We take the protection of your personal data seriously and treat it confidentially, in line with the applicable data-protection laws (GDPR, German BDSG, German TTDSG) and this privacy policy. Personal data means any information that can identify you as an individual.
1. Data controller
The controller responsible for processing personal data on this website is:
TerraTransfer GmbH
Ottostraße 19a
44867 Bochum
Germany
Phone: +49 2327 83 44 85-1
Fax: +49 2327 83 44 85-7
Email: info@terratransfer.de
Managing director: Marcel Delker · Commercial register: Bochum local court, HRB 6778 · VAT ID: DE209458277
2. Hosting and server logs
This website is hosted by Netlify, Inc. (44 Montgomery Street, Suite 300, San Francisco, CA 94104, USA). Netlify operates CDN edge servers in the EU for European visitors. Each request technically requires processing of the following data in server logs:
- anonymised/truncated IP address of the requesting device
- date and time of the request
- requested URL and HTTP status code
- amount of data transferred
- referrer (previous page, if transmitted)
- browser and operating system used (User-Agent)
This data is used solely for the technical operation, security (e.g. attack detection) and error analysis and is not merged with other data sources. Legal basis is Art. 6(1)(f) GDPR (legitimate interest in stable and secure operation). Transfer to the United States may take place under the EU-US Data Privacy Framework and Standard Contractual Clauses; we have a Data Processing Agreement (DPA) in place with Netlify.
3. SSL/TLS encryption
This website uses SSL/TLS encryption throughout. You can recognise this from the "https://" in the address bar and the lock icon in your browser. Data you submit (e.g. via the contact form) cannot be read by third parties as a result.
4. Cookies
This website does not use any tracking or advertising cookies. No cookies are used for analytics, audience measurement or marketing, therefore no cookie banner is shown. Any technically strictly necessary session cookies (e.g. security tokens for form submissions handled by Netlify) are deleted automatically at the end of your session. Legal basis for such strictly necessary cookies: Art. 6(1)(f) GDPR.
5. Contact form
When you send us a message via the contact form, the information you provide (name, organisation, email address, topic, message) is processed to handle your enquiry and any follow-up questions. Submission is handled by a server function hosted at Netlify (Netlify, Inc., 44 Montgomery Street, Suite 300, San Francisco, CA 94104, USA), which forwards the message via SMTP to our central inbox info@terratransfer.de. The mail provider and the storage location of that inbox is 1&1 IONOS SE, Elgendorfer Straße 57, 56410 Montabaur, Germany; servers located in Germany. You also receive an automatic acknowledgement at the address you provided. We have data processing agreements (DPAs) in place with both Netlify and IONOS under Art. 28 GDPR; transfer to the United States via Netlify may take place under the EU-US Data Privacy Framework and Standard Contractual Clauses. We do not pass this data on to third parties without your consent.
Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures) or Art. 6(1)(a) GDPR (consent), and Art. 6(1)(f) GDPR (legitimate interest in efficient processing). The data is deleted once the purpose is fulfilled (e.g. when your enquiry has been handled) or you ask us to delete it. Mandatory statutory retention obligations (especially under commercial and tax law) remain unaffected.
6. Newsletter sign-up
If you sign up for our newsletter, we process the email address you provide for the purpose of sending you the newsletter. Sign-up follows a double opt-in procedure: after submitting the form you receive a confirmation email with a link that you have to click actively. Only then will we send newsletters to your address. This ensures that nobody can sign up using somebody else's email.
Newsletter content covers updates on devices, firmware releases and field best practices. You can unsubscribe at any time, either via the unsubscribe link in every newsletter email or simply by emailing us. After unsubscribing, your email address is removed from the distribution list.
For the technical delivery and managing the subscriber list, we use the service provider Brevo (Sendinblue SAS, 106 boulevard Haussmann, 75008 Paris, France). A data processing agreement (DPA) under Art. 28 GDPR is in place with Brevo. Brevo processes the data exclusively on servers within the European Union (France) and does not use it for its own purposes. Newsletter emails are sent from the technical subdomain mail.terratransfer.de (DKIM- and DMARC-authenticated); you will see this subdomain as the sender domain in the email header. Brevo privacy policy: brevo.com/legal/privacypolicy.
To meet our accountability obligation under Art. 7(1) GDPR, we log your email address, IP address, the timestamp of sign-up and the timestamp of the confirmation click when you subscribe. We retain this data until you withdraw your consent.
Legal basis: Art. 6(1)(a) GDPR and (for German recipients) § 7(2) no. 3 UWG, your explicit consent. Processing by Brevo: Art. 28 GDPR (commissioned processing).
7. AI assistant (chat widget)
On the German-language pages of this website we offer an AI-powered chat assistant that answers questions about our products, applications and service. The assistant is opt-in: it only becomes active once you open the chat widget and explicitly accept the data-processing notice. On the English- and Dutch-language pages the assistant is currently not integrated.
When you use the assistant we process the following data:
- the text you enter and the course of your conversation within the current session,
- technical request metadata (timestamp, IP address via the server logs covered in §2),
- your consent is stored via a strictly necessary entry in localStorage (
tt_chat_consent_v1), so that the notice dialog does not reappear on every visit.
To generate the responses we forward your input and the conversation history to our processor Anthropic, PBC (548 Market Street, PMB 90375, San Francisco, CA 94104-5401, USA). We use the Claude Haiku model via the Anthropic API. Anthropic processes API inputs solely to fulfil the request and does not use them to train its own models. We have entered into a Data Processing Addendum with Anthropic in accordance with Art. 28 GDPR; the transfer to the United States is based on the EU-US Data Privacy Framework and Standard Contractual Clauses. Anthropic privacy notice: anthropic.com/legal/privacy. For operational reasons we may alternatively use Mistral AI SAS (15 Rue des Halles, 75001 Paris, France) as a processor; in that case requests are processed exclusively on servers within the European Union. The notice dialog inside the chat widget tells you which provider is currently in use.
If you raise a consultation or quotation request in the chat and share contact details (name, email, organisation), we forward your request together with the conversation history internally to info@terratransfer.de so our sales team can call you back or reply by email. This lead handover uses the same email infrastructure as the contact form (see §5).
The legal basis is Art. 6(1)(a) GDPR (consent, given via the notice dialog). You can withdraw your consent at any time with effect for the future by no longer using the chat widget and removing the localStorage entry tt_chat_consent_v1 from your browser settings. We do not retain conversation data beyond the current session; any lead data we receive is governed by the retention and deletion logic in §5.
Please do not enter particularly sensitive information (e.g. health, financial or social-security data) into the chat — the assistant is intended for general product and service questions.
8. Embedded YouTube videos
On some pages we embed videos from YouTube (operated by Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland). The embedding uses a click-to-load pattern: when our pages load, only a local thumbnail and a play button are displayed. No connection to YouTube/Google is established at this point.
Only when you actively click the video, the YouTube player is loaded and your IP address, the URL of the page and possibly other information are transmitted to YouTube. We have no influence on this. Further information on YouTube/Google's data processing: policies.google.com/privacy.
Legal basis for providing the click-to-load preview: Art. 6(1)(f) GDPR. By clicking, you also consent to the data processing triggered by YouTube/Google (Art. 6(1)(a) GDPR).
9. External content and links
Some pages link to documents hosted on raw.githubusercontent.com (GitHub, Inc., 88 Colin P. Kelly Jr. Street, San Francisco, CA 94107, USA), typically our user manuals and datasheets in the repository TerraTransfer/Anleitungen-Manuals. When you click such a link, your IP address and HTTP headers are transmitted to GitHub. GitHub privacy notice: docs.github.com/site-policy.
We also link to our LinkedIn company page (LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland). Data is transmitted to LinkedIn only when you actively click the link; our pages themselves do not embed any LinkedIn tracking pixels or similar.
10. Legal basis
Unless stated otherwise in the individual section, processing is based on the following GDPR provisions:
- Art. 6(1)(a), consent (e.g. newsletter, playing embedded YouTube videos)
- Art. 6(1)(b), necessary for performing a contract or pre-contractual measures (e.g. contact form for enquiries)
- Art. 6(1)(c), legal obligations (e.g. statutory retention periods)
- Art. 6(1)(f), legitimate interests (e.g. technically necessary server logs, website security)
11. Your rights as a data subject
You have the following rights regarding your personal data:
- Access to the data we store about you (Art. 15 GDPR)
- Rectification of inaccurate or incomplete data (Art. 16 GDPR)
- Erasure of your data (Art. 17 GDPR)
- Restriction of processing (Art. 18 GDPR)
- Data portability in a structured, common format (Art. 20 GDPR)
- Objection to processing (Art. 21 GDPR)
- Withdrawal of any consent given, with effect for the future (Art. 7(3) GDPR)
Please direct your enquiry to info@terratransfer.de or to the postal address above. You also have the right to lodge a complaint with a data-protection supervisory authority (Art. 77 GDPR). The competent authority for TerraTransfer GmbH is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia, P.O. Box 20 04 44, 40102 Düsseldorf, Germany, ldi.nrw.de.
12. Changes to this policy
We update this privacy policy when legal requirements change or when we add new tools to the website. The version available here at any time is the binding one.
