Privacy Policy
CarbonFeather GbR | carbonfeather.de
Last Updated: October 26, 2026
1. Introduction
CarbonFeather GbR (“CarbonFeather,” “we,” “us,” or “our”) respects your privacy and is committed to protecting your personal information.
This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information when you visit our website at carbonfeather.de, contact us, schedule a consultation, request our services, or otherwise interact with our business.
CarbonFeather is established in Germany and processes personal information in accordance with the European Union General Data Protection Regulation (GDPR), applicable German privacy laws, and applicable United States privacy laws.
Depending on your location, you may have additional rights under state privacy legislation.
2. Who We Are
Data Controller / Business Operator
CarbonFeather GbR
Hildegundisstraße 66
40668 Meerbusch
Germany
Authorized Partners:
Luis Hansen
Richard Alex Weinekötter
Contact Information:
Phone: +49 155 10171225
Email:
luis.hansen@carbonfeather.de
richard.weinekoetter@carbonfeather.de
Websites: https://carbonfeather.de
For privacy-related inquiries or requests to exercise your rights, please contact us using the information above.
3. Information We Collect
We may collect the following categories of personal information.
Information You Provide Directly
- First and last name
- Email address
- Telephone number
- Company name and professional title
- Business website
- Information about your business and requested services
- Project requirements and budget information, if voluntarily provided
- Messages and other information you submit
- Appointment scheduling details
Information Collected Automatically
When you access our website, our hosting infrastructure may process:
- IP address
- Date and time of access
- Browser type and version
- Device and operating system information
- Pages and resources requested
- Referring website, where available
- Technical connection and security information
If you consent to optional analytics, we may also collect information about website interactions, navigation patterns, and conversion events.
We do not intentionally request sensitive personal information through our general website or consultation forms.
4. How We Use Personal Information
We process personal information for the following purposes:
- Operating, maintaining, and securing our website
- Responding to inquiries and consultation requests
- Scheduling and conducting business meetings
- Preparing proposals and service agreements
- Providing website design, development, hosting, and maintenance services
- Managing customer relationships and sales processes
- Improving website usability and performance
- Measuring website conversions, where consent has been obtained
- Complying with applicable legal obligations
- Protecting our business against fraud, unauthorized access, and security incidents
Where the GDPR applies, our legal bases include Article 6(1)(b) for contractual and pre-contractual activities, Article 6(1)(f) for legitimate business interests, Article 6(1)(c) for legal obligations, and Article 6(1)(a) for consent-based processing.
5. Website Hosting and Security
Our website is hosted using infrastructure provided by:
Hetzner Online GmbH
Industriestr. 25
91710 Gunzenhausen
Germany
Technical connection data may be processed to deliver website content, maintain system availability, identify errors, and prevent unauthorized access.
We retain server logs only for as long as reasonably necessary for these purposes, subject to applicable legal requirements.
More information:
6. Contact Requests and Business Communications
When you contact us by email, telephone, or through an available website contact method, we process the information necessary to respond to your inquiry.
This may include your contact details, business information, the contents of your message, and relevant follow-up communications.
We use this information to communicate with you, assess your requirements, prepare proposals, and provide requested services.
We do not automatically enroll individuals in promotional email campaigns solely because they requested a consultation.
Any marketing communications will be conducted in accordance with applicable consent, unsubscribe, and commercial email requirements.
7. Business Email Services — Zoho Mail
We use Zoho Mail to manage our business email communications.
Personal information processed through Zoho may include names, email addresses, message contents, attachments, and technical delivery information.
Our selected Zoho account configuration uses the provider's European data region, including infrastructure in Dublin, Ireland, and Amsterdam, Netherlands.
International processing may nevertheless occur in connection with support services or authorized subprocessors.
More information:
8. Appointment Scheduling — Calendly
We use Calendly to allow prospective clients and business contacts to schedule consultations and meetings.
Provider: Calendly, LLC, United States.
When scheduling an appointment, you may provide:
- Name
- Email address
- Telephone number
- Company name
- Company website
- Preferred appointment date and time
- Time zone
- Information about your business needs
Calendly may also process technical information, including IP addresses and browser information.
External Booking Links
Our website provides links to Calendly's external booking platform. The booking interface is not automatically loaded as an embedded component when you visit our website.
When you select a booking link, you are directed to Calendly, where the provider's own privacy and cookie practices apply.
We use appointment information to organize, prepare for, and conduct requested meetings.
Information submitted through Calendly may also be recorded in our customer relationship management system when the relevant integration is enabled.
Calendly may process personal information in the United States or other jurisdictions.
More information:
9. Customer Relationship Management — HubSpot
We use HubSpot to manage business contacts, consultation requests, customer relationships, and sales activities.
Provider: HubSpot, Inc., United States, and applicable affiliated entities.
Information stored in HubSpot may include:
- Name and business contact information
- Company details
- Website address
- Consultation and meeting history
- Business requirements
- Sales communications and notes
- Proposal and project status
- Follow-up activities
We use this information to respond to inquiries, coordinate consultations, manage business relationships, and provide our services.
HubSpot may engage authorized subprocessors and affiliated entities. International transfers may occur in accordance with applicable contractual safeguards and data protection requirements.
We do not use CRM contact information for unrelated promotional activities without an appropriate legal basis.
More information:
10. Website Forms
If we offer website contact forms or consultation request forms, we may process the information submitted through those forms.
Depending on the technical configuration, submissions may be delivered to our business email system or transferred to HubSpot for customer relationship management.
We use submitted information to respond to your request and, where applicable, prepare a service proposal.
We do not require sensitive personal information to submit a standard business inquiry.
11. Google Analytics 4
Subject to your consent, we use Google Analytics 4 to understand how visitors interact with our website and to improve its performance.
Google Analytics is provided by Google Ireland Limited for users in the European Economic Area, with additional Google entities potentially involved in processing.
Information processed may include:
- Website pages viewed
- Session activity
- Device and browser characteristics
- Approximate geographic information
- Traffic sources
- Website interactions and conversion events
- Technical identifiers, where enabled and permitted
Google Analytics 4 does not permanently log individual IP addresses according to Google's service documentation, although IP addresses may be processed during technical transmission.
Consent-Based Activation
Where required, Google Analytics is activated only after you provide consent through our website's privacy preferences.
You may decline optional analytics without losing access to the core functionality of our website.
You may withdraw or modify your consent at any time through the website's privacy settings.
Google may process information internationally, subject to applicable transfer mechanisms.
More information:
12. Search Engine Management Tools
We use Google Search Console and Bing Webmaster Tools to monitor website indexing, search visibility, and technical performance.
These services provide information about search queries, indexing issues, and website performance in search results.
We prefer website ownership verification methods, such as DNS records, that do not require additional visitor tracking scripts.
Using these webmaster tools does not itself mean that additional analytics cookies are installed on your device.
Google Privacy Policy:
https://policies.google.com/privacy
Microsoft Privacy Statement:
13. Cookies and Similar Technologies
Our website may use cookies, local browser storage, and similar technologies.
These technologies fall into the following categories.
Essential Technologies
Used for core website functionality, security, and necessary user preferences.
For example, we may store a confirmed language or regional preference locally in your browser.
Optional Analytics Technologies
Used to understand website performance and visitor interactions.
Where required by applicable law, optional analytics technologies are activated only after consent.
Privacy Preferences
Where optional consent-based technologies are deployed, our website provides a mechanism to accept, reject, or modify the relevant preferences.
You can also manage cookies through your browser settings.
Disabling optional technologies does not prevent you from accessing the main content of our website.
14. Video Conferencing — Zoom
We use Zoom to conduct remote consultations and business meetings.
Depending on how you participate, Zoom may process:
- Name and email address
- IP address
- Device and connection information
- Meeting metadata
- Audio and video data
- Chat messages
We use this information to organize and conduct requested meetings.
We do not routinely record Zoom consultations or enable automated AI transcription and meeting summaries.
Zoom may process information internationally.
More information:
15. Fonts, Images, and External Content
Our website fonts and images are generally served through our own hosting infrastructure.
This approach is intended to reduce unnecessary connections to third-party content providers.
If we introduce externally hosted videos, interactive widgets, or additional third-party content, we will assess the associated data processing and update this Privacy Policy where necessary.
16. Customer and Contract Information
When you become a customer, we may process information necessary to provide our services.
This can include:
- Business contact information
- Service agreements
- Invoices and payment-related records
- Project communications
- Website materials provided by customers
- Technical configuration details
- Access credentials, where required for service delivery
We process this information to perform contracts, manage projects, provide support, and comply with legal obligations.
Where we process personal information on behalf of a customer, we enter into appropriate data processing arrangements when required.
17. Sharing of Personal Information
We do not sell personal information.
We do not share personal information with independent third parties for their own unrelated advertising purposes.
We may disclose personal information to service providers that support our business operations, including providers of:
- Website hosting
- Business email
- Appointment scheduling
- Video conferencing
- Customer relationship management
- Website analytics, where permitted
- IT infrastructure and security
We may also disclose information where legally required or necessary to establish, exercise, or defend legal claims.
Service providers receive information only to the extent necessary for the relevant purpose and subject to applicable contractual or legal protections.
18. International Data Transfers
CarbonFeather operates from Germany and works with international service providers.
Personal information may be processed in Germany, other European countries, the United States, or other locations where our authorized service providers operate.
Where the GDPR applies, transfers outside the European Economic Area are subject to applicable legal transfer mechanisms, which may include adequacy decisions, the EU-US Data Privacy Framework for appropriately certified organizations, or Standard Contractual Clauses.
19. Data Retention
We retain personal information only for as long as reasonably necessary to fulfill the purposes described in this Privacy Policy, unless a longer period is required or permitted by applicable law.
Retention periods depend on the category of information and the purpose of processing.
For example:
- Contact inquiries are retained for the period necessary to respond and manage related business communications.
- CRM records are retained while relevant to an ongoing business relationship or legitimate follow-up purpose.
- Contractual and accounting records are retained according to applicable statutory requirements.
- Technical server logs are retained according to operational security requirements.
- Analytics data is retained according to the configured retention settings and applicable consent requirements.
When information is no longer required, we delete it or otherwise process it in accordance with applicable legal obligations.
20. Your Privacy Rights Under the GDPR
Where the GDPR applies, you may have the following rights:
- Right of access
- Right to rectification
- Right to erasure
- Right to restriction of processing
- Right to data portability
- Right to object to certain processing
- Right to withdraw consent at any time
You may exercise these rights by contacting us using the information in Section 2.
Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.
You also have the right to lodge a complaint with a competent supervisory authority.
Our relevant supervisory authority in Germany is:
Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen
21. Additional Privacy Rights for United States Residents
Depending on your state of residence and whether the relevant privacy law applies to CarbonFeather, you may have additional rights concerning your personal information.
These may include:
- The right to know or access certain personal information
- The right to request correction of inaccurate information
- The right to request deletion
- The right to obtain a portable copy of certain information
- The right to opt out of certain sales, sharing, or targeted advertising activities
- The right to appeal certain privacy request decisions, where applicable
- The right not to be discriminated against for exercising applicable privacy rights
These rights are subject to the eligibility requirements, definitions, and exceptions established by the relevant state laws.
California Residents
California residents may have rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act, if the law applies to our business and the relevant processing.
We do not sell personal information for monetary consideration.
We do not intentionally share personal information for cross-context behavioral advertising.
We do not knowingly sell or share the personal information of individuals under the age of 16.
The precise applicability of California privacy obligations depends on the legal thresholds and the actual nature of our processing activities.
Submitting a Privacy Request
You may submit a privacy request by emailing:
Please describe the right you wish to exercise.
We may request information reasonably necessary to verify your identity before processing a request.
We will respond in accordance with applicable legal requirements.
22. Commercial Communications
We may contact prospective and existing business customers regarding their inquiries, requested consultations, proposals, and service relationships.
Where we send commercial electronic communications, we aim to comply with applicable requirements, including the United States CAN-SPAM Act where relevant.
Marketing emails will include the information and unsubscribe mechanisms required by applicable law.
You may request that we stop sending promotional communications by following the unsubscribe instructions provided or by contacting us directly.
23. Children's Privacy
Our website and services are intended for businesses and professional users.
We do not knowingly collect personal information directly from children under the age of 13.
If we become aware that we have collected such information in circumstances requiring deletion, we will take appropriate steps to remove it.
Parents or guardians may contact us with relevant privacy concerns.
24. Data Security
We implement reasonable technical and organizational safeguards designed to protect personal information against unauthorized access, alteration, disclosure, loss, and misuse.
These measures include encrypted HTTPS connections and appropriate access controls.
However, no method of internet transmission or electronic storage can be guaranteed to be completely secure.
25. Automated Decision-Making
We do not use solely automated decision-making, including profiling, that produces legal or similarly significant effects on individuals within the meaning of Article 22 GDPR.
26. Changes to This Privacy Policy
We may update this Privacy Policy to reflect changes in our services, technology, business operations, or applicable legal requirements.
The current version will be made available on our website with its latest revision date.
27. Contact Us
If you have questions about this Privacy Policy or how CarbonFeather processes personal information, please contact:
CarbonFeather GbR
Hildegundisstraße 66
40668 Meerbusch
Germany
Email: luis.hansen@carbonfeather.de
Websites: https://carbonfeather.de