Privacy policy

Controller

Technology Return Advisory GmbH, Schauenburgerstr. 10, 20095 Hamburg, Germany. Email: office (at) technology-return.com, phone: +49 (0)40-303​ 752​ 918.

Data processed when visiting the website

When you access our website, the browser transmits data that is stored temporarily in server log files: IP address, date and time of the request, page accessed, referrer URL, browser and operating system.

This processing serves the technical operation and security of the website. Legal basis: Art. 6 (1) (f) GDPR. Log data is deleted after seven days at the latest.

Hosting

This site is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. On each request Vercel processes the connection data delivery requires, in particular the IP address.

A data processing agreement under Art. 28 GDPR is in place with Vercel. Transfers to the United States rest on the European Commission standard contractual clauses and on Vercel certification under the EU-US Data Privacy Framework. Legal basis: Art. 6(1)(f) GDPR.

Encryption and fonts

The site is served over an encrypted connection (TLS) and nothing else. You can see it in the padlock in the address bar of your browser.

Every font is stored on our own server and loaded from there. Your browser opens no connection to Google Fonts or any other provider, so no data reaches one either.

Cookies and consent

We use technically necessary cookies to operate the website. Optional cookies, in particular for analytics, are only set once you have given consent via the cookie banner. Legal basis: § 25 (1) TDDDG and Art. 6 (1) (a) GDPR.

You can change or withdraw your decision at any time via the cookie settings in the footer.

Google Analytics

With your consent we use Google Analytics 4, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. It tells us which pages get read and where visitors leave, so that we can improve the site.

The legal basis is your consent under Art. 6(1)(a) GDPR and § 25(1) TDDDG. Without it Google Analytics is not loaded at all: no script is requested from Google and no cookie is set.

Once you have consented, Google Analytics sets the cookies _ga and _ga_G40NJ3W7RV to recognise returning visits. Both expire after 24 months. What is recorded includes the pages you open, how long you stay, an approximate location, device type, browser and the page you arrived from.

Google Analytics 4 does not store IP addresses. The address is used for coarse geolocation and then discarded. A transfer to Google LLC in the United States can still take place. Google LLC is certified under the EU-US Data Privacy Framework, and standard contractual clauses under Art. 46 GDPR are in place in addition.

You can withdraw your consent at any time with effect for the future, through the cookie settings in the footer of this page. On withdrawal we stop the collection and delete the analytics cookies that were set. You can also install Google's browser add-on to opt out of Google Analytics.

Contact form and email

If you contact us, we process the details you provide in order to answer your inquiry. Legal basis: Art. 6 (1) (b) and (f) GDPR. The data is deleted once the inquiry has been dealt with and no retention obligations apply.

Bot protection (Vercel BotID)

To protect our forms against automated abuse we use Vercel BotID, a service of Vercel Inc. When you submit a form, technical signals about the browser session are evaluated in order to distinguish human submissions from automated ones.

Legal basis: Art. 6 (1) (f) GDPR, our legitimate interest in the security and availability of the website. Further information: vercel.com/docs/botid.

Email delivery

Messages from the contact form are delivered through Resend, a service of Resend Inc., 2261 Market Street, San Francisco, CA 94114, USA. The details you enter are transmitted for that purpose.

A data processing agreement under Art. 28 GDPR is in place here too, and the standard contractual clauses cover the transfer to the United States. Legal basis: Art. 6(1)(b) and (f) GDPR.

Protection against misuse

To keep automated bulk inquiries out, we limit how many form submissions one connection can make. Your IP address is held in memory for a few minutes for that purpose and then discarded.

Legal basis: Art. 6(1)(f) GDPR, our legitimate interest in the site running undisturbed.

Processors and recipients

We use service providers for hosting (Vercel), email delivery (Resend), bot protection (Vercel) and, with your consent, analytics (Google). These providers process data exclusively on our instructions on the basis of data processing agreements pursuant to Art. 28 GDPR.

Retention

We store personal data only for as long as is necessary for the respective purpose or as required by statutory retention obligations, in particular commercial and tax law.

Your rights

You have the right to information, rectification, erasure, restriction of processing, data portability and to object to processing based on legitimate interests. Consent given can be withdrawn at any time with effect for the future.

Right to lodge a complaint

You have the right to lodge a complaint with a supervisory authority, for example the Hamburg Commissioner for Data Protection and Freedom of Information.

Changes to this policy

We adapt this privacy policy when we change our website or the legal situation requires it. The current version applies.