Privacy policy

1. Controller

Aleks Tsenov Suchio Bergstraße 41 65795 Hattersheim am Main Germany

Phone

+49 176 42767348

Email

contact@suchio.net

2. Hosting, delivery, and server logs

The website is delivered through Cloudflare Workers and Cloudflare Static Assets. When you access the site, Cloudflare processes data including your IP address, date and time, requested URL, HTTP status, referrer, browser and device information, and technical network and security data. This processing supports secure and fast delivery, error analysis, and protection against misuse.

The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is the secure, stable, and efficient operation of this website. On the Workers Free plan currently in use, Workers logs are generally retained for up to three days and then deleted automatically unless they are exceptionally needed for longer to investigate a security incident or establish legal claims.

The provider is Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA. Processing may take place outside the European Economic Area. Cloudflare relies on the EU-U.S. Data Privacy Framework and, where required, the EU Standard Contractual Clauses for transfers to the United States.

3. Contact form and email communication

When you contact us, we process the information you provide. This may include your name, email address, company, company website, selected service, budget range, message, and language. An invisible honeypot field is used only to prevent spam. The information is not stored in a separate website database.

We process this information to handle and respond to your enquiry. Article 6(1)(b) GDPR applies where the enquiry concerns a contract or pre-contractual steps. In other cases, Article 6(1)(f) GDPR applies; our legitimate interest is responding appropriately to business enquiries.

We use Resend, a service of Plus Five Five, Inc., 2261 Market Street #5039, San Francisco, CA 94114, USA, to send the message. Resend processes at least sender and recipient addresses, message content, and delivery metadata and, according to its documentation, generally retains email data for 30 days. Transfers to the United States are safeguarded through the EU-U.S. Data Privacy Framework and the EU Standard Contractual Clauses.

The enquiry also remains in the controller’s email inbox. We delete correspondence once the enquiry has been fully handled unless statutory retention duties or legitimate evidentiary interests require further storage. Please do not submit special categories of personal data under Article 9 GDPR through the form.

4. Language preference

The website stores your chosen language in the “suchio-locale” cookie. It contains only the language code, applies across the website, and expires after one year. It is necessary to retain the language version you expressly selected for later visits.

Storage does not require consent under section 25(2)(2) TDDDG. Where the language code can be linked to a person, Article 6(1)(f) GDPR is the legal basis. You can delete the cookie at any time in your browser settings.

5. No analytics or marketing services

We currently use no web analytics, advertising trackers, social media pixels, or non-essential cookies. If this changes, we will update this policy before introducing the service and obtain consent where required.

6. Encryption

Data transmitted between your browser and the website is encrypted using HTTPS/TLS. You can recognise an encrypted connection by the lock symbol and “https://” in the address bar.

7. Your rights

Where the statutory conditions are met, you have the following rights against the controller:

• Access to your personal data (Article 15 GDPR)
• Rectification of inaccurate data (Article 16 GDPR)
• Erasure (Article 17 GDPR)
• Restriction of processing (Article 18 GDPR)
• Data portability (Article 20 GDPR)
• Objection to processing based on legitimate interests (Article 21 GDPR)

8. Right to object

You may object to processing based on Article 6(1)(f) GDPR for reasons arising from your particular situation. We will then stop processing the relevant data unless compelling legitimate grounds or the establishment, exercise, or defence of legal claims override your interests.

9. Right to complain

You may lodge a complaint with a data protection authority. The authority responsible for Suchio’s place of establishment is the Hessian Commissioner for Data Protection and Freedom of Information, Gustav-Stresemann-Ring 1, 65189 Wiesbaden, Germany.

10. Providing data and automated decisions

Using the contact form is voluntary. Without the fields marked as required, we cannot process the enquiry through the form; you can still contact us by email or phone. We do not use automated decision-making, including profiling.

11. Changes to this policy

We update this privacy policy when the website, the services used, or legal requirements change. The version published on this page applies.