Privacy policy

1. Controller

Email: [email protected]

2. Website delivery and security

The public website ternfold.com is delivered through Cloudflare Pages. The provider is Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA. Cloudflare processes connection and access data, particularly your IP address, access time, requested URL, HTTP status, device and browser information transmitted by your browser, and, where applicable, the referring page.

This processing serves to deliver content, maintain stability, and protect against abuse and attacks. The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is the secure and reliable operation of the website. The website cannot be accessed without the technically necessary connection data.

Cloudflare may also process data outside the EU or EEA, particularly in the USA. Cloudflare describes the EU-US Data Privacy Framework and, where necessary, EU Standard Contractual Clauses as the bases for these transfers. Details and contractual terms are available in the Cloudflare Data Processing Addendum, with further information in Cloudflare's privacy policy.

Technical data is processed only for as long as necessary to deliver the website, analyse errors, and respond to security incidents. Retention periods at Cloudflare depend on the service, its configuration, and the security purpose. Specific incidents may require longer retention.

3. Cookies, analytics, and external content

The website itself does not use analytics or marketing cookies and does not use web analytics. The website includes forms for launch updates (see Section 4) and demo requests (see Section 5). There are no user accounts or social media plug-ins. Animations are delivered as video files through the website. Images and stylesheets are delivered through the website; fonts are not loaded from external font providers.

We use Cloudflare Turnstile to protect the forms against automated abuse. The check loads when you use a form. Cloudflare processes technical signals such as your IP address, browser information, and the website visited. The check may run automatically or require a brief interaction. Our legitimate interest is protection against spam and abusive email sending (Article 6(1)(f) GDPR). Further information is available in the Turnstile Privacy Addendum.

We also limit the number of form requests. For this purpose, we store counters in Cloudflare D1 with identifiers calculated from IP and email addresses using a secret key. The IP address is not stored in plain text in these counters. The identifiers and counters expire after no more than 48 hours and are deleted during the next scheduled cleanup.

On the public website, Cloudflare may use technically necessary cookies when security checks are required. Information about these security features is available in Cloudflare's cookie documentation. Where access to your device is strictly necessary, it is based on Section 25(2), no. 2 TDDDG. Subsequent processing of personal data serves security purposes under Article 6(1)(f) GDPR.

4. Launch updates by email

When you sign up for launch updates, we process your email address, chosen language, the wording and version of your consent, and the time of your signup. We use this information to send you updates about the launch of ternfold and to document your signup.

We use Brevo for signup and email delivery. You first receive an email with a confirmation link. We add your address to the mailing list only after you confirm. Processing is based on your consent under Article 6(1)(a) GDPR. Further information is available in Brevo's privacy policy.

To avoid duplicate sending requests and identify errors, we store a technical transaction record in Cloudflare D1 for up to 30 days after the last sending attempt. It contains a derived identifier, timestamp, language, and processing status. This record does not contain your email address in plain text. It is then deleted during the scheduled cleanup.

During delivery, Brevo processes technical sending data, such as the sending time, delivery status, and error messages. The current sending configuration also records email opens and clicks on links in emails. Brevo uses tracking pixels and redirected links for this purpose.

You can withdraw your consent at any time with effect for the future, for example through the unsubscribe link in a launch email or by sending a message to [email protected]. After you unsubscribe, we will not send you further launch updates. Data is deleted as soon as it is no longer needed for its purpose. Necessary records and information needed to honour your unsubscribe request may be retained beyond that point.

5. Demo requests and contact by email

When you request a demo, we process your name, email address, and any information you voluntarily provide about your company and process. We also process the language and time of the request. We use this information to handle your request and contact you about a demo. A demo request does not sign you up for launch updates.

Demo requests are stored in a Cloudflare D1 database with EU jurisdiction. For internal notifications, we transmit the request data to Brevo. Brevo sends it by email to our Microsoft 365 mailbox. Your request remains stored if the notification fails. The information in Section 2 also applies to processing by Cloudflare.

When you write to us, we process your email address, the contents of your message, and any other information you provide to answer your enquiry. We handle general enquiries on the basis of Article 6(1)(f) GDPR (legitimate interest in communication). If your enquiry relates to a contract or pre-contractual steps taken at your request, Article 6(1)(b) GDPR applies.

Incoming messages are processed in Microsoft 365. As a technical service provider, Microsoft is involved in processing messages and connection data. Further information is available in Microsoft's privacy statement.

Requests and correspondence are deleted once the enquiry has been fully handled and further retention is no longer necessary for communication, legal obligations, or the establishment, exercise, or defence of legal claims. You decide which information to send us. Without a way to contact you, we cannot reply.

6. Your rights

Subject to the legal requirements, you have the right of access, rectification, erasure, restriction of processing, and data portability (Articles 15-20 GDPR). Where processing is based on consent, you can withdraw that consent at any time with effect for the future.

Right to object: If processing is based on Article 6(1)(f) GDPR, you can object at any time on grounds relating to your particular situation (Article 21 GDPR).

To exercise your rights, simply send a message to [email protected]. We do not carry out automated decision-making, including profiling.

You can also lodge a complaint with a data protection supervisory authority (Article 77 GDPR), particularly in the place where you live, work, or where the alleged infringement occurred. For North Rhine-Westphalia, this is the State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia (LDI NRW).