Privacy policy

1. Controller

The controller responsible for processing personal data on this website is:

Factureal GmbH
Werner-Warsinsky-Str. 9
44534 Lünen, Germany
Email: contact@factureal.com

You can use these contact details for questions about data protection or to exercise your rights.

2. Website delivery and security

We serve this static website through Cloudflare Workers. The provider is Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA.

When you visit the website, Cloudflare processes technical connection data. This includes, in particular, your IP address, the page or file requested, the time and status of the request, and information transmitted by your browser, such as the browser type and, where provided, the referring page. This processing serves to deliver content, operate the website securely and prevent attacks. The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is to provide our website reliably and securely.

Cloudflare receives this data and acts as a processor, in particular for the customer logs it makes available to us. Cloudflare describes itself as a separate controller for certain network and security data it processes for its own purposes. Further information is available in Cloudflare’s privacy policy.

Data may be processed outside the European Union or European Economic Area, particularly in the USA. Cloudflare states that it is certified under the EU-US Data Privacy Framework; its Data Processing Addendum also provides for Standard Contractual Clauses for relevant transfers to third countries. These documents provide further information about the transfer mechanisms and safeguards.

Technical data is processed or stored for as long as necessary to provide the service, investigate disruptions or security incidents, or comply with legal obligations. Retention depends, in particular, on the type of log and the relevant security circumstances. Cloudflare provides further information in its privacy policy about processing for which it acts as a controller.

Cloudflare also uses Network Error Logging to detect connection failures. Browsers that support this feature may send technical error reports to Cloudflare, such as the affected URL, error status and connection details. This serves our legitimate interest in diagnosing errors and maintaining an accessible website under Article 6(1)(f) GDPR. Cloudflare states that it discards the IP address processed upon receipt after the request is completed. Further information is available in Cloudflare’s NEL documentation.

3. Fonts, cookies and local features

Fonts, images and other design assets are delivered with the website. Your browser does not connect to external font or image providers for these assets. We do not use our own analytics or marketing scripts, or embedded maps, videos or social media plugins on this website.

The website itself does not set cookies or use comparable storage technologies such as localStorage or sessionStorage. Depending on the particular security check, Cloudflare may use technically necessary cookies to prevent attacks or automated access. Information about these security features is available in Cloudflare’s cookie documentation. Where such storage or access is strictly necessary to provide the service expressly requested, it is permitted under Section 25(2), point 2 of the German Telecommunications-Digital-Services Data Protection Act (TDDDG). The subsequent processing of personal data to protect the website is based on Article 6(1)(f) GDPR.

If you use the feature to copy our email address, only that publicly displayed address is written to your device’s clipboard following your action. The website does not read the previous contents of your clipboard or send them to us.

4. Contact by email

An email link opens your email application. We receive the information you provide only when you send a message, including your email address, the content of your message and, where applicable, your name or attachments. We use this data to handle your enquiry. Our email and IT service providers may process the data to provide the necessary technical services.

For enquiries concerning a contract with you or steps prior to entering into a contract, processing is based on Article 6(1)(b) GDPR. We handle other enquiries on the basis of our legitimate interest in communicating with prospective customers and business partners under Article 6(1)(f) GDPR.

We delete your enquiry once it has been resolved and further retention is no longer necessary. Statutory retention obligations or the need to establish and pursue legal claims may justify longer storage. Providing your information is voluntary. However, we may be unable to respond without a working contact address and the information needed to address your enquiry.

5. Your rights

Subject to the applicable legal conditions, you have the right to access your personal data, have inaccurate data corrected, obtain erasure or restriction of processing, and receive data in a portable format. Where processing is based on your consent, you may withdraw that consent at any time with effect for the future. We do not carry out automated decision-making, including profiling, that produces legal or similarly significant effects in connection with this website.

Right to object: Where processing is based on Article 6(1)(f) GDPR, you may object on grounds relating to your particular situation. We will stop that processing unless overriding compelling legitimate grounds exist or the processing serves to establish, exercise or defend legal claims. Please send your objection to contact@factureal.com.

You may lodge a complaint with a data protection supervisory authority, particularly in the place of your habitual residence, your workplace or the location of a suspected infringement. The State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia, Postfach 20 04 44, 40102 Düsseldorf, Germany, is a competent authority for our company’s registered location. A complaint form is available on its website.