Privacy Policy

Data Controller

Controller within the meaning of the General Data Protection Regulation (GDPR):

Swintara GmbH Siebstraße 1 30171 Hannover Germany

Email: info@swintara.com

Contact Information

For any questions regarding data protection, please contact us exclusively by email:

Email: info@swintara.com

General Information on Data Processing

We process personal data of our users only to the extent necessary to provide a functional website and our content and services.

This website is currently under construction (coming-soon phase). The contact form is active. Newsletter signups and analytics services are not yet activated.

Legal bases for the processing of personal data: -- Art. 6(1)(a) GDPR (consent) -- Art. 6(1)(b) GDPR (performance of a contract) -- Art. 6(1)(f) GDPR (legitimate interest)

Hosting

Provider: Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA

Purpose: Provision and delivery of this website (hosting and deployment).

Data processed: When you access this website, the hosting provider automatically collects information in server log files. This may include: -- IP address of the requesting device -- Date and time of the request -- Name and URL of the requested page -- Browser and operating system used -- Referrer URL

Server log files are generated automatically by Vercel and deleted after a short period. We do not have access to individual IP addresses from the server log files.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in the secure and efficient provision of the website).

Note on data transfer: Vercel processes data on servers in the EU and potentially in the USA. Data transfers to the USA are based on the EU-U.S. Data Privacy Framework. For more information, see Vercel's privacy policy: https://vercel.com/legal/privacy-policy

Fonts

This website uses self-hosted fonts (Manrope and JetBrains Mono). The font files are served directly from our own server.

No connection to external font services (e.g., Google Fonts) is established. No data is transmitted to third parties for the purpose of font loading.

Web Analytics (planned)

Note: This section describes a service planned for the future. Vercel Analytics is currently NOT active. No analytics data is being collected at this time.

Provider: Vercel Analytics (part of Vercel Inc.)

Once the service is activated, the following information applies:

Purpose: Analysis of usage behavior to improve website performance and measure the reach of our content.

Key characteristic: Vercel Analytics is cookieless and does not process personal data in the sense of direct identification. No cookies are set. No cross-device tracking takes place.

Data processed: aggregated, anonymized page views and events; individual IP addresses are not stored.

Legal basis (upon activation): Art. 6(1)(f) GDPR (legitimate interest).

This privacy policy will be updated accordingly when Vercel Analytics is activated.

Further information: https://vercel.com/docs/analytics

Contact Form

You can send us a message via the contact form on swintara.com.

Data collected: name, email address, subject, message text.

Purpose: Processing and responding to your contact inquiry.

Legal basis: Art. 6(1)(a) GDPR (consent). Submitting the form requires explicit consent (active checkbox).

Processing: Form data is sent via SMTP to info@swintara.com. No data is stored in a database -- delivery is exclusively by email.

SMTP provider: IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany. Further information: https://www.ionos.de/terms-gtc/datenschutzerklaerung/

Spam protection: The form contains a hidden honeypot field for automated spam detection. This field is evaluated server-side and immediately discarded. It is not stored and not forwarded to third parties.

Client-side submission protection: After a successful submission, a timestamp is stored in your browser's local storage (localStorage) to prevent resubmission for one hour. No personal data is stored (see Cookies and Local Storage section).

Rate limiting: To protect against abuse, IP addresses of incoming requests are hashed using SHA-256 and stored as truncated hash values (first 16 characters) in volatile server memory. These hash values are automatically deleted after a maximum of one hour. Raw IP addresses are neither stored nor logged.

CRM Integration and Lead Capture (planned)

Note: This section describes a service planned for the future. The HubSpot integration is currently NOT active. No form data is being transmitted to HubSpot at this time.

Provider: HubSpot (EU tenant) HubSpot Ireland Limited, 1 Sir John Rogerson's Quay, Dublin 2, Ireland

Once the CRM integration is activated, the following applies:

Purpose: Synchronization of contact inquiries, newsletter and beta registrations to the CRM system for further processing.

Data collected: email address, name, message text, consent timestamp, language setting, optional referral and UTM parameters.

Consent: Submission requires explicit consent (checkbox).

Legal basis (upon activation): Art. 6(1)(f) GDPR (legitimate interest).

This privacy policy will be updated accordingly when the CRM integration is activated.

Further information: https://legal.hubspot.com/privacy-policy

Newsletter and Beta Registration (planned)

Note: This section describes a service planned for the future. Newsletter and beta registration are currently NOT active. No registration data is being collected at this time.

Provider: HubSpot (EU tenant) HubSpot Ireland Limited, 1 Sir John Rogerson's Quay, Dublin 2, Ireland

Once these features are activated, the following applies:

Purpose: Sending the newsletter and managing beta access requests for Swintara Cloud.

Data collected: email address, registration type (newsletter or beta), consent timestamp, optional referral and UTM parameters.

Consent: Registration requires explicit consent (checkbox). Consent can be withdrawn at any time with effect for the future (see Right of Withdrawal section).

Legal basis (upon activation): Art. 6(1)(f) GDPR (legitimate interest).

This privacy policy will be updated accordingly when newsletter and beta registration features are activated.

Further information: https://legal.hubspot.com/privacy-policy

Cookies and Local Storage

This website does not use cookies.

No cookies are set and no comparable tracking technologies are used.

Local storage (localStorage): After successfully submitting the contact form, a single timestamp (Unix timestamp) is stored in your browser's local storage. This entry serves exclusively as spam protection and prevents repeated submissions within one hour. No personal data is stored. The entry becomes invalid after one hour on the client side and is not transmitted to our servers.

Legal basis: § 25(2)(2) TDDDG (German Telecommunications Digital Services Data Protection Act). This storage is strictly necessary to provide the service explicitly requested by the user (contact form). No consent is required for this purpose.

Should cookies or additional comparable technologies be introduced in the future, this privacy policy will be updated accordingly and a consent mechanism will be implemented where required.

No Tracking Services

This website currently does not use any analytics, tracking, or advertising services. No scripts for session replay, heatmaps, fingerprinting, or advertising pixels are embedded.

No data is transmitted to Google, Facebook, LinkedIn, or comparable advertising networks.

Data Retention

Personal data is only stored for as long as is necessary for the respective processing purpose or as required by statutory retention obligations.

Server log files of our hosting provider Vercel are automatically deleted after a short period.

Contact form data is delivered exclusively by email and is not additionally stored in a database. Retention of the email is governed by our internal deletion policies and statutory retention obligations.

Hash values used for rate limiting are held in volatile server memory for a maximum of one hour and then automatically deleted.

The spam protection timestamp in your browser's local storage (localStorage) becomes invalid after one hour on the client side.

Your Rights

As a data subject, you have the following rights under the GDPR:

-- Right of access (Art. 15 GDPR) -- Right to rectification (Art. 16 GDPR) -- Right to erasure (Art. 17 GDPR) -- Right to restriction of processing (Art. 18 GDPR) -- Right to data portability (Art. 20 GDPR) -- Right to object (Art. 21 GDPR)

To exercise your rights, please contact: info@swintara.com

Right of Withdrawal

If the processing of your personal data is based on consent, you have the right to withdraw that consent at any time (Art. 7 para. 3 GDPR).

Withdrawal can be made by email to info@swintara.com. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

Right to Lodge a Complaint

You have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR).

The competent supervisory authority for us is:

Die Landesbeauftragte für den Datenschutz Niedersachsen (The State Commissioner for Data Protection of Lower Saxony) Prinzenstraße 5 30159 Hannover https://www.lfd.niedersachsen.de

Changes to this Policy

We reserve the right to update this privacy policy when legal requirements or our data processing practices change.

The current version is always available on this page. The date of the most recent update is shown at the top of this page.

Last Updated

Last updated: April 2026