PRIVACY POLICY

  • Home
  • Privacy Policy

Privacy Policy

Last updated: May 2026

1. Data Controller

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

ThreeB IT GmbH
Bergstrang 105
49479 Ibbenbüren, Germany
Phone: +49 (5451) 893922-0
Email: hello@threebit.io

2. Types of Data Collected

We process the following categories of personal data:

  • Technical data: IP address, browser type and version, operating system, referrer URL, hostname of the accessing device, and time of server request.
  • Contact form data: Name, email address, phone number (optional), subject and message content when you contact us via the contact form.
  • Communication data: Data you provide by email or telephone.

3. Purpose of Processing

Your data is processed for the following purposes:

  • Providing and operating this website
  • Responding to your inquiries and communicating with you
  • Improving our services and website operation
  • Fulfilling legal obligations

4. Legal Basis (GDPR)

The processing of your personal data is based on the following legal bases of the GDPR:

  • Art. 6(1)(a) GDPR – Consent (e.g. for optional services)
  • Art. 6(1)(b) GDPR – Performance of a contract or pre-contractual measures
  • Art. 6(1)(c) GDPR – Compliance with a legal obligation
  • Art. 6(1)(f) GDPR – Legitimate interests (e.g. secure operation of this website)

5. Hosting

This website is hosted on servers of a German hosting provider. Technical connection data is processed on the basis of our legitimate interest in the secure and stable operation of the website (Art. 6(1)(f) GDPR). This data is automatically deleted after a maximum of 7 days.

6. Contact Form

If you send us a request via the contact form, your details from the inquiry form, including the contact information you provided, will be stored for the purpose of processing the request and in case of follow-up questions. We do not share this data without your consent. Processing is based on Art. 6(1)(b) GDPR (pre-contractual measures) or Art. 6(1)(f) GDPR (legitimate interest in responding to inquiries).

7. Cookies and Consent Management

This website uses technically necessary cookies required for the operation of the website. These cookies do not store personal data and are deleted at the end of the browser session. Analytical or marketing cookies are only set with your explicit consent (Art. 6(1)(a) GDPR, § 25(1) TTDSG).

We use the CookieYes consent management service to manage your consent. On your first visit, a consent banner is displayed in which you can choose which cookie categories you wish to allow. Your selection is stored in a cookie on your device so that the banner does not reappear on subsequent visits. You can revoke or change your consent at any time via the consent manager. Provider: CookieYes Limited, 3 Warren Yard, Wolverton Mill, Milton Keynes, England, MK12 5NW, United Kingdom. Privacy policy: cookieyes.com/privacy-policy.

8. Third-Party Services

We use the following third-party services. Analytics services are loaded only after you grant consent via the consent manager described above:

  • Google Analytics 4 (measurement ID: G-Y3ZWG7VDBR, optional): For statistical analysis of website usage. Only used with your consent (Art. 6(1)(a) GDPR). GA4's built-in IP anonymisation is applied. Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Privacy policy: policies.google.com/privacy. Note: Data may be transferred to the United States, where access by US authorities cannot be excluded; transfers are made on the basis of the EU Standard Contractual Clauses.
  • Microsoft Clarity (project ID: ww99ssas7o, optional): For analysing user interaction through aggregated click, scroll, and movement data, including session recordings (heatmaps and session replays). Only used with your consent (Art. 6(1)(a) GDPR). Sensitive input fields are automatically masked. Provider: Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. Privacy policy: privacy.microsoft.com.
  • OpenStreetMap: For map display on the contact page. Provider: OpenStreetMap Foundation, St John's Innovation Centre, Cowley Road, Cambridge, CB4 0WS, United Kingdom. Privacy policy: osmfoundation.org.

9. Your Rights

As a data subject, you have the following rights:

  • Right of access (Art. 15 GDPR): Right to obtain information about the personal data we hold about you.
  • Right to rectification (Art. 16 GDPR): Right to correct inaccurate data.
  • Right to erasure (Art. 17 GDPR): Right to have your data deleted.
  • Right to restriction (Art. 18 GDPR): Right to restrict processing.
  • Right to object (Art. 21 GDPR): Right to object to processing.
  • Data portability (Art. 20 GDPR): Right to receive your data in a structured, machine-readable format.
  • Right to lodge a complaint: You have the right to lodge a complaint with the competent supervisory authority (State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia).

To exercise your rights, please contact us at: hello@threebit.io

10. Data Retention

Personal data is stored only for as long as necessary for the respective purposes or as required by statutory retention periods. Contact requests will be deleted after full processing and conclusion of communication, unless a legal retention obligation applies.