Privacy Policy
Controller
Hucke & Sanker Ltd.
15-17 Middle Street
Brighton BN1 1AL
United Kingdom
Email: [email protected]
We have not appointed a data protection officer, as we are not required to do so under Art. 37 GDPR or § 38 BDSG.
What this site does not do
This website sets no cookies. It carries no advertising tags, no conversion or remarketing pixels, no social media plugins, and no cross-site tracking of any kind. No profiling within the meaning of Art. 22 GDPR takes place, and no automated decision-making affects you.
Fonts are served from this website's own server. No request is made to Google Fonts or any other third-party font service, so your IP address is not transmitted to such a provider.
Server log files
When you access this site, your browser transmits data that is stored in server log files: your IP address, the date and time of the request, the page requested, the referring page, the HTTP status code, the volume of data transferred, and your browser and operating system identifiers.
Purpose and legal basis: operating the site securely and reliably, and detecting and investigating attacks. This is our legitimate interest under Art. 6 (1) (f) GDPR.
Retention: log entries are deleted after 14 days, unless a specific security incident requires longer retention for evidential purposes.
Hosting
This site is hosted on infrastructure operated by Google Cloud Platform in Frankfurt am Main, Germany (europe-west3). Data processed in connection with your visit is processed on servers located in the European Union. Processing is carried out on our behalf under a data processing agreement pursuant to Art. 28 GDPR.
Content delivery network
We use Cloudflare, Inc. as a content delivery network and protective proxy. Requests to this site are routed through Cloudflare's servers, which necessarily processes your IP address, in order to deliver the site quickly and to defend against attacks. Legal basis: Art. 6 (1) (f) GDPR.
Cloudflare is established in the United States. Transfers are safeguarded by the European Commission's standard contractual clauses and, where applicable, the EU–US Data Privacy Framework. Details: cloudflare.com/privacypolicy.
Analytics
We use Plausible Analytics, operated by Plausible Insights OÜ, Estonia. Plausible is cookieless: it stores nothing on your device, assigns no persistent identifier, and collects no data that identifies you personally. It records aggregate figures only — page views, referring source, country, and browser and device type.
Legal basis: Art. 6 (1) (f) GDPR. Our legitimate interest is understanding, in aggregate, how the site is used. Because no information is stored on or read from your device, consent under § 25 (1) TDDDG is not required.
Privacy notice preference
If you dismiss the privacy notice shown on your first visit, that preference
is stored in your browser's local storage under the key
ds_consent_v1 so the notice is not shown again.
This is not a cookie, it is never transmitted to us, and it contains no
information about you. Clearing your browser storage removes it.
Contacting us
If you contact us by email, the data you provide — your address, your name if given, and the content of your message — is processed in order to handle your enquiry. Legal basis: Art. 6 (1) (b) GDPR where your enquiry relates to a contract or pre-contractual steps, otherwise Art. 6 (1) (f) GDPR.
Correspondence connected to a legal mandate is additionally subject to professional secrecy under § 43a (2) BRAO and § 203 StGB, and is retained in accordance with the statutory retention periods applicable to lawyers.
Your rights
Under the GDPR you have the right to:
- access your personal data (Art. 15)
- rectification of inaccurate data (Art. 16)
- erasure (Art. 17)
- restriction of processing (Art. 18)
- data portability (Art. 20)
- object to processing based on Art. 6 (1) (f), on grounds relating to your particular situation (Art. 21)
To exercise any of these, write to [email protected].
You also have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR) — in the Member State of your habitual residence, place of work, or the place of the alleged infringement. The authority competent for our German establishment is the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen.
Changes
We update this policy when the site changes. Any new third-party service, tag or cookie will be described here in the same change that introduces it.