Privacy policy

The controller for this website is Ajenna UG (haftungsbeschränkt). Our address and contact details are in the Impressum. For questions about data protection, write to contact@ajenna.com.

This website sets no cookies and uses no analytics, advertising or tracking tools. Fonts and all other files are delivered with this website; loading a page contacts no other services.

If you use the light/dark switch, your browser saves your choice on your device (in its local storage), so the next page uses it too. It is never sent to us. Switching back to match your device’s own setting deletes it. No consent is required for this storage because it is necessary to remember and apply the colour scheme you explicitly selected (§ 25(2) No. 2 TDDDG). There is no automatic expiry; you can also remove the setting by clearing this website’s browser data.

This website is delivered through the network of Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. When you open a page, Cloudflare processes your IP address and technical details of your request (date and time, the page requested, the referring page and your browser type) to deliver the page and to protect the website against attacks. The legal basis is our legitimate interest in a secure and reliable website (Art. 6(1)(f) GDPR). Cloudflare acts on our behalf under a data processing agreement (Art. 28 GDPR). Cloudflare also processes network data as an independent controller, including to protect its network. Further information is available in Cloudflare’s privacy policy.

We also use Cloudflare Workers and Cloudflare Email Service to receive the contact form and deliver it to our mailbox. Cloudflare processes the details you enter on our behalf, under the same data processing agreement, and the safeguards for transfers described below apply to them too.

The data may be processed in the USA. Cloudflare, Inc. is certified under the EU-U.S. and the Swiss-U.S. Data Privacy Framework. For transfers from the EU, the European Commission has adopted an adequacy decision for this framework (Art. 45 GDPR). Since 15 September 2024, the Swiss Federal Council has recognised an adequate level of protection for transfers to US companies certified under the Swiss-U.S. Data Privacy Framework. Cloudflare’s data processing agreement also contains the EU standard contractual clauses as a fallback.

We do not keep our own server request logs; Workers Logs are disabled in our Cloudflare account. Cloudflare does not publish a specific retention period for this website’s request data. For processing on our behalf, its data processing agreement ties retention to the end of the agreement or, if earlier, to when processing is no longer necessary to fulfil contractual obligations. For processing for its own purposes, Cloudflare applies the retention criteria in section 11 of its privacy policy, including processing purposes and legal obligations.

If you email us or use the contact form, we use your email address, your message and any subject you give to answer you. The legal basis is Art. 6(1)(b) GDPR where your message concerns a contract with you or steps you asked for before one; otherwise it is Art. 6(1)(f) GDPR, our legitimate interest in answering enquiries. You are not legally or contractually required to contact us. To answer, we need a reply address and enough information to understand your enquiry; without them, we may not be able to respond.

We delete ordinary enquiries once they are resolved and no further correspondence is expected. Where the law requires us to keep emails, we keep business correspondence for six years and accounting vouchers for eight years, counted from the end of the calendar year; statutory extensions remain applicable. The legal basis for this is Art. 6(1)(c) GDPR together with § 257 HGB and § 147 AO.

Messages from the contact form arrive in the same mailbox as emails. Our mailbox is hosted by Porkbun LLC (USA), which processes emails on our behalf under a data processing agreement (Art. 28 GDPR). Emails are stored in the USA; the transfer relies on the EU standard contractual clauses in that agreement (Art. 46(2)(c) GDPR), with the adaptations for Switzerland. Porkbun uses Amazon Web Services, Inc. in the USA for its infrastructure, including backups.

Your email address and message are required to send the form; the subject is optional. The message also includes the language of the page you sent it from. A Cloudflare Worker checks the form and passes it to Cloudflare Email Service, which delivers it to our mailbox as an email with your address as the reply address. Email previews are turned off in our Cloudflare account. Cloudflare records delivery events for each email (time, delivery status and the receiving mail server’s response) in our account.

To protect the form from misuse, it has a hidden field that people don’t see; messages that fill it in are discarded. We also limit how many messages can be sent from one IP address in a short time (for IPv6, from one network: the first 64 bits of the address). For this, Cloudflare processes the address and a count of messages on our behalf. The legal basis is our legitimate interest in protecting the form from misuse (Art. 6(1)(f) GDPR). The form sets no cookies.

Cloudflare does not publish how long it keeps messages while delivering them, the delivery events and the counts; the retention criteria of its data processing agreement, described under “Hosting”, apply.

This privacy policy covers ajenna.com only. Each of our apps will have its own privacy policy, published with the app.

Subject to the legal conditions, you can ask for access to your data, its correction or deletion, restriction of its processing, and a portable copy. Write to contact@ajenna.com.

Right to object: You may object at any time, on grounds relating to your particular situation, to processing based on Art. 6(1)(f) GDPR.

You can complain to a data protection authority, in particular where you live or work in the EU or where the alleged infringement took place. The authority responsible for us is the Berliner Beauftragte für Datenschutz und Informationsfreiheit.

We update this policy when the website changes. The current version is always on this page.