Privacy Policy

Last updated: 19 August 2026

This Privacy Policy explains how CERTAINCE GmbH (“CERTAINCE”, “we”) processes personal data when you visit certaince.com, contact us or communicate with us as part of our business. We are the controller for the processing described here unless we state otherwise.

We process personal data only for the purposes and on the legal bases described below. We do not sell personal data. In this Privacy Policy, personal data means any information relating to an identified or identifiable natural person as defined by the EU General Data Protection Regulation (“GDPR”).

What kind of Personal Data is processed and for what purpose?

Usage Data

When you visit our website, technical request data is processed so that the website can be delivered securely and reliably. This may include your IP address, the requested URL, referrer URL, date and time of access, browser, operating system, device information and similar server or content delivery network log data. We process this data to provide the website, maintain security, diagnose faults and prevent abuse. The legal basis is Art. 6 para. 1 point f) GDPR due to our legitimate interest in providing a secure and functional website. Our website is hosted by Vercel Inc. (USA); the deployment region is located in Frankfurt, Germany. Content delivery and security services are provided by Cloudflare (see the Cloudflare section).

Optional analytics is not active by default. It is enabled only if you consent through the cookie banner or cookie settings. Functional browser and server error tracking may run independently so that we can diagnose faults, maintain security and keep the website reliable.

Cookies and Consent Records

CERTAINCE uses necessary cookies and local storage to operate the website and to remember your cookie choice. We also store a pseudonymous visitor ID together with your consent decision, the banner version and the time of your choice so that we can demonstrate consent and compliance. The legal basis for this consent record is Art. 6 para. 1 point c) GDPR.

Optional PostHog analytics cookies and local storage are used only after you consent to analytics. You can reject optional analytics, withdraw consent or change your choice at any time through the cookie settings link in the footer or by deleting stored browser data. If you reject or withdraw consent, optional analytics capture is disabled.

PostHog Analytics and Error Tracking

We use PostHog for optional website analytics and functional browser and server error tracking. PostHog is the only analytics and error tracking provider on the public website. We do not use Google Analytics, Hotjar, advertising cookies or Google Tag Manager. We use PostHog's EU cloud, hosted in the European Union.

Optional analytics is not active by default. If you consent, PostHog may process a pseudonymous visitor ID, event names and properties, pages or content viewed where we explicitly track views, clicked share or contact actions, browser and device information, referrer information and approximate location derived from network data.

Functional error tracking may process technical error context such as error messages, stack traces, affected routes, browser and device context and sanitized URLs. It does not use session replay, console-log capture, contact-form message bodies or optional analytics cookies.

The legal basis for optional PostHog analytics is your consent pursuant to Art. 6 para. 1 point a) GDPR and, where cookies or similar browser storage are used, your consent under applicable ePrivacy rules and Section 25 TDDDG. You may withdraw your analytics consent at any time through the cookie settings link in the footer. The legal basis for functional error tracking is Art. 6 para. 1 point f) GDPR due to our legitimate interest in operating a secure, reliable and fault-tolerant website. More information about PostHog is available at https://posthog.com/privacy.

Email and Contact Form

If you contact us by email or through the contact form, we process your name, email address, company name if provided, message and any other information you provide. We use this data to answer your inquiry and for the related follow-up communication. The public website does not store a separate submission record.

Inquiries you send us by email or through the contact form are processed in our mailbox operated by Microsoft (Microsoft 365, hosted in the European Union); contact form submissions reach us as an email notification delivered via Brevo (EU). Replies may occasionally be prepared with the assistance of AI systems provided by Anthropic (USA); in that case inquiry content may be transferred to Anthropic, subject to the safeguards described in the sections on international transfers and Anthropic. Every reply is reviewed and approved by a human before it is sent.

WhatsApp Communication

You can also reach us via WhatsApp. For this we use the WhatsApp Business Platform (Cloud API) provided by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, Ireland (“Meta”). When you message us on WhatsApp, we process your mobile phone number, your WhatsApp profile name, the content of your messages including any media you send and the message timestamps. We use this data to handle and answer your inquiry and for the related customer communication.

Messages are stored in our own infrastructure hosted at Cloudflare, which is contractually restricted to storage locations in the European Union (see the Cloudflare section). Meta processes message data as a processor as part of providing the WhatsApp Business Platform; your own use of WhatsApp is additionally governed by WhatsApp's privacy policy. Replies may be prepared with the assistance of AI systems provided by Anthropic (USA); message content may be transferred to Anthropic for this purpose, subject to the safeguards described in the section on international transfers. Every reply is reviewed and approved by a human before it is sent.

The legal basis is Art. 6 para. 1 point b) GDPR where your inquiry relates to entering into or performing a contract, and otherwise Art. 6 para. 1 point f) GDPR due to our legitimate interest in efficient communication via the channel you have chosen. If you prefer not to have data processed via WhatsApp, you can always reach us through the other contact channels.

Access and Disclosure to Third Parties

We do not sell personal data. We share personal data only with service providers we need to operate the website and answer inquiries, and only to the extent required for those purposes. Where these providers act as processors, they process personal data under contractual safeguards and only on our instructions.

We may also disclose personal data where statutory law or a binding order from a public authority or court requires us to do so.

Notice regarding Third-Party Websites

Our website contains links to websites operated by third parties. The respective operator is responsible for processing personal data on those websites. Please read its privacy information before providing personal data there.

Your Data, Your Rights

You have a right to be informed of Personal Data processed by CERTAINCE, a right to rectification/correction, erasure and restriction of processing. You also have the right to receive from CERTAINCE a structured, common and machine-readable format of Personal Data you provided to us.

To act on your request, we need to match you to the Personal Data we hold, for example via the email address or WhatsApp number you used to contact us. We hold Personal Data about you only where you have contacted us directly and/or used our website, as described in this Privacy Policy.

To exercise any of the rights mentioned in this Privacy Policy and/or in the event of questions or comments relating to the use of Personal Data you may contact CERTAINCE: hello@certaince.com

Where you have provided consent, you may withdraw it at any time with effect for the future, without affecting the lawfulness of the processing that was carried out prior to withdrawing it. The easiest way to withdraw your analytics consent is the cookie settings link in the footer.

Where Personal Data is processed for the above purposes on the basis of CERTAINCE's legitimate interests, under the GDPR, you may object to such processing at any time. To do so please contact: hello@certaince.com

In addition, you have the right to lodge a complaint with the data protection authority in your jurisdiction.

Duration of Processing

Technical log data is retained only for as long as necessary for delivery, security and troubleshooting. PostHog analytics and error tracking data is retained according to our PostHog project retention settings or until it is no longer required for the purposes described above. Consent records are retained for as long as needed to demonstrate compliance. We retain other personal data only for as long as the purposes described above or statutory obligations require it.

WhatsApp and email inquiries and the related conversation history are deleted no later than two years after the last activity in the conversation, unless statutory retention obligations (for example for commercial correspondence under German commercial and tax law) require longer storage.

International Transfers of Personal Data

CERTAINCE's customer information is stored in the European Union. In some limited cases, customer information may be accessed from, or other data (e.g., e-mail) may be transferred to, the United States or other countries which may have data protection laws that are different from the laws where you live. Where personal data is transferred to the United States or other third countries, we rely on the European Commission's Standard Contractual Clauses, concluded with the respective provider as part of a data processing agreement, and, where the provider is certified, on the EU-U.S. Data Privacy Framework. This applies in particular to Anthropic (AI-assisted reply drafting, see the Anthropic section), Meta Platforms (WhatsApp Business Platform), Cloudflare and Vercel (infrastructure). You can request a copy of the relevant safeguards via hello@certaince.com.

Cloudflare

Our website also uses the content delivery network services provided by Cloudflare Inc, 701 Townsend St, San Francisco, CA 94107 (USA).

The content delivery network stores the content of our website on the service provider's server. The service provider's server distributes this content to you or your browser when you access our website. Cloudflare processes your IP address and DNS log data, for example.

We use Cloudflare for the purpose of defending against attacks such as “DDos or bot attacks” on our website. Furthermore, data processing aims to shorten the loading times of our website so that the content of our pages is made available to you as quickly as possible.

Personal data may be transferred to third countries. Adequate safeguards or other instruments to ensure compliance with the European data protection principles have been implemented for the comprehensive protection of your data in this case.

The legal basis for the use of Cloudflare is Art. 6 para. 1 point f) GDPR due to our legitimate interest in increasing the security and delivery speed of our website. We have entered into a data processing agreement with Cloudflare.

Refer to the Cloudflare Privacy Policy for more information.

Anthropic

For the AI-assisted preparation of replies to customer inquiries we use services provided by Anthropic, PBC, San Francisco, CA (USA). When a reply is drafted, the content of the relevant conversation may be transmitted to Anthropic for processing. Anthropic processes this data as our processor under a data processing agreement incorporating the EU Standard Contractual Clauses and does not use it to train AI models. Every reply is reviewed and approved by a human before it is sent.

The legal basis is Art. 6 para. 1 point f) GDPR due to our legitimate interest in answering inquiries efficiently. More information: https://www.anthropic.com/legal/privacy.

Revisions to this Privacy Policy

We update this Privacy Policy when our processing activities or legal requirements change. The date shown at the top identifies the current version. We will publish material changes on this website.

Contact Details

CERTAINCE GmbH
Wilhelm-Weber-Str. 34
26133 Oldenburg

+49 441 3091 9602
hello@certaince.com
www.certaince.com

Managing Director: Leopold Behler
Place of Business: Oldenburg
District Court: Oldenburg (Oldenburg) HRB 212326