Privacy Policy

1. Controller

The controller responsible for processing your personal data on this website is:

Cassel Industrial AI, owner Cord Cassel
Leinpfad 2, 22301 Hamburg, Germany
Email: cord.cassel@cassel-ai.com

2. Hosting and server log files

This website is operated on Microsoft Azure (Azure Static Web Apps); the provider is Microsoft Ireland Operations Ltd., One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. When you visit the website, Microsoft processes technically necessary data transmitted by your browser: IP address, date and time, page visited, referrer URL, browser type and operating system.

This data serves the secure and stable operation of the website; we do not analyse it or combine it with other data. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in secure operation). Microsoft processes the data as a processor on our instructions.

3. Contact form

If you use the contact form, we process the information you enter:

• required: first name, last name, email address, company name;
• optional: phone number, number of employees, your role, how you heard about us, your answers to the tick-box questions and your comment.

We use this information solely to handle your enquiry and to arrange a conversation with you. The legal basis is Art. 6(1)(b) GDPR (handling your enquiry, pre-contractual measures).

How your enquiry is transmitted: the form sends your information in encrypted form to a function of our website on Microsoft Azure. It forwards it as an email via the email service Azure Communication Services (Microsoft) to our mailbox. Our mailbox is operated by Google (Google Workspace; provider Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). Microsoft and Google act as processors on our instructions.

Protection against abuse: to block automated spam, we check on submission whether a field invisible to people is empty and how much time has passed since the page was loaded, and we limit the number of enquiries per IP address. For this purpose the IP address is only held in the function’s working memory for at most one hour and is not stored permanently. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in an abuse-free contact channel). No automatic confirmation is sent to you.

4. Contact by email or phone

If you contact us by email or phone, we process your information to handle your enquiry. The legal basis is Art. 6(1)(b) GDPR or Art. 6(1)(f) GDPR (legitimate interest in answering enquiries).

5. Audience measurement with Cloudflare Web Analytics

To see which pages are read and how visitors arrive, we use Cloudflare Web Analytics from Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. When you open a page, your browser loads a small script from Cloudflare and transmits the page visited, the referring page, browser and device type, loading times and your IP address. Cloudflare sets no cookies, creates no profile of individual visitors and, according to Cloudflare, does not use the IP address to recognise visitors; we only see aggregated figures. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in an aggregated evaluation of how our website is used). You can prevent the measurement by blocking scripts from static.cloudflareinsights.com in your browser.

6. What we do not use

This website uses no cookies, no other analytics or tracking tools, no social media plugins and no embedded third-party content. Fonts are served from our own server; no data is transferred to font providers when you visit a page. There is no profiling and no automated decision-making.

7. Recipients and transfers to third countries

The only recipients of your data are the processors Microsoft, Google and Cloudflare named above. We do not sell your data or pass it on for advertising purposes. Microsoft, Google and Cloudflare are companies or groups of companies headquartered in the USA; access from the USA can therefore not be ruled out. All three companies are certified under the EU-US Data Privacy Framework; the European Commission’s standard contractual clauses also apply.

8. Retention

We keep enquiries received via the form, by email or by phone for as long as they are needed to handle them and for any resulting business relationship. If no business relationship results, we delete them no later than two years after the last contact, unless statutory retention obligations apply.

9. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). Please contact cord.cassel@cassel-ai.com. You also have the right to lodge a complaint with a data protection supervisory authority, for example the Hamburg Commissioner for Data Protection and Freedom of Information.

10. Security

The website is delivered exclusively in encrypted form (HTTPS). We protect your data with appropriate technical and organisational measures against unauthorised access, alteration and loss.

11. Changes

We update this privacy policy when processing changes. The version published here applies.