---
title: "Privacy policy"
description: "Privacy Corevatis UG"
canonical: "https://corevatis-redesign.pages.dev/en/privacy/"
lang: en
schema_type: WebPage
hreflang:
  de: "https://corevatis-redesign.pages.dev/de/datenschutz/"
  en: "https://corevatis-redesign.pages.dev/en/privacy/"
---
# Privacy policy

Controller: Corevatis UG (haftungsbeschränkt), Albert-Einstein-Straße 57, 41751 Viersen, Germany, represented by managing director Mike Berndt. Contact: hallo@corevatis.de, phone +49 2162 9193040.

Hosting: Cloudflare Pages. This website sets no tracking cookies and embeds no analytics services that require consent. A cookie banner is therefore not necessary.

Server logs and delivery: When you access the website, Cloudflare processes technically necessary connection data (IP address, time, page requested, user agent) to deliver the site and to fend off attacks. Legal basis is Art. 6(1)(f) GDPR (legitimate interest in secure operation). Fonts, scripts and images are served from our own domain; no fonts or scripts are loaded from Google or other third parties — with the exception of the spam protection on the contact page described below.

Audience measurement with Cloudflare Web Analytics: If we enable this service, we use Cloudflare Web Analytics provided by Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA. The service is cookieless and does not use fingerprinting. Only aggregated reach data is collected (page visited, referrer, country, anonymised usage metrics such as Web Vitals). No device- or user-level profile is created. Legal basis is Art. 6(1)(f) GDPR (legitimate interest in needs-based design and statistical evaluation of this website).

Data transfer to the USA: As Cloudflare is based in the USA, a transfer to the USA cannot be excluded. Cloudflare is certified under the EU-U.S. Data Privacy Framework; additionally Standard Contractual Clauses are in place (Art. 46(2)(c) GDPR). More information: https://www.cloudflare.com/privacypolicy/

Contact by email or form: If you contact us by email or via the contact form, we process your details (name, company, email address, content of the inquiry) to handle the inquiry and any follow-up questions. Legal basis is Art. 6(1)(b) GDPR (pre-contractual measures) and Art. 6(1)(f) GDPR (legitimate interest in responding). Data is deleted once it is no longer required for this purpose and no statutory retention obligations apply.

Contact via WhatsApp: We offer WhatsApp as an additional contact channel on the same phone number (WhatsApp Business; provider for users in the EEA: WhatsApp Ireland Limited, Merrion Road, Dublin 4, Ireland — a Meta company). Using it is voluntary; phone, email and the contact form reach us just as well. If you message us on WhatsApp, we process your phone number, your profile name and the content of your message in order to answer the inquiry. Legal basis is Art. 6(1)(b) GDPR (pre-contractual measures) or Art. 6(1)(f) GDPR (legitimate interest in responding). Message content is end-to-end encrypted; WhatsApp does, however, process metadata (including phone numbers, timestamps, device and connection data) as its own controller and may transfer it to group companies in third countries. We have no influence over this. Please do not send us credentials, confidential documents or special categories of data (Art. 9 GDPR) via WhatsApp — use email or the phone for those. We retain WhatsApp messages only for as long as handling the inquiry requires. WhatsApp privacy information: https://www.whatsapp.com/legal/privacy-policy-eea

Contact form and spam protection: The contact form is protected by Cloudflare Turnstile (Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA). When you open the contact page, your browser loads a script from challenges.cloudflare.com; Cloudflare processes technical data such as IP address and browser characteristics to detect automated requests. Turnstile sets no tracking cookies and builds no user profile. Legal basis is Art. 6(1)(f) GDPR (legitimate interest in protection against abuse); for transfers to the USA see above. The form data itself is transmitted to and stored on a system we operate ourselves on our own infrastructure in Germany; it is not passed on to third parties.

Your rights: You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection to processing based on legitimate interests (Art. 21 GDPR). You may also lodge a complaint with a data protection supervisory authority; for NRW: Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen.

Objection and privacy questions: please write to hallo@corevatis.de.