Privacy Policy

1. Controller

The controller responsible for data processing on this website is:

Threat-Informed Cybersecurity Solutions GmbH
Ober-Saulheimer Straße 15x
55291 Saulheim, Germany
Represented by: Managing Director Daniel Thomas Heessel

Email: kontakt@threat-informed.de
For data protection matters: datenschutz@threat-informed.de

No data protection officer has been appointed, as the legal requirements for a mandatory appointment are not met.

2. Hosting and server log files

This website is operated on servers of Hetzner Online GmbH (Industriestr. 25, 91710 Gunzenhausen, Germany) in data centers in Germany. A data processing agreement pursuant to Art. 28 GDPR is in place with Hetzner.

When you visit the website, our server automatically processes technical access data (so-called server log files): IP address, date and time of access, page accessed, browser type and operating system. This data is required for the technical operation and security of the website (legal basis: Art. 6(1)(f) GDPR, our legitimate interest in secure and stable operation) and is deleted automatically after a short time. It is not combined with other data.

3. Contact form and Urgent Help (Formspree)

For our contact form and the “Urgent Help” callback form, we use the Formspree service of Formspree, Inc. (USA) as a processor. The data you enter is transmitted to us by email via Formspree and is not stored there permanently.

• Contact form: name, email address, company if applicable, your request and the selected category of interest.
• Urgent Help (callback): name, phone number for the callback, optionally email address, the selected category of request (e.g. “An attack is underway or has happened”) and your description of the situation.

The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures at your request) or Art. 6(1)(f) GDPR (handling of general inquiries). As Formspree is based in the USA, the transfer takes place on the basis of the EU standard contractual clauses (Art. 46(2)(c) GDPR). Details: Formspree Privacy Policy ↗

We use your information exclusively to process your request and delete it as soon as it is no longer required for this purpose and no statutory retention obligations apply.

4. Quick Check and Threat Snapshot (PDF)

Our Quick Check (“Who is targeting you?”) processes the information you select in the wizard, namely industry, region and platforms used, on our own backend at Hetzner in Germany in order to show you the appropriate threat analysis. This information is not personal data; we count usage only in aggregated form (e.g. how often an industry was selected), without reference to any individual.

If you also download the Threat Snapshot as a PDF, we process the data you provide for this: company name, email address and your selected profile (industry, region, platforms). We store this data in our own database on our server in Germany; your IP address is not stored in plain text but only as a truncated hash. The legal basis is Art. 6(1)(b) GDPR.

After the download, you receive a confirmation email, and we are notified internally of the request. To send these emails, we use Microsoft 365 (Microsoft Ireland Operations Ltd., Dublin, Ireland) as a processor. Any transfer to third countries by Microsoft is safeguarded by the EU standard contractual clauses and the EU-U.S. Data Privacy Framework.

If you consented to receiving further information when downloading (marketing checkbox), we also use your email address for this purpose (legal basis: Art. 6(1)(a) GDPR). You can withdraw this consent at any time with effect for the future (Art. 7(3) GDPR) by sending an informal email to datenschutz@threat-informed.de.

The data stored in connection with the PDF download is deleted automatically three years after collection, unless you request deletion earlier or a business relationship has been established.

5. Fonts

The fonts used on this website are stored locally on our server and delivered from there. When you visit the website, no connection is established to servers of third-party providers (e.g. Google Fonts).

6. Cookies, tracking and analytics

This website does not set any cookies and does not include any advertising networks. For this reason, it does not need a cookie banner.

To measure reach, we use the privacy-friendly analytics service Plausible Analytics of Plausible Insights OÜ (Västriku tn 2, 50403 Tartu, Estonia). Plausible works without cookies and without cross-site tracking and collects only aggregated statistics: pages visited, referral source, browser type, device type and country of origin. The IP address is processed only transiently to attribute the page view and is not stored; it is not possible to identify individual persons. The data is processed exclusively on servers in the EU. A data processing agreement pursuant to Art. 28 GDPR is in place with Plausible.

The legal basis is Art. 6(1)(f) GDPR: our legitimate interest in data-minimizing, anonymous statistics on the use of our website. You can object to this processing at any time (see Section 7).

7. Your rights

Under the GDPR, you have the following rights:

• Access to the data stored about you (Art. 15 GDPR)
• Rectification of inaccurate data (Art. 16 GDPR)
• Erasure (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Objection to processing based on Art. 6(1)(f) GDPR (Art. 21 GDPR)
• Withdrawal of consent given, with effect for the future (Art. 7(3) GDPR)

To exercise your rights, an informal email to datenschutz@threat-informed.de is sufficient.

You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is the State Commissioner for Data Protection and Freedom of Information of Rhineland-Palatinate (Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Rheinland-Pfalz), Hintere Bleiche 34, 55116 Mainz, Germany.

8. Changes to this privacy policy

We adapt this privacy policy when our website or the legal requirements change. The version published here applies in each case.

As of: August 31, 2026