Privacy Policy

1. Controller

2. Hosting

This website is hosted on our own server at Hetzner Online GmbH (Industriestrasse 25, 91710 Gunzenhausen, Germany; data center Nuremberg). Your personal data (e.g. IP addresses in log files) is processed on servers in Germany. Processing is based on Art. 6 para. 1 lit. f GDPR (legitimate interest in secure website operation).

A data processing agreement (DPA) has been concluded with Hetzner Online GmbH.

3. Web Analytics – Umami Analytics

We use Umami Analytics, a privacy-friendly, cookie-free open-source web analytics software. Umami is self-hosted on our own server at Hetzner (Nuremberg, Germany). No cookies are set, no personal data is stored, and no data is transferred to third parties.

The analytics is GDPR-compliant and does not require consent (no consent banner required). Only anonymized usage behavior is collected (page views, referrer, browser type – without IP storage).

4. Contact form

When you submit an enquiry to us via the contact form, your details from the form, including the contact details you provide there, will be stored by us for the purpose of processing the enquiry and in the event of follow-up questions. We do not share this data without your consent.

The processing of the data entered in the contact form is based on Art. 6 para. 1 lit. b GDPR (pre-contractual measures) or Art. 6 para. 1 lit. f GDPR (legitimate interest). The data you enter will remain with us until you request deletion, revoke your consent to storage, or the purpose for data storage no longer applies.

5. YouTube Videos (Two-Click Solution)

YouTube videos are embedded on this website. We use the privacy-friendly youtube-nocookie.com domain and implement a two-click solution: YouTube videos are only loaded after you have actively given your consent.

Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Legal basis after consent: Art. 6 para. 1 lit. a GDPR. For more information see Google's privacy policy.

You can revoke your consent at any time in the footer under "Cookie Settings".

6. Microsoft Bookings

For appointment booking we use Microsoft Bookings (Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA). When you book an appointment, your data (name, email, other details you provide) is transferred to Microsoft. Processing is based on Art. 6 para. 1 lit. b GDPR (contract performance/initiation) and EU Standard Contractual Clauses concluded with Microsoft. More information: privacy.microsoft.com

7. Email Newsletter

On our website you can subscribe to our email newsletter to receive notifications about new blog posts and occasional mailings from us.

Data collected

The only mandatory field is your email address. You may optionally provide first name, last name, company, and role. These are used solely for personalised salutations in emails.

Double opt-in & consent

After signing up, you will receive a confirmation email with an activation link (double opt-in). Your subscription only becomes active after clicking that link. The legal basis is your consent pursuant to Art. 6 para. 1 lit. a GDPR.

Email delivery via Microsoft 365

Newsletter emails are sent via Microsoft 365 / Microsoft Graph API (Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA). Your email address is transmitted to Microsoft as the technical service provider. Transfer is based on EU Standard Contractual Clauses (SCC). More information: privacy.microsoft.com

Withdrawal & unsubscribe

You may withdraw your consent at any time without giving reasons. Every email contains an unsubscribe link at the bottom. After withdrawal your data will no longer be used for sending. Processing that took place prior to withdrawal on the basis of your consent remains unaffected. Stored data will be deleted upon request (contact@cusoso.com).

8. Google Fonts (locally embedded)

This website loads web fonts, where used, exclusively locally from its own server. No connection to Google servers takes place; your IP address is not transmitted to Google.

9. Your rights

You have the following rights with regard to your personal data:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object to processing (Art. 21 GDPR)
• Right to withdraw consent (Art. 7 para. 3 GDPR)
• Right to lodge a complaint with the supervisory authority (Art. 77 GDPR)

To exercise your rights, please contact: contact@cusoso.com