Privacy Policy

This English text is a non-binding translation. The German version prevails.

1 · Controller

Crosby Thirty-Three GmbH
Adalbertstrasse 74, 10997 Berlin, Germany
Represented by: Hans Christoph Luther
Email: contact@crosby33.com

2 · Hosting and server log files

This website is hosted by Cloudflare (Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA). When the site is accessed, information is automatically recorded in server log files (including IP address, date and time of access, requested file, browser type, referrer URL). Processing is carried out to ensure secure and stable operation on the basis of Art. 6(1)(f) GDPR. Transfer to the USA may occur; it is safeguarded by the EU Commission’s Standard Contractual Clauses (processing under Art. 28 GDPR).

3 · Contact by email or contact form

If you contact us by email or use the contact form, we process your name, email address, message, and associated technical request metadata to handle your enquiry. The legal basis is Art. 6(1)(b) or (f) GDPR. The data is used only to respond to your enquiry and reasonable follow-up; it is deleted once it is no longer required and no statutory retention obligations apply.

The form is delivered through Formspark, operated by Trampoline Software SRL, Ghent, Belgium. Formspark receives the submitted fields and standard HTTP metadata and processes them on our behalf to deliver the enquiry and filter spam. Its infrastructure is hosted in Ireland. See the Formspark privacy policy.

The form also uses Botpoison for invisible spam protection. When the form is submitted, the browser requests a proof-of-work challenge. Botpoison receives the website hostname, public key, and standard network metadata such as the IP address; the form’s name, email, and message fields are not sent directly to Botpoison. See the Botpoison privacy policy.

4 · No analytics or advertising tracking

This website uses no analytics, advertising, or behavioural tracking services and does not share data with advertisers or data brokers. The technical services described above process only the data needed to host the site, protect the form from abuse, and deliver enquiries.

5 · Your rights

You have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20), and objection (Art. 21 GDPR). You have the right to lodge a complaint with a supervisory authority. The competent authority is the Berlin Commissioner for Data Protection and Freedom of Information.

6 · TLS encryption

This website uses TLS encryption to protect data in transit.