White Crane Labs
Privacy
In preparation
Draft based on the intended use of Cloudflare and Google Workspace. The address, service settings, data processing arrangements, possible international transfers and retention rules must be finalized before publication. Open items are marked below.
This page is not yet ready for publication.
Controller and contact
White Crane Labs UG (haftungsbeschränkt) i. G.
Representatives: Simon Sorgenfrei, Dennis Kirsch
[Street, house number, postal code, city and country to be added.]Hosting and access data
We use Cloudflare to host and deliver this website. Requests involve processing technical connection data, particularly IP addresses, requested URLs, request times, and browser and device information transmitted with the request. This processing serves to deliver the website and protect it against disruption and attacks.
The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is the secure, reliable operation of our website. Fonts and images are delivered together with the website; no external font providers are embedded.
[Confirm the Cloudflare product and contracting entity, enabled security/analytics features, any additional cookies, and the types and retention periods of logs against the actual configuration.]
Email enquiries
We use Gmail within our Google Workspace organization for business email. When you contact us, we process your email address, your name and any other contact details you provide, and the contents of your message and attachments to handle your enquiry.
Where your enquiry concerns a contract with you or steps taken at your request before entering into a contract, the legal basis is Article 6(1)(b) GDPR. For enquiries from company representatives or other business enquiries, we rely on Article 6(1)(f) GDPR, with the legitimate interest of handling business communications. Providing information is voluntary, but we need a suitable contact channel and information about your enquiry to respond.
Appointment booking and video calls
Our booking link leads to an external Google Calendar booking page. No Google calendar is embedded on this website. You only access the Google page when you follow the link. We process the contact and appointment details you provide within our Google Workspace organization to arrange the conversation.
A call using Google Meet also involves processing technical connection data and the audio, video and any chat or screen content you choose to share. Depending on the enquiry, scheduling and conducting the conversation is based on Article 6(1)(b) GDPR or Article 6(1)(f) GDPR, with the interest of communicating with business contacts. You can alternatively contact us by email.
Recordings, transcription, AI notes and additional CRM tools are not currently planned. If we introduce such features or services, we will explain their scope and legal basis before the relevant processing and obtain consent where required.
[Verify the booking form requirements and the Meet features actually enabled before publication.]
Language detection and preference cookie
When you visit our general entry URL, we select German or English using the language preferences supplied by your browser. Detection alone does not save a preference. When you explicitly use the language switcher, we set the wcl-language cookie to de or en. It remembers only your language choice and contains no individual user identifier.
The cookie is stored on our domain for 180 days. Its lifetime is renewed only when you explicitly select a language again. It supports your chosen language function; Section 25(2)(2) TDDDG is the intended basis for storage. You can delete or block it in your browser cookie settings. Both language pages remain directly accessible. To the extent personal data is processed, the basis is Article 6(1)(f) GDPR, with the interest of providing your requested language preference.
External links and analytics
Our LinkedIn links are ordinary links, not embedded social media plugins. The external platform is accessed only when you open its link. Its own privacy information also applies to processing on that platform.
Our website code contains no analytics or advertising trackers. Features enabled at the hosting level will be reviewed separately before publication and described here where applicable.
Service providers and international processing
We use Cloudflare and Google Workspace for the purposes described above. These providers may engage further providers. The Europe data region is configured for our Google Workspace users. Depending on the Workspace edition, this policy covers specified services, data types and data states. It does not guarantee that all data and access remain within Europe. Processing locations at Cloudflare also depend on the services and settings used.
Processing outside the European Economic Area therefore cannot be ruled out categorically. The actual recipients, data processing agreements and any applicable transfer mechanisms will be specified based on our contracts and configuration. Depending on the circumstances, mechanisms may include an applicable adequacy decision or standard contractual clauses with additional safeguards where required.
[Verify both providers’ contracting entities and data processing agreements; document the Workspace edition and exact scope of the enabled Europe policy. Specify the applicable international transfer safeguards and how to obtain a copy.]
Retention periods
Enquiries and appointment details are needed only for as long as required to handle the matter, maintain the subsequent business relationship or meet statutory retention obligations. Where information is needed to establish or defend legal claims, this must be considered separately in the retention rules. The language cookie has the 180-day lifetime described above.
Specific deletion rules for unsuccessful enquiries, calendar data, hosting logs and any call records still need to be defined and aligned with the settings of the services used.
[Add the actual retention periods or clear deletion criteria, including backups and Google Vault if applicable; do not apply one blanket period to all data.]
Your rights
Subject to the applicable legal conditions, you have rights of access, rectification, erasure, restriction of processing and data portability. Where processing relies on consent, you may withdraw it for the future. For processing based on Article 6(1)(f) GDPR, you may object on grounds relating to your particular situation. Please use the contact details above to exercise your rights.
You may also lodge a complaint with a data protection supervisory authority, particularly in the place of your habitual residence, place of work or the alleged infringement. Providing contact information is generally voluntary; without the necessary details, we may be unable to handle your enquiry or booking.