Contact form. When you submit the contact form we collect your name, company (optional), e-mail address, and message. We use this data solely to respond to your enquiry. The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures) or, where applicable, Art. 6(1)(f) GDPR (legitimate interest in responding to enquiries).
Server logs. Our hosting provider automatically collects standard access logs (IP address, browser, date/time, pages requested). These are used for security and operational purposes and deleted after 7 days. Legal basis: Art. 6(1)(f) GDPR.
Aggregate analytics. We use Umami — a privacy-friendly analytics service — to understand aggregate traffic patterns (pages visited, referrer, country, browser, device type). Umami does not set cookies, does not track individuals across sessions, and does not store IP addresses or device fingerprints. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in measuring website usage).
3. Cookies
This website uses a single functional cookie (sciscry_cookie_consent) to remember your cookie preference. The analytics we use (Umami — see section 4) is cookieless, and no tracking or advertising cookies are set. The functional cookie expires after 365 days.
4. Third-party services
Google Fonts. Fonts are loaded from Google's servers. Google may log your IP address when fonts are fetched. See Google Privacy Policy. Legal basis: Art. 6(1)(f) GDPR.
Umami Cloud. Aggregate page-view analytics are processed by Umami Software, Inc. via cloud.umami.is (EU-hosted). No cookies are set, IP addresses are not stored, and visitors cannot be tracked across sessions. See Umami Privacy Policy. Legal basis: Art. 6(1)(f) GDPR.
Cloudflare Turnstile. The contact form uses Cloudflare Turnstile to prevent abuse and spam. Cloudflare may process technical signals (IP address, browser headers, interaction patterns) to verify that submissions come from humans, not bots. No persistent tracking cookies are set. See Cloudflare Privacy Policy. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in fraud and abuse prevention).
5. Data retention
Contact form enquiries are retained for as long as necessary to handle your request and comply with legal obligations, then deleted. Server logs are deleted after 7 days.
6. Your rights
Under GDPR you have the right to access, rectify, erase, restrict processing of, and port your personal data, and to object to processing. To exercise these rights contact us at website@sciscry.ai. You also have the right to lodge a complaint with a supervisory authority (Bavarian State Office for Data Protection Supervision — BayLDA).
