TAK Hub – home page

Privacy policy

This translation is provided for information only. The German version is authoritative.

TAKHUB GmbH · As of: October 17, 2026

Contents

1. Scope

This privacy policy explains how we process personal data when you visit takhub.de, contact us, request our PDF checklist, subscribe to the newsletter and conduct business with us. Personal data means information relating to an identified or identifiable person, such as email addresses, IP addresses or business contacts’ details.

Project-specific TAK systems may involve separate processing activities and responsibilities. The information in the respective offer or provided by the responsible client applies to those activities. Please do not send operational secrets, health data or similarly sensitive content through general website forms; arrange a suitable transmission channel with us.

2. Controller and data protection contact

TAKHUB GmbH
Represented by the managing director Marcel Neuroth
Dierath 66
51399 Burscheid, Germany

Telephone: +49 152 07871130
Email: info@takhub.de

Commercial register: HRB 127646, Cologne District Court
VAT ID number: DE465328633

For data protection questions and to exercise your rights, you can contact us at info@takhub.de or the contact details above.

3. Legal bases, recipients and retention

3.1 Legal bases

We process personal data for the purposes described in each case on the following basis:

If a company or organization is our contractual partner, we process the data of its contact persons for business communication on the basis of Article 6 paragraph 1 letter f GDPR. The contact person is therefore not a party to the contract themselves.

§ 25 TDDDG also applies to the storage of information on your device and access to information already stored there. Absolutely necessary functions of an expressly requested digital service can be provided without consent in accordance with Section 25 Paragraph 2 TDDDG. Other corresponding access requires your consent.

3.2 Recipients

Within our company, access is restricted to persons who need the data for their tasks. We use service providers for hosting, CDN, email, IT operations, customer management, newsletters and accounting. When performing contracts, banks, payment and shipping providers, tax or legal advisers and, where required by law, authorities and courts may also receive data. The main services and purposes are described below. Providers acting on instructions are distinct from recipients processing data for their own statutory duties, such as banks and payment providers.

3.3 Storage period and deletion

Retention depends on the specific matter. The following sections specify the relevant criteria for technical logs, inquiries, downloads, CRM and newsletters. Once the respective purpose ceases, we delete personal data no longer needed. Documents subject to statutory retention are kept for the remaining evidentiary obligations; that alone does not authorize their continued use for advertising or customer profiles.

The following apply in particular to statutory retention obligations:

These periods regularly begin at the end of the relevant calendar year. Legal extensions, for example due to taxation procedures that are still relevant, remain possible. A specific legal dispute may require further limited storage until it is finally resolved. We only retain proof of consent and claims to the extent necessary for proof; The relevant limitation periods and ongoing proceedings are particularly important here.

Deletions must also be taken into account when backing up data. Legal deletion obligations apply regardless of whether data is contained in a running system or in a backup copy.

4. Your data protection rights

According to the respective legal requirements, you have the following rights in particular:

Your right to object

Where we process data on the basis of Article 6(1)(f) GDPR, you may object at any time on grounds relating to your particular situation. This also applies to profiling based on that provision. We then stop processing the data concerned unless we demonstrate compelling legitimate grounds overriding your interests, rights and freedoms, or need the processing for the establishment, exercise or defence of legal claims.

You can object to the processing for direct advertising, including associated profiling, at any time without giving reasons. The data will then no longer be used for these purposes.

An informal message to info@takhub.de is sufficient to exercise your rights. If there are reasonable doubts about your identity, we may request the information required for confirmation, but not routinely a complete copy of your ID.

We inform you of action taken without undue delay, generally no later than one month after receiving your request. Where necessary because of the complexity or number of requests, the period may be extended by up to two further months; we inform you of the extension and its reasons within the first month. If we cannot comply, we explain the reasons and your remedies. Handling requests is generally free of charge; statutory exceptions for manifestly unfounded or excessive requests remain unaffected.

You can complain to a data protection supervisory authority, in particular at the place of your habitual residence, your place of work or the place where the violation is suspected. The State Commissioner for Data Protection and Freedom of Information for North Rhine-Westphalia, Kavalleriestraße 2-4, 40213 Düsseldorf, email poststelle@ldi.nrw.de, website https://www.ldi.nrw.de, is particularly relevant for our company. Other official and judicial remedies remain unaffected.

5. Website, hosting, CDN and email

5.1 Technical operation with Hostinger

Our website is based on WordPress with its own theme. Hosting, Content Delivery Network (CDN), and business email are provided through Hostinger. The hosting, CDN and mail resources used for this are operated in the European Union. The hostinger provider in our service provider information is HOSTINGER operations, UAB, Švitrigailos str. 34, 03230 Vilnius, Lithuania. The company headquarters is not the same as the location of all servers.

When you access a page, the infrastructure processes in particular the IP address, date and time, requested address, amount of data transferred, response and error status as well as origin, browser and operating system information transmitted by the browser. The CDN is used for fast and reliable delivery. Access data is processed for provisioning, troubleshooting and attack prevention. The legal basis is Article 6 paragraph 1 letter f GDPR; Our legitimate interest is a secure, stable and accessible website.

Technical logs are needed to assess current operating errors, detect attacks and review the measures taken against them. Unless there is a specific reason for further retention, personal log data is deleted or overwritten once that assessment is complete. Entries concerning a specific error or security incident may be retained separately until its investigation and any necessary legal proceedings are concluded. They are not used as a permanent browsing history for advertising.

EU server locations do not automatically exclude international access by service providers and subprocessors. Hostinger’s published data processing terms provide for EU Standard Contractual Clauses for covered transfers to countries without an adequate level of data protection. Information about those terms and subprocessors: https://www.hostinger.com/legal/dpa . For international data transfers, see also Section 12.

5.2 Solid Security and transport encryption

We use Solid Security to protect the website. In the event of failed logins and detected attacks, IP addresses, times and technical events are logged and attack sources are included in blacklists. The legal basis is Article 6 paragraph 1 letter f GDPR. Our legitimate interest is to protect the website, its users and our systems from unauthorized access and misuse.

Event logs are deleted once event review and mitigation control are complete. A blacklist entry is only necessary as long as the source in question poses a justified risk of attack. In the event of a specific security incident, relevant data can be retained separately for investigation and legal prosecution.

The website uses HTTPS. Transport encryption protects the transmission, but is not a guarantee of absolute security. For particularly confidential content, we will coordinate a suitable communication channel with you.

6. Cookies, settings and Complianz

Cookies and similar storage technologies can store settings in your browser. We use Complianz to manage your choices for such functions. This involves processing your selection, its status and the technically necessary allocation information. Storing and retrieving the selection is necessary for the settings management you request and is based on Section 25(2), no. 2 TDDDG. Necessary evidence of consent is processed under Article 6(1)(c) in conjunction with Articles 5(2) and 7(1) GDPR.

The selection remains relevant until you change it, the corresponding browser storage is deleted or a new selection becomes necessary due to changed purposes or expired validity. Evidence of previously given consent will be stored separately according to the criteria in Section 3.3. You can use the data protection settings to change your selection and revoke your consent with effect for the future. Declining optional features does not prevent a general contact request.

If you click to select light or dark mode, your choice is saved in your browser’s Local Storage under takhub-theme. This value is not transmitted to us as a separate form entry. Storage enables the display you expressly selected and is based on Section 25(2), no. 2 TDDDG; the associated processing is based on Article 6(1)(f) GDPR, our interest in providing your chosen display. The value remains until you change your choice or delete the website’s storage in your browser.

7. Contact and PDF checklist

7.1 Contact form, email and telephone

Our contact form uses WPForms Lite. It records your email address and description of your project as mandatory information as well as the information you add about your name, organization, telephone number and activity or organizational group. The information enables us to process and assign your request. You do not have to fill out any voluntary fields.

The message is sent via WP Mail SMTP and the Hostinger mail server to info@takhub.de. In our configuration, WPForms Lite does not save form submissions as entries in the website database. The message is processed in the email system and, where necessary to handle it, in customer management. HubSpot does not automatically capture website forms in addition to this.

Processing is based on Article 6 paragraph 1 letter b GDPR if you initiate or fulfill a contract yourself. We process general inquiries and communication with organizational contacts in accordance with Article 6 paragraph 1 letter f GDPR. Our legitimate interest is appropriate, reliable communication. Confirmation of acknowledgment of this data protection declaration does not constitute additional consent for advertising.

The form’s internal token-based spam protection works without an external CAPTCHA provider. It prevents abusive submissions under Article 6(1)(f) GDPR; access to terminal devices strictly necessary for that purpose is based on Section 25(2), no. 2 TDDDG.

The same purposes and legal bases apply to email and telephone inquiries. Without the necessary contact details and information about your request, we may be unable to respond. We retain the matter until it and any specifically necessary follow-up communication are concluded. We then delete unnecessary content. Where an order is placed, the contractual and retention rules in Sections 3 and 11 apply; for outstanding claims, only the necessary supporting evidence is retained.

7.2 Provision of the PDF checklist

After submitting the form, the download link will appear on the website. The PDF will not be sent via email. This screen download does not require you to provide your email address, name, or organization. Simply retrieving it does not result in a message with such information being sent to our mailbox.

If there is a problem providing the download, you may contact us at info@takhub.de so that we can identify your request and resolve the problem with you. This contact is not required for the regular download. We process only the information you give us for the requested troubleshooting. We use it exclusively to resolve that delivery problem, not for advertising, a newsletter, sales follow-up or a permanent prospect profile.

Processing for troubleshooting requested by you is based on Article 6(1)(f) GDPR, our legitimate interest in resolving reported delivery problems and communicating reliably. We need your reply address and a description of the problem. Without them, individual troubleshooting may not be possible. The download link itself and subsequent use of the file remain independent of this.

Information submitted for troubleshooting is deleted once the problem has been dealt with. Any necessary evidence of a claim, limited to essentials, is handled separately under Section 3.3. Section 5 applies to technical access data generated whenever pages and files are requested.

8. Customer management with HubSpot

We use HubSpot as a CRM system for structured processing of inquiries and business relationships. To do this, we process necessary business contact and organizational data, communication history, offer and project status as well as relevant support notes. Storing them in the CRM does not constitute permission for unsolicited advertising emails.

The legal basis is Article 6 Paragraph 1 Letter b GDPR if you initiate or fulfill a contract yourself, otherwise Article 6 Paragraph 1 Letter f GDPR. Our legitimate interest lies in comprehensible customer service and orderly cooperation. Data from ongoing or specifically initiated processes are retained until they are completed. If the business relationship ceases and there is no specific further process, contact details and notes that are no longer required will be deleted. Legally required correspondence and proof of claim will be stored separately in accordance with Section 3.3.

We receive contact details from you, your organization or others involved in the matter. For professionally published details, the source may also be an organization’s website or a professional directory. If data is not collected from you, we inform you about its specific source and further processing within one month at the latest; if we contact you earlier, with the first communication, or if we disclose the data earlier, at that time, unless a statutory exception applies.

HubSpot website tracking, chat, and third-party automatic form capture are not active on this site. Therefore, a page view is not connected to a CRM contact profile via HubSpot.

HubSpot is a service of the HubSpot group of companies with HubSpot, Inc., Two Canal Park, Cambridge, MA 02141, USA. The published contractual conditions generally assign German customers to HubSpot Germany GmbH; Companies in the HubSpot Group are involved in the provision of services. Processing may include access and transfers to the USA. HubSpot, Inc. has active EU-US DPF certification for personal data outside of the employment context. The published data processing terms also provide for EU standard contractual clauses. Details of transfers and available guarantees are set out in Section 12.

Data protection information: https://legal.hubspot.com/privacy-policy
Data processing terms: https://legal.hubspot.com/dpa
DPF register: https://www.dataprivacyframework.gov/participant/5812

9. Newsletter via Mailchimp

You can order our newsletter for new specialist articles in German, English, Spanish or Ukrainian. For this we use Mailchimp, The Rocket Science Group LLC d/b/a Mailchimp, USA, a company of the Intuit Group. Your e-mail address, the language you have chosen, as well as the time of registration and confirmation, IP address and the information required to prove your consent will be processed.

Registration takes place using the double opt-in procedure: After your registration you will receive a confirmation email. Only when you confirm your registration using the link contained therein will your address be activated for sending the newsletter. New specialist articles can be sent automatically from the article feed.

The legal basis for sending the newsletter is your consent under Article 6(1)(a) GDPR. Subscription is voluntary and independent of inquiries, orders and PDF downloads. You may withdraw consent at any time using the unsubscribe link in every newsletter email or by contacting info@takhub.de. Other services are not restricted as a result.

We do not measure newsletter opens or clicks. No individual reading or click profiles are created for us. Technical information about delivery, failed delivery and unsubscribing is processed to send the newsletter.

We retain data needed for ongoing distribution until you unsubscribe or the newsletter is discontinued. Unconfirmed subscriptions serve only the ongoing confirmation procedure; if confirmation does not occur, they are not used for distribution and are deleted after that procedure ends. After you unsubscribe, unnecessary profile data is deleted. Evidence of consent limited to what is necessary and minimal suppression information may be retained for legal defence and to respect your unsubscribe request under Article 6(1)(f) GDPR. The evidence and limitation criteria in Section 3.3 govern this, rather than continued retention of a complete newsletter profile.

Mailchimp processes data in the USA. The Rocket Science Group d/b/a Mailchimp is listed as a covered entity in the active EU-US DPF certification of Intuit Inc.. The published Mailchimp data processing terms provide for EU standard contractual clauses for transfers not covered by the DPF.

Data protection information: https://www.intuit.com/privacy/statement/
Data processing terms: https://mailchimp.com/legal/data-processing-addendum/
DPF register Intuit including Mailchimp: https://www.dataprivacyframework.gov/participant/7693

10. Local usage statistics with Independent Analytics

To evaluate the use of our website, we use Independent Analytics, locally in our WordPress installation. The pages viewed, pages of origin, times, device and browser categories as well as an approximate geographical origin derived from the IP address are evaluated. The statistical data is stored on our hosting infrastructure and is not transmitted to the plugin manufacturer for this evaluation.

Independent Analytics generates a hash from the IP address, User-Agent and an additional random value (“salt”) to recognize visitors. The unmodified IP address is not stored as a statistical record. A hash is not anonymous merely because it is a hash; we treat the associated usage data as personal data.

The usage statistics help us to assess popular content and the usability of our information offering. It is not used to assign your website visits to a newsletter or CRM contact. We only collect these statistics after your consent in accordance with Article 6 Paragraph 1 Letter a GDPR and Section 25 Paragraph 1 TDDDG. The browser script used for this reads, among other things, the origin address and parameters of the accessed address that are relevant for the origin evaluation and sends a statistical event to our website. You can grant consent via the data protection settings or revoke it with effect for the future. Without your consent, the information offered will continue to be available to you.

Visitor-related individual information is only retained for the purpose of evaluating related visits and comparing the use of our content. Once the respective comparison has been completed, the identifiers and individual details that are no longer required are deleted; In addition, only summarized values remain without reference to individual visitors. After revocation, no further consent-dependent statistical events will be recorded for you. Your right to delete data that has already been stored remains unaffected.

Manufacturer information: https://independentwp.com/knowledgebase/common-questions/what-makes-it-gdpr-compliant/

11. Contract, accounting and payments

11.1 Order processing

For offers, training, deliveries and service orders, we process necessary master, contact, performance, communication, delivery and billing data. They serve to initiate and carry out the respective order, billing and fulfill legal obligations to provide evidence. The legal basis is Article 6 paragraph 1 letters b and c GDPR and for business communication with contact persons of organizations letter f. Our legitimate interest is the orderly processing of the business relationship.

The necessary contract and invoice information is required for conclusion and implementation. Without it we may not be able to conclude or fulfill a contract. Voluntary additional information is to be distinguished from this. Storage and retention are governed by Section 3.3.

11.2 sevdesk

For invoicing and accounting, we use sevdesk GmbH, Hauptstraße 115, 77652 Offenburg, Germany. The data processed includes, in particular, names or company names, addresses, business contact details, invoice items, amounts, tax details, VAT identification numbers where applicable, and payment information. The legal basis is Article 6(1)(c) GDPR for statutory bookkeeping and evidentiary duties, together with point (b) for necessary contract performance or point (f) for organizational contacts. Statutory retention periods are set out in Section 3.3.

Data protection information: https://sevdesk.de/datenschutz/

11.3 Agreed payment methods

There is no payment feature on our website.

12. International data transfers

HubSpot and Mailchimp: Use of these services involves transfers to, or access from, the USA. For the data described here and covered by their certification, transfers to HubSpot, Inc. and The Rocket Science Group d/b/a Mailchimp rely on the European Commission’s adequacy decision on the EU-US Data Privacy Framework (DPF), Decision (EU) 2023/1795, Article 45 GDPR. HubSpot, Inc. is actively certified for personal data outside the employment context. Mailchimp is listed as a covered entity in Intuit Inc.’s active certification. The register entries are linked in Sections 8 and 9.

Supplementary guarantees: For transfers of these services not covered by the adequacy decision, the EU Standard Contractual Clauses pursuant to Decision (EU) 2021/914, Article 46 paragraph 2 letter c GDPR are the guarantee instrument provided for in the respective data processing terms. The conditions and the completed appendices specify in particular the processing, the recipients and the protection obligations. The clauses establish enforceable data subject rights; They do not replace the examination of the protective effect in the respective recipient country and any additional measures that may be necessary.

Hostinger: Our selected hosting, CDN and mail resources are located in the EU. Support, administration access and subcontractors may also result in international transfers. If data is transferred to countries without a relevant adequacy decision, the EU standard contractual clauses described in the Hostinger data processing terms are the intended guarantee instrument. The EU processing region is not a guarantee that any service provider access will remain exclusively in the EU.

The respective providers’ terms are linked in Sections 5, 8, 9 and 11. You can obtain a copy of the safeguards applicable to your data and the annexes specifying them at info@takhub.de. Safeguards for transfers are distinct from the legal basis for each processing purpose. General consent to website cookies does not replace those safeguards.

13. Local media, fonts and external links

The fonts Roboto, Roboto Mono and Roboto Serif as well as the videos played and images displayed on the website are provided via our own website infrastructure. No Google font servers are accessed for these fonts; the videos are not YouTube embeds. A locally provided image will not be accessed from the original image provider even if, for example, it comes from DVIDS or is under a Creative Commons license. Our hosting infrastructure processes the technical access data as described in Section 5.

Links to YouTube, LinkedIn, Instagram and X as well as “Add to Google Calendar” open the respective external offer when clicked. These are links, not embedded social media plugins or videos. The download of an iCal file provided by us is different from this. Only when the external target is accessed does its provider process the data generated there according to its rules; An assignment to an existing platform account is possible.

Data protection information of the linked providers:

14. Update

We will update this privacy policy if the processing described or relevant requirements change. A new version does not replace any required consent and does not change any contracts concluded.