PRIVACY

Privacy notice

1. Controller and contact

Email: [email protected]

2. Website and hosting

This static website is hosted on Cloudflare Pages, provided by Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA. Delivery and security require technical connection data, such as IP address, time, requested URL, browser details and referrer. The legal basis is our legitimate interest in a secure, available website under Article 6(1)(f) GDPR.

Cloudflare operates globally, including outside the EU and EEA. Where required, contractual transfer arrangements provide for standard contractual clauses and supplementary safeguards. Details: Cloudflare Privacy Policy and Cloudflare Data Processing Addendum.

We keep no separate copies of visitor access logs and do not individually track visitors. The hosting provider handles technical security and operational data according to purpose-based retention criteria, including delivery, abuse prevention and legal obligations. There is no single deletion period for all provider data.

3. Contact by email

The contact function opens your email application with a prepared message. The website does not transmit or store the details entered there. We receive your enquiry only when you send the email yourself. We then process your sender address, message and any further information you provide voluntarily. Please send only information needed for your enquiry.

Enquiries about possible cooperation are handled under Article 6(1)(b) GDPR; for other enquiries, responding is our legitimate interest under Article 6(1)(f) GDPR. We use Microsoft 365 for email communication under the associated contractual data protection terms: Microsoft Data Protection Addendum.

We delete completed enquiries once the details are no longer needed for handling the enquiry or follow-up questions, unless statutory retention duties or legitimate claims require further retention. Contractual and billing correspondence is retained according to applicable duties. The sandbox ten-minute period does not apply to email.

4. Sandbox: your own ten-minute session

The sandbox includes fictional examples and allows additional test records and test documents. Please do not use real, personal or confidential data. Entries remain exclusively in the volatile memory of the isolated browser frame. They are not transmitted to our servers, other sessions or Microsoft 365, and are not stored in a database. Email delivery, sign-in and calendar connections are not real in this demo.

The session ends ten minutes after you explicitly start it. The embedded application frame and its data are then discarded. Reloading, leaving or closing also ends the session. If the browser or device is suspended, cleanup occurs when it resumes and further interaction with the expired session is blocked. The website cannot delete files already downloaded to your device.

Local processing provides the demonstration you requested under Article 6(1)(f) GDPR. Customers run the CF365 application separately in their own environment; that processing and any support access are outside the scope of this website sandbox.

5. Cookies, language and external content

Our website code uses no analytics or advertising cookies. It embeds no videos, maps or social media widgets and loads no external fonts. The language follows your browser setting; a manual choice is passed in the page address without storing a persistent language identifier.

The explicitly requested sandbox requires volatile session memory. Essential hosting security functions may also process information in the browser when needed. Access strictly necessary to provide the service is based on section 25(2) of the German TDDDG; no additional tracking features are built in.

6. Your rights

Subject to the applicable legal requirements, you have rights of access, rectification, erasure, restriction and data portability. Where processing relies on legitimate interests, you may object on grounds relating to your particular situation. Any consent given may be withdrawn with effect for the future. You may complain to a data protection supervisory authority.

For privacy enquiries, contact [email protected].

Last updated: 25 October 2026