Privacy policy: your data at Sharpness

1. Controller

The controller for data processing on this website is:

Sharpness Solutions GmbH
Edewechter Landstraße 161
26131 Oldenburg, Germany
info(at)sharpness.de
+49 (0) 441 21 21 63 0

The competent supervisory authority is the State Commissioner for Data Protection of Lower Saxony (Die Landesbeauftragte für den Datenschutz Niedersachsen), Prinzenstraße 5, 30159 Hannover, Germany.

2. Collection and processing of personal data

We take the protection of your data seriously. We treat your personal data as confidential and in line with the statutory data protection rules and this privacy policy.

a) Server log files

Each time our website is accessed, the web server automatically records data in server log files. Your browser transmits this data to us. It includes:

• browser type and browser version
• operating system used
• referrer URL (the page visited before)
• host name of the accessing computer
• time of the server request
• IP address

We do not evaluate this data on a personal basis and do not merge it with other data sources. The data is recorded on the basis of Art. 6(1)(f) GDPR (legitimate interest), in order to ensure the technical function and security of the website. Log files are deleted after 14 days at the latest, unless they are needed to investigate a specific security incident.

b) Enquiry form and email contact

If you contact us through the enquiry form or by email, we store the details you provide (name, email address, telephone number, company, your request including optional details such as website, time frame or budget) in order to handle your enquiry and to answer any follow-up questions. This data is processed on the basis of your consent (Art. 6(1)(a) GDPR) or in order to take steps prior to entering into a contract (Art. 6(1)(b) GDPR). You can withdraw a consent you have given at any time, with effect for the future (Art. 7(3) GDPR). This does not affect the lawfulness of the processing carried out up to that point.

We delete enquiry data as soon as it is no longer needed for handling the enquiry — usually after six months where no contract is concluded. Statutory retention periods, in particular under commercial and tax law, remain unaffected.

Your data is received only by the staff responsible for handling it (every form email also goes in copy to the management) and by technical service providers who support us as processors under Art. 28 GDPR — in particular for hosting and email delivery. It is not passed on for any other purpose.

c) Support tickets

Through the support form you can report faults and requests concerning existing projects. We process your company name, contact person, telephone number, email address, optionally your customer number, the project or domain concerned, details of an existing service level agreement, your message and any files you choose to attach (screenshots, PDF, text and log files, ZIP). The ticket is stored in our ticket database and sent by email to our support team; you receive a confirmation of receipt with a ticket number at the address given. The legal basis is Art. 6(1)(b) GDPR (performance of a contract or steps prior to entering into a contract). We delete tickets and attachments twelve months after the matter is closed, unless statutory retention obligations or an ongoing contractual relationship require otherwise.

d) Job applications

If you apply through our application form or by email to bewerbung@sharpness.de, we process your details (name, contact details, position, earliest start date, your message) and the documents you send (CV, certificates, work samples) solely for the purpose of the application procedure. The legal basis is Section 26(1) of the German Federal Data Protection Act (BDSG) in conjunction with Art. 88 GDPR; for voluntary information beyond the procedure, Art. 6(1)(a) GDPR. The details are stored in our applicant database (the documents themselves only as file names); the documents are sent by email to the people responsible for the selection. You receive a confirmation of receipt at the address given. If no employment relationship is concluded, we delete your data no later than six months after the procedure has ended, unless you have consented to longer storage or we need the data to defend against claims (for example under the German General Equal Treatment Act). If you are hired, the data is transferred to your personnel file. Please note: email is not end-to-end encrypted; particularly sensitive details are better sent through the form.

e) Storage of enquiries in our customer management system

Entries from our forms (enquiry, support, application) are stored in a database on our servers in addition to being sent by email, so that enquiries can be handled reliably even if an email is lost. Only authorised staff have access; access and changes are logged. The retention periods are those stated above.

f) Hosting

This website and its databases run on servers we operate ourselves in the data centre of Hetzner Online GmbH, Industriestraße 25, 91710 Gunzenhausen, Germany (Falkenstein site). Hetzner provides the infrastructure only; a data processing agreement under Art. 28 GDPR is in place. Hosting does not involve any transfer to third countries.

g) Spam protection of our forms with Cloudflare Turnstile

To protect our forms against automated submissions we use Cloudflare Turnstile, a service of Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA (for the EEA: Cloudflare Germany GmbH, Rosental 7, 80331 Munich, Germany). Turnstile replaces classic captchas: it shows no picture puzzles and sets no cookies for advertising or tracking purposes.

• Scope of processing: the Turnstile script is only loaded when a form appears in your viewport or when you start filling it in — not when the page is merely opened. Your IP address, browser and device details and interaction characteristics are transmitted to Cloudflare in order to assess whether the input comes from a human. We verify the result on our server before a form is processed.
• Legal basis: the processing is based on our legitimate interest in preventing spam and abusive submissions (Art. 6(1)(f) GDPR). Access to your device is necessary to provide the service you have requested — sending the form (Section 25(2) no. 2 TDDDG, German Telecommunications Digital Services Data Protection Act).
• Transfer to third countries: Cloudflare, Inc. is certified under the EU-US Data Privacy Framework; standard contractual clauses apply in addition. A data processing agreement under Art. 28 GDPR is in place with Cloudflare.
• Further information: Cloudflare privacy policy.

h) Google Tag Manager and Google Analytics 4

This website uses Google Tag Manager provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The tag manager itself does not create user profiles. It manages the service integrated through it: Google Analytics 4 for audience measurement. We do not use advertising tags.

• Consent as the legal basis: the tag manager is only loaded after your explicit consent. Until then, no connection to Google servers is established and none of your data is transmitted. The legal basis is your consent under Art. 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG (German Telecommunications Digital Services Data Protection Act).
• Data processed: when it loads, your IP address, browser and device details and information about your use of this website are transmitted to Google. A transfer to the USA cannot be ruled out. Google LLC is certified under the EU-US Data Privacy Framework, which the European Commission recognised in its adequacy decision of 10 July 2023.
• Google Analytics 4: after your consent, Google Analytics uses cookies or comparable identifiers (including _ga and _ga_*, lifetime up to two years) to measure which pages are viewed, where visitors come from and which actions they take (for example sending a form). Google Analytics 4 does not store IP addresses; the approximate location is derived from the IP address, which is then discarded. Usage data is retained by Google for a maximum of 14 months. We do not use Google Signals, advertising features or a link to Google Ads.
• Consent Mode: we use Google Consent Mode version 2. All consent signals are set to "denied" by default. After your consent, only the signals for statistics and functionality are set to "granted"; the advertising signals remain permanently "denied".
• How long we remember your choice: whether you accepted or declined is kept for twelve months in your browser's local storage; after that we ask again.
• Withdrawal of consent: you can withdraw your consent at any time, with effect for the future — using the Cookie settings link in the footer of every page. Cookies that have already been set are not affected; you can delete them in your browser settings.
• Further information: Google privacy policy.

i) Local storage in your browser (no tracking)

In your browser's local storage (localStorage) we keep only technically necessary settings without any personal reference: your choice in the cookie notice, the selected light or dark display, the chosen background effect and whether the technology ticker is paused. These entries are not transmitted to us and are permitted without consent under Section 25(2) no. 2 TDDDG. You can delete them at any time in your browser settings.

j) Security and error logs

To prevent abuse and to analyse errors we keep server-side logs: failed spam-protection checks (without IP address), browser reports of violations of our Content Security Policy (page address and blocked resource, without IP address or browser identifier) and web server error logs, which may contain the IP address in the case of suspicious form access. The legal basis is Art. 6(1)(f) GDPR (security of our systems). The logs are deleted after 14 days at the latest.

3. Your rights as a data subject

With regard to the personal data concerning you, you have the right to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20), as well as the right to withdraw a consent you have given at any time with effect for the future (Art. 7(3)).

Right to object (Art. 21 GDPR): where we process your data on the basis of Art. 6(1)(f) GDPR, you have the right to object at any time, on grounds relating to your particular situation. We will then no longer process the data unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms.

You also have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR). The authority responsible for us: Die Landesbeauftragte für den Datenschutz Niedersachsen (State Commissioner for Data Protection of Lower Saxony), Prinzenstraße 5, 30159 Hannover, Germany, telephone +49 511 120-4500, poststelle@lfd.niedersachsen.de, lfd.niedersachsen.de.

To exercise your rights, contact info@sharpness.de or write to the postal address given above.

4. Objection to advertising emails

We hereby object to any use of the contact details published in our legal notice for sending advertising or information material that we have not expressly requested. The operators of this website expressly reserve the right to take legal action if unsolicited advertising is sent, for example by spam email.

Last updated: 19 October 2026. We update this policy whenever the processing changes.