Privacy Policy

Protecting your personal data is important to us. This privacy policy informs you pursuant to Art. 13 GDPR and § 25 TDDDG (German Telecommunications Digital Services Data Protection Act) about how we collect, process, and protect your data.

Data Controller

KONVOI GmbH
Harburger Schlossstraße 6-12
21079 Hamburg
Germany
Email: info@konvoi.eu

Collection and Processing of Personal Data

We collect and process personal data only to the extent necessary for providing our website and services, or where you have given your explicit consent. The following sections explain which service providers and processing activities are involved.

Hosting and Content Delivery

This website is hosted by:
Netlify Inc.
44 Montgomery Street Suite 300
San Francisco, CA 94104, USA

Purpose: Providing the website and delivering static content via a Content Delivery Network (CDN).
Legal basis: Art. 6 para. 1 lit. f GDPR (legitimate interest in a reliable, secure, and performant website).
Data processed: Netlify processes access logs that may include IP addresses, browser information, and timestamps. These logs are used for security and diagnostic purposes.

For more information, see Netlify's privacy policy: https://www.netlify.com/privacy/

Forms and Contact Requests

When you use our contact or consultation forms, the data you enter is transmitted to us via Web3Forms (api.web3forms.com).

Purpose: Transmitting contact and consultation requests to KONVOI GmbH.
Legal basis: Art. 6 para. 1 lit. a GDPR (consent given by actively submitting the form).
Data processed: Name, email address, form content.

The transmitted data is used exclusively to respond to your request. Web3Forms forwards the data by email and does not store permanent copies. For more information: https://web3forms.com/privacy

Bot Protection on Forms

Our forms are protected by Cloudflare Turnstile, a service provided by:
Cloudflare Inc.
101 Townsend St., San Francisco, CA 94107, USA

Purpose: Protection against automated requests (bots) and abuse of contact forms.
Legal basis: Art. 6 para. 1 lit. f GDPR (legitimate interest in the security of our website and services).
Cookie: Cloudflare Turnstile sets a technically necessary cookie (cf_clearance) required for bot protection. This cookie falls under the exemption for technically necessary cookies pursuant to § 25 para. 2 no. 2 TDDDG and does not require separate consent.

For more information: https://www.cloudflare.com/privacypolicy/

Analytics (Rybbit)

We use Rybbit, a privacy-friendly, self-hosted analytics tool to anonymously evaluate the use of our website.

Rybbit uses no cookies and stores no personal data. Analysis is based on anonymised technical characteristics — no IP addresses are stored and no fingerprinting of personal data takes place.

Since no data is stored on or read from end-user devices, consent under § 25 para. 1 TDDDG (German Telecommunications Digital Services Data Protection Act) is not required. Processing is based on § 25 para. 2 no. 2 TDDDG in conjunction with Art. 6 para. 1 lit. f GDPR (legitimate interest in anonymous reach measurement to improve our website).

Rybbit is self-hosted — no data is transmitted to third parties.

Appointment Booking (Cal.eu)

Our website contains links to the external booking service Cal.eu (cal.eu). When you click these links, you leave our website and are redirected directly to Cal.eu. No Cal.eu data is embedded on our website.

For data processing on Cal.eu's website, only Cal.eu's own privacy policy applies. We have no influence over their data processing.

Cookies and Consent Management

We use vanilla-cookieconsent v3 to manage your cookie consents. This tool informs you on your first visit to our website about the use of cookies and allows you to grant or refuse consent.

• Technically necessary cookies (e.g. Cloudflare Turnstile cf_clearance) are set without consent, as they are strictly required for the basic functions of the website (§ 25 para. 2 no. 2 TDDDG).
• Optional cookies (e.g. Google Maps on the contact page) are only loaded after your explicit consent.

Your consent decision is stored in your browser (cookie cc_cookie, SameSite=Lax). You can withdraw or adjust your consent at any time via the "Cookie Settings" link in the footer of this website.

Social Media

We maintain a company profile on LinkedIn (LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland). When you visit our LinkedIn page, LinkedIn processes your data in accordance with its own privacy policy: https://www.linkedin.com/legal/privacy-policy

No LinkedIn tracking pixels or plugins are embedded on our own website.

Your Rights (Data Subject Rights)

You have the following rights with regard to your personal data:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object to processing (Art. 21 GDPR)

To exercise your rights, please contact: info@konvoi.eu

Right to lodge a complaint with the supervisory authority:
You have the right to lodge a complaint with the competent data protection supervisory authority:

Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit (HmbBfDI)
Ludwig-Erhard-Str. 22
20459 Hamburg, Germany
Email: mailbox@datenschutz.hamburg.de