Privacy Policy – 360spro.de

Last updated: April 6, 2025

This privacy policy informs you about the processing of personal data when visiting our website https://360spro.de. It applies to residents of the European Economic Area (EEA), Switzerland, and, where applicable, the United Kingdom.

  1. Controller

360SPRO
Haldesdorfer Straße 14
22179 Hamburg, Germany
Email: [email protected]
Phone: +49 40 602 986 16

  1. Purposes and Legal Bases of Data Processing

We process your personal data for the following purposes and based on the following legal grounds:

Purpose

Data Categories

Legal Basis

Visiting the website

IP address, browser type, date/time, operating system

Art. 6 (1) lit. f GDPR (legitimate interest in functionality and security)

Contact via form

Name, email, message content

Art. 6 (1) lit. b GDPR (contract initiation)

Newsletter subscription

Email address

Art. 6 (1) lit. a GDPR (consent)

Security and DDoS protection

IP address, access time

Art. 6 (1) lit. f GDPR (legitimate interest)

  1. Hosting and Content Delivery

Our website is hosted by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany.
Hetzner processes personal data such as IP addresses in server log files for operational and security purposes. Processing takes place exclusively within the EU, based on a data processing agreement under Art. 28 GDPR.

CDN: Cloudflare Germany GmbH
Rosental 7, c/o Mindspace, 80331 Munich, Germany
Cloudflare acts as our content delivery network (CDN) to enhance website speed and security. Personal data may be processed in server logs. A data processing agreement pursuant to Art. 28 GDPR exists.

Cloudflare uses EU Standard Contractual Clauses (SCCs) for international data transfers. For more information:
https://www.cloudflare.com/cloudflare_customer_SCCs-German.pdf

  1. Cookies and Consent

We use cookies to ensure the functionality of our website and provide optional services (e.g., analytics, embedded media).

  • Essential cookies: Required for technical operation (Art. 6 (1) lit. f GDPR)
  • Optional cookies: Used only after explicit consent (Art. 6 (1) lit. a GDPR)

You can change your cookie preferences at any time via the “Cookie Settings” link in the footer.

All consents are logged and can be reviewed or withdrawn at any time.

More details are available in our Cookie Policy (EU).

  1. Newsletter

If you subscribe to our newsletter, your email address will be used exclusively for this purpose. You will receive a confirmation email using the double opt-in process. You can unsubscribe at any time via the link in each email.

  • Legal basis: Art. 6 (1) lit. a GDPR (consent)
  • Newsletter provider: e.g., Brevo (please update if necessary)
  • A data processing agreement pursuant to Art. 28 GDPR exists with the provider.
  1. Embedded Services and Content

This website integrates external services and embedded content that may transmit data to third parties:

 YouTube (Videos)

Provider: Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland
→ Playing a video may transmit personal data to Google.
Privacy Policy: https://policies.google.com/privacy

 Google Fonts (Web Fonts)

Provider: Google Ireland Ltd.
→ When fonts are loaded, your IP address is transmitted to Google.
Privacy Policy: https://policies.google.com/privacy

These services are only activated after you give your consent via our cookie banner.

  1. Recipients and International Data Transfers

Personal data may be transferred to external service providers acting as data processors:

  • Hetzner (hosting)
  • Cloudflare (content delivery)
  • Newsletter provider (e.g., Brevo)

If personal data is transferred outside the EU/EEA or the UK (e.g., to the USA), such transfers are secured by:

  • Standard Contractual Clauses (SCCs), or
  • a valid adequacy decision by the European Commission or UK authorities
  1. Your Rights (Articles 12–22 GDPR)

You have the following rights with regard to your personal data:

  • Right of access (Art. 15 GDPR)
  • Right to rectification (Art. 16 GDPR)
  • Right to erasure (Art. 17 GDPR)
  • Right to restrict processing (Art. 18 GDPR)
  • Right to data portability (Art. 20 GDPR)
  • Right to object (Art. 21 GDPR)
  • Right to withdraw consent (Art. 7 (3) GDPR)

To exercise your rights, please contact us at [email protected]

  1. Right to Lodge a Complaint

If you believe that your data is being processed unlawfully, you have the right to file a complaint with a data protection authority. The competent authority for 360SPRO is:

Hamburg Commissioner for Data Protection and Freedom of Information (HmbBfDI)

  1. Changes to This Privacy Policy

We reserve the right to amend this privacy policy as needed due to legal, technical, or functional changes. The current version is always available on our website.