Privacy Policy

1. Controller

ventodyne GmbH is the controller for the processing described in this notice:

Gaisbergstraße 16
81675 München
Germany
info@ventodyne.com

2. Website hosting and delivery

We use Cloudflare Workers and Cloudflare’s network to deliver and protect this website. Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA, processes technical request information, including IP addresses, requested URLs, timestamps, browser and device information, and security signals. Cloudflare acts as a processor for providing these services on our behalf.

The legal basis is Article 6(1)(f) GDPR: our legitimate interest in a reliable, secure website. Cloudflare and its subprocessors may process data outside the European Economic Area, including in the USA. Cloudflare’s data processing addendum provides for the EU–US Data Privacy Framework where applicable, and EU standard contractual clauses with additional safeguards for transfers not covered by an adequacy decision. Details and copies of these safeguards are available in Cloudflare’s data processing addendum; see also its privacy policy.

3. Cookies, browser storage and external resources

We do not use analytics or advertising cookies, advertising pixels, or embedded third-party maps. The website itself does not store information in local storage or session storage. Fonts are system fonts; images are served with the website. The contact form loads Cloudflare Turnstile for security verification, as described below.

Links to publications, the wind turbine map and other external websites open separate services. Their operators’ privacy notices apply when you visit them.

4. Plausible Analytics

We use Plausible Insights OÜ, Estonia, as our analytics processor to understand aggregate website use and improve our pages, relying on Article 6(1)(f) GDPR. We measure pageviews, referral/campaign sources, browser/device type, approximate location and engagement. Form, download and outbound-link tracking are disabled; no contact contents or custom properties are sent.

Plausible uses no cookies or persistent device identifiers. According to the provider, IP address and User-Agent generate a daily, site-specific identifier; the raw IP address and User-Agent are not stored. Visitor data is processed in the EU. See the data policy and data processing agreement.

5. Contact by email

If you email us, we process your contact details and message to answer your enquiry and, where appropriate, establish or manage a business relationship. Our email provider processes correspondence for delivery and mailbox storage.

The legal basis is Article 6(1)(b) GDPR where the enquiry concerns a contract with you or steps requested by you before entering into one. Otherwise, we rely on Article 6(1)(f) GDPR and our legitimate interest in responding to business enquiries, including communication with representatives of organisations.

6. Contact form

We process your name, email address and message to handle your enquiry and reply. Our hosting and email providers support secure transmission and delivery; technical request data may also be processed for validation and security. Messages are not stored in a website database or logged by the website. Subsequent correspondence is handled in our normal email system.

The legal bases are the same as for email enquiries above. Providing these details is voluntary, but they are needed to process the form and reply. The form does not accept attachments. You may instead contact us by email.

7. Cloudflare Turnstile

Turnstile protects the contact form against bots and spam. It processes IP addresses, TLS fingerprints, User-Agent information, the site key and associated origin. For protecting our form, Cloudflare acts as our processor; we rely on Article 6(1)(f) GDPR and our legitimate interest in secure communications. Where Turnstile accesses information on your device, this is done to secure the contact form you are using. We rely on Section 25(2)(2) TDDDG for these technically necessary accesses.

Cloudflare also acts as a separate controller when using these signals to improve Turnstile’s bot detection, relying on its own legitimate interests. Its Turnstile privacy addendum explains this processing. International transfers are covered by the arrangements described in section 2 and Cloudflare’s privacy information. Email remains available as an alternative to the form.

8. Retention

Contact correspondence is kept while needed to handle enquiries, conduct a business relationship or meet applicable statutory retention obligations. We delete data no longer needed unless another lawful retention reason applies. Statutory retention is based on Article 6(1)(c) GDPR; necessary retention for legal claims may rely on Article 6(1)(f) GDPR.

Technical and analytics data are retained according to the applicable service settings and our account configuration.

9. Your rights

Subject to the applicable conditions, you may request access, rectification, erasure, restriction of processing and data portability. You may object to processing based on legitimate interests for reasons relating to your particular situation. Contact us at info@ventodyne.com to exercise these rights.

10. Supervisory authority

You may complain to a data protection supervisory authority, particularly where you live, work or believe a breach occurred. The authority responsible for private-sector organisations in Bavaria is the Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Promenade 18, 91522 Ansbach, Germany. Its contact and complaint options are available online.

11. Security

This website uses HTTPS/TLS to encrypt data in transit.