Privacy Policy

1. Data Controller

Wenske Cyber Solutions GmbH
Bastian Wenske
Heidelberger Straße 15
12059 Berlin
Germany

Email: [email protected]
Phone: 030 41727782

2. Overview of Data Processing

This website processes personal data in three cases: server log files (automatically when the website is accessed), appointment booking via Calendly (only when the visitor actively clicks), and the contact form (only when actively used by the visitor).

This website uses no cookies and no tracking scripts on page load. All fonts and resources are self-hosted. The only third-party service (Calendly) is loaded only upon explicit user interaction (see Section 4).

3. Server Log Files

This website is hosted by netcup (netcup GmbH, Daimlerstraße 25, 76185 Karlsruhe, Germany). When this website is accessed, the server automatically records technical information in so-called server log files.

The following data is collected:

• IP address of the requesting device
• Browser type and browser version
• Operating system used
• Referrer URL (the previously visited page)
• Page accessed (URL)
• Date and time of access

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in the stable operation and security of the website).

Retention period: Log files are automatically deleted after 7 days. This data is not merged with other data sources.

4. Appointment Booking (Calendly)

This website offers the option to book a consultation appointment via Calendly. Calendly is not loaded on page access. A connection to Calendly's servers is only established when you actively click the appointment booking button.

Provider: Calendly LLC, 3423 Piedmont Road NE, Suite 200, Atlanta, GA 30305, USA.

Data processed: When using the booking tool, your IP address, browser information, and the appointment details you enter (name, email address) are transmitted to Calendly. Calendly may set its own cookies.

Legal basis: Art. 6(1)(a) GDPR (consent via active click). The integration only occurs after your explicit interaction.

Provider's privacy policy: https://calendly.com/privacy

5. Email Communication / Microsoft 365

We use Microsoft 365 for business email communication, including the forwarding of contact form inquiries.

Provider: Microsoft Ireland Operations Ltd., One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland.

Data processed: Email address, name, message content, metadata (timestamps).

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in reliable business communication).

Microsoft processes data under EU Standard Contractual Clauses (SCCs). A Data Processing Agreement (DPA) pursuant to Art. 28 GDPR has been concluded with Microsoft.

6. No Cookies, Tracking, or Analytics

This website sets no cookies.

• No tracking technologies are used (neither Google Analytics, Matomo, nor others).
• No third-party scripts are loaded on page access. The appointment booking service Calendly is only loaded upon explicit user click (see Section 4).
• No external CDN services or font services are used — all resources are self-hosted.
• No social media plugins or widgets are integrated.

When simply visiting this website, no data is transmitted to external services. A connection to Calendly is only established when the appointment booking feature is actively used.

7. No Disclosure to Third Parties

Personal data is not sold, traded, or shared with third parties without separate consent.

Exception: Microsoft 365 as a data processor for email communication (see Section 5) under a Data Processing Agreement (DPA) pursuant to Art. 28 GDPR. Microsoft acts solely on our instructions and is not considered a third party in the legal sense.

8. Your Rights (Art. 15–22 GDPR)

Under the GDPR, you have the following rights:

• Right of access (Art. 15 GDPR): You have the right to obtain information about the data stored about you.
• Right to rectification (Art. 16 GDPR): You have the right to have inaccurate data corrected.
• Right to erasure (Art. 17 GDPR): You have the right to deletion of your data ("right to be forgotten").
• Right to restriction of processing (Art. 18 GDPR): You have the right to request the restriction of the processing of your data.
• Right to object (Art. 21 GDPR): You have the right to object to the processing of your data.
• Right to data portability (Art. 20 GDPR): You have the right to receive your data in a structured, commonly used format.
• Right to withdraw consent (Art. 7(3) GDPR): You have the right to withdraw any consent you have given at any time with effect for the future.

To exercise your rights, please contact: [email protected]

9. Supervisory Authority

You have the right to lodge a complaint with a data protection supervisory authority regarding the processing of your personal data. The competent supervisory authority for Wenske Cyber Solutions GmbH is:

Berliner Beauftragte für Datenschutz und Informationsfreiheit
(Berlin Commissioner for Data Protection and Freedom of Information)
Friedrichstr. 219
10969 Berlin

https://www.datenschutz-berlin.de