Privacy policy
This English version is provided for convenience. The German version is legally binding.
1. Privacy at a glance
This website provides information about the Intertwined platform. When you visit it, we only process the data that is technically necessary to deliver the page. We process further data only if you write to us via the contact form or by email.
This website does not set cookies and does not use analytics or advertising services. It includes a third-party service only to protect the contact form against automated requests (section 6). It loads the Microsoft Bookings calendar only when you request it with “Show calendar” (section 7).
2. Controller
c.curity GmbH
Werdenfelser Str. 64
82061 Neuried
Germany
Represented by the Managing Director Max Ceburkov
Email: info@ccurity-consulting.com
3. Hosting and security
The website is operated by dogado GmbH, Saarlandstr. 25, 44139 Dortmund, Germany. A data processing agreement is in place with the provider. The legal basis is Art. 6(1)(f) GDPR; our interest is the reliable and secure operation of the website.
Server logs
When you visit the website, the server automatically stores information transmitted by your browser: IP address, date and time, page requested, previously visited page, browser and operating system. We use this information exclusively to ensure operation and to investigate faults, and we do not combine it with other data. The retention period is determined by the hosting provider's specifications.
Encryption
Transmission between your browser and this website is encrypted using TLS.
4. Fonts, images and videos
Fonts, images and videos are loaded from our own server. No data is transferred to third parties in the process.
5. Contact form and email
If you write to us via the form or by email, we process your name, your company, your email address and your message in order to respond to your request. The legal basis is Art. 6(1)(b) GDPR insofar as your request relates to an offer or a contract, otherwise Art. 6(1)(f) GDPR.
Your request is delivered by email via Microsoft 365 to our mailbox, which Microsoft Ireland Operations Limited operates on our behalf. We send an automatic confirmation of receipt to the email address you provided; it does not repeat any content from the form. We delete the request once it has been dealt with, unless statutory retention obligations apply.
Demo access
If you request access via the “Request demo access” form on the home page, we additionally process your role in the company. If you arrive via a link, for example from LinkedIn, the form takes over the campaign details from that link (UTM parameters); no cookies are set and no third-party services are included for this purpose.
To provide access, we use your name and email address to create a user account in the platform's demo environment, which contains fictitious data only. The legal basis is Art. 6(1)(b) GDPR. We delete the account at your request or as soon as you no longer use the access.
The user account is stored on our behalf by Supabase, Inc. in a data centre in Frankfurt am Main (Amazon Web Services region eu-central-1); the application itself runs on servers of Hetzner Online GmbH in Germany. Data processing agreements are in place with both providers. Supabase is headquartered in the USA; processing takes place in the EU, and the EU Standard Contractual Clauses additionally apply with regard to the US headquarters. We send you your access details by email from our Microsoft 365 mailbox (section 5).
6. Spam protection for the contact form (Cloudflare Turnstile)
To prevent automated requests via the contact form, we use the Turnstile service of Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. Turnstile is only loaded when you reach the contact form. Your browser then transmits your IP address and technical information about your browser, device and interaction to Cloudflare. This is used to determine whether a human is using the form. According to Cloudflare, Turnstile does not set cookies and does not use the data for advertising.
The legal basis is Art. 6(1)(f) GDPR; our interest is protection against spam and misuse of the form. Cloudflare is certified under the EU-US Data Privacy Framework; the transfer to the USA is based on the European Commission's adequacy decision (Art. 45 GDPR). A data processing agreement is in place with Cloudflare.
7. Appointment booking (Microsoft Bookings)
In the “Book a meeting directly” section, you can display the Microsoft Bookings booking page on this website or open it in a new tab. It is only loaded when you click “Show calendar” or open the link. Only then does your browser request the page from Microsoft; in doing so, your IP address and technical information about your browser and device are transmitted to Microsoft so that the page can be delivered. When the page is accessed, Microsoft may set cookies or similar technologies insofar as the page requires them to operate. Further details can be found in Microsoft's privacy statement.
If you book an appointment, we process your name, your email address, the selected appointment and any information you voluntarily provide in the booking form (for example company, telephone number, subject). We use this information to hold the meeting, to send you a confirmation and a reminder, and to enable participation via Microsoft Teams. The legal basis is Art. 6(1)(b) GDPR insofar as your request relates to an offer or a contract, otherwise Art. 6(1)(f) GDPR.
The bookings are stored on our behalf by Microsoft Ireland Operations Limited in our Microsoft 365 environment (Exchange Online) in the EU; a data processing agreement is in place with Microsoft. Microsoft's group headquarters are in the USA; for any transfer there, the EU Standard Contractual Clauses in the data processing agreement with Microsoft apply. We delete the booking no later than six months after the appointment, unless statutory retention obligations apply.
You do not have to use the booking page. Alternatively, you can reach us via the contact form on the home page (section 5) or by email.
8. Your rights
You have the right of access, rectification, erasure, restriction of processing and data portability, as well as the right to object to processing based on Art. 6(1)(f) GDPR. A message to the address given above is sufficient.
You can also lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Bavarian Data Protection Authority (Bayerisches Landesamt für Datenschutzaufsicht), Promenade 18, 91522 Ansbach, Germany.
Last updated: October 2026