when a page with a form is opened, the Turnstile script is loaded from Cloudflare servers. Your IP address, browser and device details and interaction characteristics are transmitted to Cloudflare in order to assess whether the input comes from a human. We verify the result on our server before a form is processed.
• Legal basis: the processing is based on our legitimate interest in preventing spam and abusive submissions (Art. 6(1)(f) GDPR). Access to your device is necessary to provide the service you have requested — sending the form (Section 25(2) no. 2 TDDDG, German Telecommunications Digital Services Data Protection Act).
• Transfer to third countries: Cloudflare, Inc. is certified under the EU-US Data Privacy Framework; standard contractual clauses apply in addition. A data processing agreement under Art. 28 GDPR is in place with Cloudflare.
• Further information: Cloudflare privacy policy.

d) Google Tag Manager and Google services

This website uses Google Tag Manager (container ID GTM-5WJHM6Z8) provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The tag manager itself does not create user profiles. It manages the services integrated through it, such as web analytics or advertising tags.

• Consent as the legal basis: the tag manager is only loaded after your explicit consent. Until then, no connection to Google servers is established and none of your data is transmitted. The legal basis is your consent under Art. 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG (German Telecommunications Digital Services Data Protection Act).
• Data processed: when it loads, your IP address, browser and device details and information about your use of this website are transmitted to Google. A transfer to the USA cannot be ruled out. Google LLC is certified under the EU-US Data Privacy Framework, which the European Commission recognised in its adequacy decision of 10 July 2023.
• Consent Mode: we use Google Consent Mode version 2. All consent signals are set to "denied" by default. They are only set to "granted" after you have given your consent.
• Withdrawal of consent: you can withdraw your consent at any time, with effect for the future — using the Cookie settings link in the footer of every page. Cookies that have already been set are not affected; you can delete them in your browser settings.
• Further information: Google privacy policy.

3. Your rights as a data subject

At any time you have the right to obtain free information about the origin, recipients and purpose of the personal data we store about you. You also have a right to rectification, blocking or erasure of this data. In addition, in certain circumstances you can request restriction of the processing or object to the processing.

If you believe that the processing of your data breaches data protection law, or that your data protection rights have been infringed in another way, you can lodge a complaint with the competent supervisory authority.

4. Objection to advertising emails

We hereby object to any use of the contact details published in our legal notice for sending advertising or information material that we have not expressly requested. The operators of this website expressly reserve the right to take legal action if unsolicited advertising is sent, for example by spam email.