Privacy Policy

1. Controller

The controller responsible for data processing on this website is:

True Performance GmbH
Johanna‑Waescher‑Straße 5, 34131 Kassel, Germany
Email: [email protected]
Phone: +49 561 986 806 70

2. Overview

This site is built as static pages. We do not set cookies and we do not embed third party trackers or advertising. The personal data processed is the server log data required to deliver the site securely, the cookieless usage statistics described in section 6, and any details you send us when you get in touch or request a quote.

3. Hosting

This website is hosted on Cloudflare Pages, a service of Cloudflare, Inc. When you visit the site, Cloudflare processes technical connection data on our behalf so the pages can be delivered and protected against attacks. Processing takes place on the basis of our legitimate interest in a secure and efficient presentation of our website (Article 6 (1) (f) GDPR). A data processing agreement and the EU standard contractual clauses are in place with the provider.

4. Server log files

Each time the site is accessed, the hosting infrastructure automatically records technical information that your browser transmits: the anonymized or shortened IP address, the date and time of the request, the page requested, the referring page, and details of your browser and operating system. This data is used solely to operate, secure and improve the website and is not combined with other data or used to identify you. The legal basis is Article 6 (1) (f) GDPR. Log data is retained only for a short period and then deleted.

5. Contacting us

If you contact us by email, or through a contact or planning form once it is available, we process the details you provide, such as your name, email address, phone number and message, in order to handle your request. The legal basis is Article 6 (1) (b) GDPR where your request relates to a contract or its initiation, and otherwise Article 6 (1) (f) GDPR based on our interest in responding to enquiries. We keep this data for as long as needed to handle your request and in line with statutory retention periods.

6. Statistics without cookies, no tracking

To understand how the site is used we run Cloudflare Web Analytics, a service of Cloudflare, Inc. It counts page views, visits, pages, referring sites, countries, browsers, device types and page speed. It does not set cookies, does not store anything on your device, and does not fingerprint visitors through the IP address or browser data. The data is pseudonymous and cannot be used to identify you; we only see aggregated figures. Processing takes place on the basis of our legitimate interest in understanding and improving our website (Article 6 (1) (f) GDPR) and is covered by our data processing agreement with Cloudflare. Because these statistics store nothing on and read nothing from your device, they need no consent under section 25 TDDDG; the banner you may see concerns only the optional session recordings in section 7. One exception applies to the Display Designer: it remembers the layout of its own screen, such as the width of the result column, in your browser's local storage. This is a function you use directly, it contains no personal data and it is never sent to us; clearing the site data in your browser removes it. In addition we keep our own cookieless statistics on our hosting at Cloudflare: for each page view and for a few interactions (for example opening the Display Designer, downloading a specification, clicking an e-mail address, scrolling) we count the page, the previous website, the country, region and city, the network the request came from (the name of the internet provider or company network as registered for the address block), the device type, browser family, operating system, language, the hour of the day and the time spent on the page. Your IP address is used only at the moment of the request to derive these values and to form a hash that is salted with a random value valid for one day; the address itself is never stored, the hash cannot be reversed, and salt and hashes are deleted the next day. No cookie is set, nothing is stored on your device, and there is no identifier that would link two visits. What we keep are counts per day. Legal basis is our legitimate interest in understanding which parts of the site are used (Article 6 (1) (f) GDPR). We do not load third party content that would track you. If we add features in future that change this, we will update this policy and, where required, ask for your consent first.

7. Session recordings with Microsoft Clarity, only with your consent

With your consent we use Microsoft Clarity, a service of Microsoft Ireland Operations Ltd. and Microsoft Corporation, USA. Clarity records how visitors use the pages, mouse movement, scrolling and clicks, and builds heatmaps and session replays from it. Text you type into forms is masked before it leaves your browser. Clarity sets cookies (_clck, _clsk) and processes technical data such as a shortened IP address, browser and device. None of this starts before you click Accept in the banner; if you decline or do not decide, Clarity is never loaded. The legal basis is your consent (Article 6 (1) (a) GDPR and section 25 (1) TDDDG). Data may be processed in the USA; Microsoft is certified under the EU-US Data Privacy Framework and we have a data processing agreement with Microsoft. You can withdraw your consent at any time with effect for the future: change your choice. Microsoft's privacy statement: privacy.microsoft.com.

8. Your rights

Under the GDPR you have the right to access your personal data (Article 15), to have it corrected (Article 16) or erased (Article 17), to restrict its processing (Article 18), to data portability (Article 20), and to object to processing (Article 21). Where processing is based on consent, you may withdraw that consent at any time with effect for the future. To exercise any of these rights, contact us using the details above.

9. Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is Der Hessische Beauftragte für Datenschutz und Informationsfreiheit, Wiesbaden, Germany.