Privacy Policy

1. Data Protection at a Glance

General Information

The following notices provide a simple overview of what happens to
your personal data when you visit this website. Personal data is any
data that can be used to personally identify you. For detailed
information on the subject of data protection, please refer to our
privacy policy set out below.

Data Collection on This
Website

Who is responsible for data collection on this
website?

Data processing on this website is carried out by the website
operator. You can find the operator’s contact details in the section
“Controller” in this privacy policy.

How do we collect your data?

Your data is collected, on the one hand, when you provide it to us.
This may include, for example, data you enter into a contact form.

Other data is collected automatically or with your consent by our IT
systems when you visit the website. This is primarily technical data
(e.g., internet browser, operating system, or time of page access). This
data is collected automatically as soon as you enter this website.

What do we use your data for?

Some of the data is collected to ensure the error-free provision of
the website. Other data may be used to analyze your user behavior. Where
contracts can be concluded or initiated via the website, the data
transmitted is also processed for contract offers, orders, or other
inquiries.

What rights do you have regarding your data?

You have the right at any time to obtain information free of charge
about the origin, recipients, and purpose of your stored personal data.
You also have the right to request the rectification or erasure of this
data. If you have given your consent to data processing, you may revoke
this consent at any time with effect for the future. You also have the
right, under certain circumstances, to request the restriction of the
processing of your personal data. Furthermore, you have the right to
lodge a complaint with the competent supervisory authority.

You may contact us at any time regarding this or any other questions
on the subject of data protection.


2. Controller

The controller responsible for data processing on this website
is:

TAK Hub e.K. Owner: Marcel Neuroth Dierath 66 51399
Burscheid

Phone: +49 (0) 152 238 592 34 Email: info@takhub.de

Commercial Register: HRA 37764, District Court of Cologne VAT ID:
DE449898038

The controller decides alone or jointly with others on the purposes
and means of the processing of personal data (e.g., names, email
addresses, etc.).

Data Protection Officer

We are not legally obligated to appoint a data protection officer, as
fewer than 20 persons in our company are permanently engaged in the
automated processing of personal data (Section 38(1) of the German
Federal Data Protection Act (BDSG)).

For questions regarding data protection, please contact the owner
directly:

Marcel Neuroth Email: info@takhub.de Phone: +49 (0) 152 238 592
34


3. General
Information and Mandatory Disclosures

Notice Regarding the
Controller

The controller responsible for data processing on this website is
indicated in Section 2.

Where we obtain the consent of the data subject for processing
operations involving personal data, Art. 6(1)(a) of the EU General Data
Protection Regulation (GDPR) serves as the legal basis for the
processing of personal data.

For the processing of personal data necessary for the performance of
a contract to which the data subject is a party, Art. 6(1)(b) GDPR
serves as the legal basis. This also applies to processing operations
necessary for the performance of pre-contractual measures.

Where processing of personal data is necessary for compliance with a
legal obligation to which our company is subject, Art. 6(1)(c) GDPR
serves as the legal basis.

Where processing is necessary for the purposes of the legitimate
interests pursued by our company or by a third party, and the interests
or fundamental rights and freedoms of the data subject do not override
those interests, Art. 6(1)(f) GDPR serves as the legal basis for
processing.

Storage Duration

Unless a more specific storage period has been stated within this
privacy policy, your personal data will remain with us until the purpose
for data processing ceases to apply. If you assert a legitimate request
for erasure or revoke your consent to data processing, your data will be
erased unless we have other legally permissible grounds for storing your
personal data (e.g., retention periods under tax or commercial law). In
the latter case, erasure will take place after these grounds cease to
apply.

If you have consented to data processing, we process your personal
data on the basis of Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR, insofar as
special categories of data within the meaning of Art. 9(1) GDPR are
processed. In the case of explicit consent to the transfer of personal
data to third countries, data processing is also carried out on the
basis of Art. 49(1)(a) GDPR. If you have consented to the storage of
cookies or to access to information on your terminal device (e.g., via
device fingerprinting), data processing is additionally carried out on
the basis of Section 25(1) of the German Telecommunications Digital
Services Data Protection Act (TDDDG). Consent may be revoked at any
time.

Recipients of Personal Data

In the course of our business activities, we work with various
external parties. In some cases, this requires the transfer of personal
data to these external parties. We only disclose personal data to
external parties where this is necessary for the performance of a
contract, where we are legally obligated to do so (e.g., disclosure of
data to tax authorities), where we have a legitimate interest pursuant
to Art. 6(1)(f) GDPR in the disclosure, or where another legal basis
permits the data transfer.

When using processors, we only disclose personal data of our
customers on the basis of a valid data processing agreement (DPA). In
the case of joint processing, a joint processing agreement is
concluded.

An overview of our processors:

Transfer of Data to Third
Countries

Where we process data in a third country (i.e., outside the European
Union, the European Economic Area, or Switzerland), or where such
processing takes place in the context of using third-party services or
the disclosure or transfer of data to third parties, this is only done
in compliance with the applicable legal requirements.

For transfers to the USA (HubSpot, Stripe), we rely on the adequacy
decision of the European Commission pursuant to Art. 45 GDPR under the
EU-US Data Privacy Framework (DPF). Both HubSpot,
Inc. and Stripe, Inc. are certified under the DPF with the U.S.
Department of Commerce.

The transfer to Lithuania (Hostinger) takes place within the EU/EEA
and does not require any additional safeguards.

In the absence of an adequacy decision, we rely on Standard
Contractual Clauses (SCCs) pursuant to Art. 46(2)(c) GDPR as a
safeguard.

Many data processing operations are only possible with your express
consent. You may revoke consent that has already been given at any time.
The lawfulness of the data processing carried out prior to revocation
remains unaffected by the revocation.

Right
to Object to Data Collection in Specific Cases and to Direct Marketing
(Art. 21 GDPR)

WHERE DATA PROCESSING IS BASED ON ART. 6(1)(E) OR (F) GDPR,
YOU HAVE THE RIGHT TO OBJECT AT ANY TIME, ON GROUNDS RELATING TO YOUR
PARTICULAR SITUATION, TO THE PROCESSING OF YOUR PERSONAL DATA; THIS ALSO
APPLIES TO PROFILING BASED ON THOSE PROVISIONS. THE RESPECTIVE LEGAL
BASIS ON WHICH PROCESSING IS BASED CAN BE FOUND IN THIS PRIVACY
POLICY.

IF YOU OBJECT, WE WILL NO LONGER PROCESS YOUR AFFECTED
PERSONAL DATA UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS
FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, RIGHTS, AND FREEDOMS,
OR THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE, OR DEFENSE OF
LEGAL CLAIMS (OBJECTION PURSUANT TO ART. 21(1) GDPR).

WHERE YOUR PERSONAL DATA IS PROCESSED FOR THE PURPOSE OF
DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE
PROCESSING OF YOUR PERSONAL DATA FOR THE PURPOSE OF SUCH MARKETING; THIS
ALSO APPLIES TO PROFILING INSOFAR AS IT IS RELATED TO SUCH DIRECT
MARKETING (OBJECTION PURSUANT TO ART. 21(2) GDPR).

Right
to Lodge a Complaint with the Competent Supervisory Authority

In the event of violations of the GDPR, data subjects have the right
to lodge a complaint with a supervisory authority, in particular in the
Member State of their habitual residence, their place of work, or the
place of the alleged infringement. This right to lodge a complaint is
without prejudice to any other administrative or judicial remedy.

The competent supervisory authority for us is:

Landesbeauftragte für Datenschutz und Informationsfreiheit
Nordrhein-Westfalen (LDI NRW)
(State Commissioner for Data
Protection and Freedom of Information North Rhine-Westphalia) Postfach
20 04 44 40102 Düsseldorf Kavalleriestraße 2-4 40213 Düsseldorf

Phone: +49 (0) 211 / 38424 – 0 Fax: +49 (0) 211 / 38424 – 999 Email:
poststelle@ldi.nrw.de Website: https://www.ldi.nrw.de

SSL/TLS Encryption

This website uses SSL/TLS encryption for security reasons and to
protect the transmission of confidential content, such as inquiries you
send to us as the website operator. You can recognize an encrypted
connection by the browser’s address bar changing from “http://” to
“https://” and by the lock icon in your browser bar.

When SSL/TLS encryption is activated, the data you transmit to us
cannot be read by third parties.


4. Rights of the Data Subject

As a data subject, you have the following rights:

Right of Access (Art. 15
GDPR)

You have the right to obtain confirmation from us as to whether
personal data concerning you is being processed by us. If this is the
case, you have the right of access to such personal data and to the
following information: the purposes of processing, the categories of
personal data being processed, the recipients or categories of
recipients, the envisaged storage period, the existence of a right to
rectification or erasure, the origin of the data, and the existence of
automated decision-making including profiling.

Right to Rectification
(Art. 16 GDPR)

You have the right to obtain without undue delay the rectification of
inaccurate personal data concerning you. Taking into account the
purposes of the processing, you have the right to have incomplete
personal data completed.

Right to
Erasure / “Right to Be Forgotten” (Art. 17 GDPR)

You have the right to obtain from us the erasure of personal data
concerning you without undue delay. We are obligated to erase personal
data without undue delay where one of the following grounds applies: the
data is no longer necessary for the purposes for which it was collected;
you withdraw your consent and there is no other legal basis for the
processing; you object to the processing; the data has been unlawfully
processed; erasure is required for compliance with a legal
obligation.

The right to erasure does not apply where processing is necessary for
compliance with a legal obligation, for the establishment, exercise, or
defense of legal claims, or for reasons of public interest.

Right to
Restriction of Processing (Art. 18 GDPR)

You have the right to request the restriction of processing where one
of the following conditions is met: the accuracy of the personal data is
contested by you; the processing is unlawful and you oppose erasure; we
no longer need the data, but you require it for the establishment,
exercise, or defense of legal claims; you have objected to the
processing and it has not yet been determined whether our legitimate
grounds override yours.

Right to Data
Portability (Art. 20 GDPR)

You have the right to receive the personal data concerning you, which
you have provided to us, in a structured, commonly used, and
machine-readable format. You also have the right to transmit this data
to another controller without hindrance, where the processing is based
on consent or a contract and is carried out by automated means.

Right to Object (Art. 21
GDPR)

You have the right to object at any time, on grounds relating to your
particular situation, to the processing of personal data concerning you
which is based on Art. 6(1)(e) or (f) GDPR. We will then no longer
process the personal data unless we can demonstrate compelling
legitimate grounds for the processing which override your interests,
rights, and freedoms.

You have the right to withdraw consent given for the processing of
data at any time with effect for the future. The withdrawal of consent
does not affect the lawfulness of processing based on consent before its
withdrawal.

Right
to Lodge a Complaint with a Supervisory Authority (Art. 77 GDPR)

Without prejudice to any other administrative or judicial remedy, you
have the right to lodge a complaint with a supervisory authority if you
believe that the processing of personal data concerning you infringes
the GDPR. The competent supervisory authority for us is the LDI NRW (see
Section 3).


5. Data Collection on This
Website

Server Log Files

The provider of these pages automatically collects and stores
information in so-called server log files, which your browser
automatically transmits to us. These are:

This data is not merged with other data sources.

The collection of this data is based on Art. 6(1)(f)
GDPR
. The website operator has a legitimate interest in the
technically error-free presentation and optimization of its website —
for this purpose, server log files must be collected.

Storage duration: Server log files are automatically
deleted after no more than 30 days.

Cookies

Our websites use so-called “cookies.” Cookies are small data packets
that do not cause any damage to your terminal device. They are stored
either temporarily for the duration of a session (session cookies) or
permanently (persistent cookies) on your terminal device. Session
cookies are automatically deleted at the end of your visit. Persistent
cookies remain stored on your terminal device until you delete them
yourself or they are automatically deleted by your web browser.

Cookies may originate from us (first-party cookies) or from
third-party companies (so-called third-party cookies). Third-party
cookies enable the integration of certain services from third-party
companies within websites (e.g., cookies for processing payment
services).

Technically necessary cookies are stored on the
basis of Art. 6(1)(f) GDPR and Section 25(2)
TDDDG
. The website operator has a legitimate interest in the
storage of technically necessary cookies for the technically error-free
and optimized provision of its services. These include in
particular:

Non-technically necessary cookies (e.g., cookies for
analyzing your browsing behavior) are only set if you have given your
consent (Art. 6(1)(a) GDPR and Section 25(1)
TDDDG
). Consent may be revoked at any time.

You can configure your browser to inform you about the setting of
cookies, to allow cookies only on a case-by-case basis, to exclude the
acceptance of cookies for certain cases or in general, and to activate
the automatic deletion of cookies when closing the browser. If cookies
are deactivated, the functionality of this website may be limited.

Our website uses the cookie consent technology of
Complianz to obtain your consent to the storage of
certain cookies on your terminal device or to the use of certain
technologies and to document this in a data-protection-compliant
manner.

When entering the website, a cookie banner is displayed in which you
can grant or refuse your consent for various cookie categories
(Functional, Preferences, Statistics, Marketing). Your settings are
stored in a cookie on your terminal device.

The data obtained in this way is stored until you request erasure,
delete the Complianz cookie yourself, or the purpose for data storage
ceases to apply. Mandatory statutory retention obligations remain
unaffected.

Legal basis: Art. 6(1)(c) GDPR (legal obligation to
obtain and provide evidence of consent) and Section 25
TDDDG
.

Contact Form

If you send us inquiries via the contact form, your details from the
inquiry form, including the contact data you provide there, will be
stored by us for the purpose of processing the inquiry and in the event
of follow-up questions. We will not share this data without your
consent.

The processing of this data is based on Art. 6(1)(b)
GDPR
if your inquiry is related to the performance of a
contract or is necessary for the implementation of pre-contractual
measures. In all other cases, the processing is based on our legitimate
interest in the effective handling of inquiries directed to us
(Art. 6(1)(f) GDPR) or on your consent (Art.
6(1)(a) GDPR
) if such consent has been requested.

The data you enter in the contact form will remain with us until you
request erasure, revoke your consent to storage, or the purpose for data
storage ceases to apply (e.g., after your inquiry has been fully
processed). Mandatory statutory provisions — in particular retention
periods — remain unaffected.

Storage duration: Until your inquiry has been fully
processed, and thereafter for a maximum of 6 months for follow-up
purposes, unless longer retention obligations apply.

Inquiries by Email, Phone, or
Fax

If you contact us by email, phone, or fax, your inquiry, including
all resulting personal data (name, inquiry), will be stored and
processed by us for the purpose of handling your request.

The processing of this data is based on Art. 6(1)(b)
GDPR
if your inquiry is related to the performance of a
contract or is necessary for the implementation of pre-contractual
measures. In all other cases, the processing is based on our legitimate
interest in the effective handling of inquiries directed to us
(Art. 6(1)(f) GDPR) or on your consent (Art.
6(1)(a) GDPR
) if such consent has been requested.

The data you send to us via contact inquiries will remain with us
until you request erasure, revoke your consent to storage, or the
purpose for data storage ceases to apply. Mandatory statutory provisions
— in particular statutory retention periods — remain unaffected.


6. Hosting

Hostinger

We host our website with Hostinger. The provider is:

HOSTINGER operations, UAB Švitrigailos str. 34
Vilnius 03230, Lithuania

When you visit our website, your personal data is processed on
Hostinger’s servers. This may include, in particular, your IP address,
access data, and meta and communication data. This also includes
processing via the email accounts hosted with Hostinger (info@takhub.de,
marcel.neuroth@takhub.de).

Lithuania is a member state of the EU, so that data processing takes
place within the EU/EEA and no third-country transfer is involved.

The use of Hostinger is based on Art. 6(1)(f) GDPR.
We have a legitimate interest in the most reliable presentation of our
website possible. Where consent has been requested, processing is
carried out exclusively on the basis of Art. 6(1)(a) GDPR and Section
25(1) TDDDG.

We have concluded a data processing agreement (DPA) for the use of
the above-mentioned service. This is a contract required by data
protection law that ensures Hostinger processes the personal data of our
website visitors only in accordance with our instructions and in
compliance with the GDPR.

Storage duration for server logs: Maximum 30
days.


7. Payment Service Providers

Stripe

We use the payment service provider Stripe. The provider for
customers in the European area is:

Stripe Payments Europe, Limited 1 Grand Canal Street
Lower Grand Canal Dock Dublin, D02 H210, Ireland

In the context of contractual relationships (e.g., SLA recurring
billing, SEPA direct debit), your payment data (e.g., name, bank
details/IBAN, billing address, payment amount, date and time of the
transaction) is transmitted to Stripe for payment processing. Stripe
processes this data partly as an independent controller and partly as a
processor.

Stripe may transfer data to its parent company Stripe,
Inc.
in the USA. The data transfer to the USA is based on the
adequacy decision of the European Commission under the
EU-US Data Privacy Framework (DPF). Stripe, Inc. is
certified under the DPF.

For further information on data processing by Stripe, please refer to
Stripe’s privacy policy: https://stripe.com/de/privacy

The legal basis for data processing is Art. 6(1)(b)
GDPR
(performance of a contract). Where Stripe processes
additional data for its own purposes (e.g., fraud prevention), this is
done on the basis of Stripe’s legitimate interest pursuant to
Art. 6(1)(f) GDPR.

Storage duration: Stripe stores transaction data in
accordance with statutory retention obligations (generally up to 10
years) and for fraud prevention purposes.


8. CRM and Customer Management

HubSpot

We use HubSpot as our Customer Relationship Management (CRM) system.
The provider is:

HubSpot, Inc. 25 First Street Cambridge, MA 02141,
USA

HubSpot is used by us for the following purposes:

The HubSpot tracking script is deployed on our
website. With your consent (via the cookie banner), this script sets
cookies to analyze usage behavior on our website. The following data may
be collected:

Without your consent via the cookie banner, no
tracking cookies from HubSpot are set. The tracking script is
categorized under “Statistics” or “Marketing” in the cookie banner and
is only loaded after active consent.

The data transfer to the USA is based on the adequacy
decision of the European Commission
under the EU-US
Data Privacy Framework (DPF)
. HubSpot, Inc. is certified under
the DPF.

The legal basis for the use of HubSpot as a CRM is Art.
6(1)(b) GDPR
(performance of a contract or pre-contractual
measures) and Art. 6(1)(f) GDPR (legitimate interest in
efficient customer management). For tracking on the website, the legal
basis is Art. 6(1)(a) GDPR (consent) in conjunction
with Section 25(1) TDDDG.

For further information on data processing by HubSpot, please refer
to HubSpot’s privacy policy: https://legal.hubspot.com/privacy-policy

Information on the EU-US Data Privacy Framework: https://legal.hubspot.com/eu-us-dpf

Storage duration: Customer data is stored for the
duration of the business relationship and subsequently in accordance
with statutory retention periods (up to 10 years under commercial and
tax law). Tracking data is deleted after no more than 14 months.


9. Accounting and Invoicing

sevDesk

For our accounting and invoicing, we use the service sevDesk. The
provider is:

sevdesk GmbH Hauptstr. 115 77652 Offenburg,
Germany

In the context of contract processing and invoicing, the following
personal data is transmitted to and processed by sevDesk:

sevDesk processes the data as a processor on servers in Germany. We
have concluded a data processing agreement (DPA) with sevDesk.

The legal basis for data processing is Art. 6(1)(b)
GDPR
(performance of a contract) and Art. 6(1)(c)
GDPR
(compliance with legal obligations, in particular
bookkeeping and retention obligations under tax and commercial law).

For further information on data processing by sevDesk, please refer
to sevDesk’s privacy policy: https://sevdesk.de/datenschutz/

Storage duration: Invoice data and accounting
records are stored in accordance with statutory retention periods — 10
years pursuant to Section 147 of the German Fiscal Code (AO) and Section
257 of the German Commercial Code (HGB).


10. Web Analytics

Independent Analytics

For website usage analysis, we use the WordPress plugin
Independent Analytics (IAWP). Independent Analytics is
a privacy-friendly analytics solution that runs directly on our server
and does not transfer any data to third parties.

Independent Analytics collects:

No personal cookies are set for analytics purposes.
The assignment of page views to visitor sessions is performed using an
anonymized hash value. Identification of individual users is not
possible.

All data is processed exclusively on our server at Hostinger and is
not shared with third parties.

The legal basis is Art. 6(1)(f) GDPR (legitimate
interest in the statistical evaluation of user behavior for the
optimization of our website).

Storage duration: Analytics data is stored
indefinitely in aggregated, non-personal form. Raw data relating to IP
addresses is deleted after no more than 30 days.

Notice:
No Use of Google Analytics or Comparable External Tracking Services

We do not use Google Analytics, Google Tag Manager,
Facebook Pixel, Matomo (externally hosted), or any other external
analytics or advertising tracking solutions.


11. Social Media

Social Media Presences

We maintain publicly accessible profiles on social networks. The
individual social networks we use are listed below.

Social networks such as LinkedIn, Instagram, or X (formerly Twitter)
can generally analyze your user behavior extensively when you visit
their websites. Visiting our social media presences triggers numerous
data-protection-relevant processing operations. In detail:

If you are logged into your social media account and visit our social
media presence, the operator of the social media platform can associate
this visit with your user account. Your personal data may also be
collected even if you are not logged in or do not have an account with
the respective social media platform. In this case, data collection
occurs, for example, via cookies stored on your terminal device or by
recording your IP address.

With the data collected in this way, the operators of the social
media platforms can create user profiles in which your preferences and
interests are stored. In this way, interest-based advertising can be
displayed to you both within and outside the respective social media
presence. If you have an account with the respective social network, the
interest-based advertising can be displayed on all devices on which you
are or were logged in.

Please also note that we cannot track all processing operations on
the social media platforms. Depending on the provider, additional
processing operations may be carried out by the operators of the social
media platforms. Please refer to the terms of use and privacy policies
of the respective social media platforms for details.

Legal basis: Our social media presences are intended to ensure the
broadest possible presence on the internet. This constitutes a
legitimate interest within the meaning of Art. 6(1)(f)
GDPR
. The analysis processes initiated by the social networks
may be based on different legal bases, which are to be specified by the
operators of the social networks (e.g., consent within the meaning of
Art. 6(1)(a) GDPR).

Storage duration: The data collected by us via the
social media presence will be deleted as soon as you request erasure,
revoke your consent to storage, or the purpose for data storage ceases
to apply. Stored cookies remain on your terminal device until you delete
them.

LinkedIn

We have a profile on LinkedIn.

Provider: LinkedIn Ireland Unlimited Company, Wilton
Place, Dublin 2, Ireland.

Privacy policy: https://www.linkedin.com/legal/privacy-policy
Opt-out: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out

Instagram

We have a profile on Instagram.

Provider: Meta Platforms Ireland Limited, Merrion
Road, Dublin 4, D04 X2K5, Ireland.

Privacy policy: https://privacycenter.instagram.com/policy

X (formerly Twitter)

We have a profile on X (formerly Twitter).

Provider: X Corp., 1355 Market Street, Suite 900,
San Francisco, CA 94103, USA.

Privacy policy: https://x.com/de/privacy

Our website only includes links (social media icons)
to our social media profiles. These are not social media plugins that
automatically transmit data to the social networks when the page is
loaded. Data is only transferred to the social networks when you
actively click on one of the icons, thereby accessing the respective
social media platform.


12. Plugins and Tools

Google Fonts (Local)

This website uses so-called web fonts for the uniform display of
fonts. The Google Fonts are installed locally. A
connection to Google servers does not take place.

Background: Loading Google Fonts from Google’s servers
(fonts.googleapis.com) would constitute a transfer of your IP address to
Google in the USA. We have deliberately avoided this and embedded the
fonts locally on our server.

Elementor

This website uses the page builder Elementor. The
provider is Elementor Ltd., Raoul Wallenberg 4, Tel Aviv 6971901,
Israel.

Elementor is used exclusively for the design and presentation of our
website content. Elementor may set technically necessary cookies
required for the functionality of the website (e.g., for storing
language settings or Elementor-specific settings). These cookies are
stored on the basis of Art. 6(1)(f) GDPR and
Section 25(2) TDDDG.

In normal operation, Elementor does not transfer any personal data to
third parties.

LiteSpeed Cache

This website uses the caching plugin LiteSpeed Cache
for performance optimization. LiteSpeed Cache may set cookies that serve
technical functionality and performance optimization. These cookies are
technically necessary.

Legal basis: Art. 6(1)(f) GDPR and Section
25(2) TDDDG
.

HubSpot Meetings

For appointment scheduling on our website, we use HubSpot
Meetings
. This links to HubSpot’s infrastructure
(meetings.hubspot.com). When you book an appointment, the data you enter
(name, email address, and any additional information) is transmitted
directly to HubSpot.

Data processing is based on Art. 6(1)(b) GDPR
(pre-contractual measures). For further information on data processing
by HubSpot, please refer to Section 8 of this privacy policy.


13. Email Communication

Hostinger Email

For our business email communication, we use the email services of
Hostinger (see Section 6). Our email addresses (info@takhub.de,
marcel.neuroth@takhub.de) are operated via Hostinger’s servers in
Lithuania (EU).

When you contact us by email, the personal data you transmit (e.g.,
name, email address, content of the message) is stored to process your
request.

Legal basis: Art. 6(1)(b) GDPR (performance of a
contract / pre-contractual measures) and Art. 6(1)(f)
GDPR
(legitimate interest in handling inquiries).

Storage duration: Emails are stored for the duration
of the business relationship and subsequently in accordance with
statutory retention periods (up to 6 or 10 years pursuant to the German
Commercial Code (HGB) / German Fiscal Code (AO)).


14. Currency and
Amendments to This Privacy Policy

This privacy policy is currently valid as of February
2026
.

Due to the further development of our website and the services
offered, or due to changes in legal or regulatory requirements, it may
become necessary to amend this privacy policy. The current version of
the privacy policy can be accessed and printed at any time on the
website at https://takhub.de/datenschutz/.


Last updated: February 2026