Privacy Policy

1. General Information

At Senf.app, protecting your privacy is very important to us. This page informs you about how we handle personal data when you use our website senf.app and other digital services. We aim to collect as little data as possible and to protect your privacy as effectively as we can.

2. Responsible Entity

The data controller for processing on this website is:

Senf.app
Fuhr, Morino, Wild von Hohenborn GbR
Follerstr. 93, 50676 Cologne, Germany
Phone: +49 160 99550210
Email: hello@senf.app

3. Collection and Processing of Personal Data

We process personal data only to the extent necessary to operate our website and respond to inquiries.

Types of personal data processed

• Contact data (e.g., email address, message content) when you use our contact form

Apart from the optional statistics and marketing services described in Section 5 (in the consent region only with your consent, elsewhere by default with the option to object), we do not actively collect additional personal data.

Categories of affected individuals

• Visitors of our website
• Individuals who contact us

4. Purposes of Processing and Legal Bases

• Providing and operating our website (Art. 6(1)(f) GDPR – legitimate interest)
• Responding to inquiries submitted via contact form (Art. 6(1)(b) GDPR – pre-contractual measures, and/or Art. 6(1)(f) GDPR)
• Optional statistics and marketing services in the consent region (EU/EEA, United Kingdom, Switzerland, Canada) (Art. 6(1)(a) GDPR and § 25(1) TDDDG – consent)
• Optional statistics and marketing services in all other countries (Art. 6(1)(f) GDPR – legitimate interest; you can object via “Privacy choices”)

5. Cookies, Analytics and Tracking

We use strictly necessary cookies and, depending on the country from which you visit our website, optional statistics and marketing services. This section describes which services we use, what they do, and which rules apply where.

Consent region: EU/EEA, United Kingdom, Switzerland and Canada

If you visit our website from one of these countries, or if we cannot determine your country, we ask for your consent via a cookie banner on your first visit. You can accept all, reject all, or choose individual categories. Optional statistics and marketing services are loaded only after you have given your consent. The legal basis is your consent (Art. 6(1)(a) GDPR; § 25(1) TDDDG for storing and accessing information on your device). You can withdraw your consent at any time with effect for the future via “Privacy choices”.

All other countries

If you visit our website from any other country, we do not show a cookie banner. The statistics and marketing services described below are active by default. The legal basis is our legitimate interest in measuring and improving our website and our advertising and in recognising business interest in our services (Art. 6(1)(f) GDPR). You can object at any time with effect for the future via “Privacy choices”.

How we determine your country

When a page loads, your browser asks our server which rules apply. Our hosting provider Cloudflare derives the country from your IP address. Our website uses only the country for this decision and does not store it. If the country cannot be determined, the rules of the consent region apply.

Privacy choices

The “Privacy choices” link in the footer of every page opens a panel in which you can see and change your choice for each category at any time, with effect for the future. Your choice is stored in your browser’s local storage.

Global Privacy Control (GPC)

If your browser sends a Global Privacy Control signal, we treat it as “Reject all”, wherever you visit from: no optional statistics or marketing services are loaded and no cookie banner is shown. The “Privacy choices” panel indicates that the signal was received. If you then explicitly switch on optional services in that panel, we store and follow that choice for this browser.

Strictly necessary cookies

These are required for the basic operation of the website, including storing your privacy choices and, where needed, protecting the website against bots and abuse (Cloudflare cookie __cf_bm). They are always active and do not require consent (Art. 6(1)(f) GDPR – legitimate interest; § 25(2) No. 2 TDDDG).

Language choice (senf_lang): when you choose a language in the language selector, we store your choice (“en” or “de”) for one year in the cookie senf_lang, so the homepage opens in that language on your next visit. It is set only when you make that choice and, like the strictly necessary cookies, does not require consent.

Statistics – Hotjar

We use Hotjar, a web analytics and behaviour-insights service provided by Hotjar Ltd., Level 2, St Julian’s Business Centre, 3, Elia Zammit Street, St Julian’s STJ 1000, Malta. Hotjar helps us understand how visitors interact with our website (for example clicks, scrolling, and aggregated usage patterns) so we can improve it. For this purpose Hotjar sets cookies and may process device and usage data.

Hotjar belongs to the “Statistics” category and is loaded according to the rules above: in the consent region only with your consent, elsewhere by default with the option to object via “Privacy choices”. Further information is available in Hotjar’s privacy policy at https://www.hotjar.com/legal/policies/privacy/.

Statistics – Ploy analytics and visitor identification

Our website is operated on the platform of Ploy, Inc., 2 Embarcadero Center, 8th Floor, San Francisco, CA 94111, USA. Ploy provides built-in website analytics on our behalf. It records page views, navigation, referrer, device type and an approximate location derived from the IP address (country, region, city), and stores identifiers in your browser (ploy_session, ploy_anon_id) to distinguish visits.

Ploy also provides visitor identification. It matches a visit against third-party business contact data and can identify the company associated with the visit and, in some cases, the individual person, including their name, job title, employer and LinkedIn profile. According to Ploy, persons are identified only for visitors located in the USA, unless the person already has a relationship with us (for example, after contacting us through a form); for visitors from the EU/EEA and the United Kingdom, Ploy does not create new identifications. We use this information for B2B sales follow-up: to recognise business interest in our services and to contact relevant people at these companies. We do not sell this data. Data may be processed in the USA.

Ploy analytics and visitor identification belong to the “Statistics” category. In the consent region, our website sends no usage data to Ploy analytics until you consent to statistics. Elsewhere, both are active by default; you can object at any time via “Privacy choices” by switching off “Statistics”, or with a Global Privacy Control signal. After that, our website no longer sends usage data from your browser to Ploy analytics.

Marketing – LinkedIn Insight Tag

We use the LinkedIn Insight Tag, provided by LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland. The Insight Tag lets us measure the results of our LinkedIn advertising, show our ads on LinkedIn to people who visited our website, and receive aggregated reports about the professional characteristics of our website visitors (for example industry or job function). For this purpose LinkedIn sets cookies and processes data such as your IP address, browser and device information, the pages you view and, if you are logged in to LinkedIn, information linked to your LinkedIn account. Data may be transferred to the USA; LinkedIn is certified under the EU-U.S. Data Privacy Framework.

The LinkedIn Insight Tag belongs to the “Marketing” category and is loaded according to the rules above: in the consent region only with your consent, elsewhere by default with the option to object via “Privacy choices”. Further information is available at https://www.linkedin.com/legal/privacy-policy.

Marketing – Google Ads

We use Google Ads conversion tracking (gtag.js), provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. It shows us whether a visit that started from one of our Google ads leads to an action on our website, such as a demo request, contact or sign-up, and may be used to show our ads again to people who visited our website (remarketing). For this purpose Google sets cookies (for example _gcl_au) and processes data such as your IP address, browser and device information, the pages you view and information about the ad you clicked. Data may be transferred to the USA; Google is certified under the EU-U.S. Data Privacy Framework.

Google Ads belongs to the “Marketing” category and is loaded according to the rules above: in the consent region only with your consent, elsewhere by default with the option to object via “Privacy choices”. Further information is available at https://policies.google.com/privacy.

6. Data Security and Storage

We take appropriate technical and organizational measures to protect your personal data against loss, misuse, and unauthorized access.

All applicable data protection laws in Germany and the EU (GDPR) are observed.

Please note that data transmission over the internet may have security vulnerabilities.

7. Rights of Data Subjects

You have the following rights under the GDPR:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object (Art. 21 GDPR)
• Right to withdraw consent (Art. 7(3) GDPR)
• Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)

8. Hosting and Contact Forms (Ploy)

Provider: Ploy, delivered via Cloudflare’s global infrastructure.

Our website is built and hosted using the Ploy platform and delivered via Cloudflare. The platform processes technical data required to deliver the website.

Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA, delivers our website through its global network, protects it against attacks and abuse, and derives the visitor’s country from the IP address, which we use for the region rule described in Section 5. Data may be processed in the USA; Cloudflare is certified under the EU-U.S. Data Privacy Framework. Further information is available at https://www.cloudflare.com/privacypolicy/.

This may include:

• IP address (processed in a minimized/anonymized form where possible)
• Browser and device information
• Access timestamps

Contact Form

When you submit a message via our contact form, the data you provide (e.g., email address and message) is processed to handle your request.

This data is transmitted and stored via the Ploy platform’s infrastructure and used solely for communication purposes.

Legal basis:

• Art. 6(1)(b) GDPR (pre-contractual measures)
• Art. 6(1)(f) GDPR (legitimate interest)

9. Changes to this Privacy Policy

We reserve the right to update this privacy policy to reflect legal or technical changes. The latest version is always available on our website.

Last updated: 26 October 2026