Datenschutzerklärung
Privacy Policy
1. Controller
innt Consulting GmbH
Untermainkai 83a, 60329 Frankfurt am Main
info@verkaufshaie.de
2. Data protection officer
innt Consulting GmbH, Untermainkai 83a, 60329 Frankfurt am Main, Telefon +49 162 6711880, info@innt-gmbh.de
3. Principles
We process personal data only as far as necessary for the respective purpose. The legal bases are Art. 6(1)(b) GDPR (steps prior to and performance of a contract), Art. 6(1)(c) GDPR (legal obligations such as tax retention), Art. 6(1)(f) GDPR (legitimate interest in secure operation) and, where we explicitly ask you, Art. 6(1)(a) GDPR (consent).
4. Visiting our pages
When you visit, we process the data your browser transmits and that is technically required to serve the page: IP address, date and time, address requested, volume transferred, success message, browser type and version, operating system and the referring page if your browser sends one. This data appears in our hosting provider's logs, serves secure operation (Art. 6(1)(f) GDPR), is not combined with other records and is deleted after a short period.
5. Usage measurement on our pages
We measure the use of our pages with our own counting, operated on our servers. Page views and interactions are recorded; there is no recognition across devices, and the data does not leave our infrastructure. The legal basis is our legitimate interest in comprehensible usage statistics (Art. 6(1)(f) GDPR).
6. Cookies and browser storage
We set technically necessary cookies only where they are needed — for a sign-in, for example, or to keep your selection during an order. They are protected from scripts (httpOnly) and end with the session. We do not set cookies requiring consent for advertising or analytics.
7. Service providers
We use service providers that process data exclusively on our behalf and on our instructions (processing under Art. 28 GDPR):
Vercel Inc. (USA) — operation and delivery of the pages. The log data named above arises here.
Supabase Inc. (USA), data stored in Frankfurt am Main, Germany — database.
Cloudflare, Inc. (USA) — storage and delivery of images, videos and documents. When a file is fetched, your IP address is necessarily transmitted to this service.
Railway Corp. (USA) — background processing, such as generating PDF documents and thumbnails.
Inngest, Inc. (USA) — orchestration of recurring tasks. Only internal identifiers are transmitted.
Plus Five Five, Inc. ("Resend", USA) — delivery of our emails.
Backblaze, Inc. (USA) — encrypted backup.
Data processing agreements are in place with all processors.
8. Transfers to third countries
Where providers process data outside the European Union, this is based on the European Commission's standard contractual clauses (Art. 46(2)(c) GDPR) with supplementary safeguards, or on an adequacy decision.
9. Retention
We keep personal data only as long as necessary for the respective purpose. It is then deleted unless a statutory retention obligation applies.
10. Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18) and data portability (Art. 20). You may object at any time, on grounds relating to your particular situation, to processing based on legitimate interests (Art. 21). Consent once given can be withdrawn at any time with effect for the future.
11. Right to complain
You may lodge a complaint with a data protection supervisory authority, in particular in the Member State of your residence, place of work or the place of the alleged infringement. The authority competent for us is:
Der Hessische Beauftragte für Datenschutz und Informationsfreiheit, Wilhelmstraße 7, 65185 Wiesbaden, Telefon: 0611-1408 0, E-Mail: poststelle@datenschutz.hessen.de
12. Links to other sites
Our pages may link to third-party websites. Their content and data processing are the sole responsibility of those providers.
13. Changes
We update this policy when the processing described here changes. Last updated: September 27, 2026.