Privacy Policy
Last updated: October 2026
Note: The German version of this privacy policy (Datenschutzerklärung) is the legally binding version.
1. Data Controller
Wenske Cyber Solutions GmbH
Bastian Wenske
Heidelberger Straße 15
12059 Berlin
Germany
Email: kontakt@wenske-cs.de
Phone: +49 30 8632 2038-0
2. Overview of Data Processing
This website processes personal data in the following cases:
- Hosting and delivery via Cloudflare: automatically whenever the website is accessed (Section 3).
- Consent management via Usercentrics: whenever the website is accessed, to obtain and document your consent (Section 4).
- Web analytics with Contentsquare: only if you have consented in the privacy settings (Section 5).
- Appointment booking via Calendly: only after you click "Load calendar" (Section 6).
- Contact form: when you write to us using the form; the spam protection Cloudflare Turnstile only loads once you open the form (Section 7).
- Contact by email or phone: when you contact us (Section 8).
- Videos (YouTube): only after you click "Play video" (Section 9).
Fonts are delivered together with the website, not via external font services. No social media plugins are integrated; for embedded videos, see Section 9.
3. Hosting and Delivery (Cloudflare)
This website is provided via Cloudflare Pages and delivered through the Cloudflare network. When the website is accessed, Cloudflare automatically processes technical information transmitted by your browser.
Provider: Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA.
The following data is processed:
- IP address of the requesting device
- Date and time of access
- Page accessed (URL)
- Referrer URL (the previously visited page)
- Browser identifier (user agent), such as browser type, browser version and operating system
Purpose: Delivering the website and protecting it against attacks and misuse, for example overload attacks.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in stable, fast and secure provision of the website).
Cloudflare acts as our data processor. A Data Processing Agreement (DPA) pursuant to Art. 28 GDPR has been concluded with Cloudflare.
Transfer to third countries: Cloudflare also processes data in the USA. Cloudflare, Inc. is certified under the EU-U.S. Data Privacy Framework (adequacy decision of the European Commission, Art. 45 GDPR). In addition, EU Standard Contractual Clauses (SCCs) have been agreed (Art. 46(2)(c) GDPR).
Retention period: The retention period is determined by the provider's information: https://www.cloudflare.com/privacypolicy/. We do not merge this data with other data sources.
4. Consent Management (Usercentrics)
We use the consent management platform Usercentrics to obtain, store and document your consent to services that require it. The Usercentrics script is loaded whenever the website is accessed. Services that require consent only run after you have agreed.
Provider: Usercentrics GmbH, Sendlinger Str. 7, 80331 Munich, Germany.
Data processed: Consent status and your choices, device and browser information, timestamp of the decision and pseudonymous identifiers. Loading the script technically requires transmitting your IP address to Usercentrics. Your decision is stored on your device (cookie or browser local storage) so that you are not asked again on every visit.
Legal basis: Art. 6(1)(c) GDPR in conjunction with Section 25 TDDDG (obligation to obtain consent and to be able to demonstrate it, Art. 7(1) GDPR) and Art. 6(1)(f) GDPR (legitimate interest in traceable consent management).
Retention period: The retention period is determined by the provider's information: https://usercentrics.com/privacy-policy/
Changing your settings: You can change or withdraw your consent at any time with effect for the future:
5. Web Analytics (Contentsquare)
With your consent, we use Contentsquare to analyse how our website is used and to make it clearer and easier to use. Sessions are analysed, for example pages visited, clicks, and scroll and mouse movements. Without your consent, Contentsquare does not run.
Provider: Contentsquare SAS, Paris, France.
Data processed: Usage and interaction data, device and browser information, IP address and pseudonymous identifiers. For this purpose, Contentsquare stores information on your device (cookies or similar technologies).
Legal basis: Art. 6(1)(a) GDPR and Section 25(1) TDDDG (consent).
Transfer to third countries: Data may be transferred to sub-processors outside the EU, for example in the USA. Information on the safeguards provided for this (Art. 44 et seq. GDPR) is available in the provider's privacy policy.
Retention period: The retention period is determined by the provider's information: https://contentsquare.com/privacy-policy/
Withdrawal: You can withdraw your consent at any time with effect for the future via the privacy settings (Section 4).
6. Appointment Booking (Calendly)
This website offers the option to book a consultation appointment via Calendly. The calendar is not loaded on page access. A connection to Calendly is only established when you click the "Load calendar" button.
Provider: Calendly LLC, 3423 Piedmont Road NE, Suite 200, Atlanta, GA 30305, USA.
Data processed: When the calendar is loaded, your IP address and browser information are transmitted to Calendly; when you book, also the details you enter (e.g. name, email address, appointment details). Calendly sets its own cookies.
Legal basis: Art. 6(1)(a) GDPR and Section 25(1) TDDDG (consent by clicking "Load calendar") for loading the calendar; Art. 6(1)(b) GDPR (pre-contractual measures) for processing your booking details.
Transfer to third countries: Calendly processes data in the USA. Information on the safeguards for this transfer (Art. 44 et seq. GDPR) is available in the provider's privacy policy.
Retention period: The retention period is determined by the provider's information: https://calendly.com/privacy
Remembering your choice: So that the calendar loads directly on later visits, we store your decision in your browser's local storage (entry "wcs-calendly-consent"). This entry is not transmitted to us. You can withdraw this consent at any time with effect for the future:
7. Contact Form
You can send us a message using the contact form. Name, email address and message are required. Company and phone number are optional.
How it works: Your details are transmitted to a function at Cloudflare (Cloudflare Workers) and sent via Cloudflare Email Service as an email to our mailbox kontakt@wenske-cs.de at Microsoft 365. Your details are not stored on the website itself.
Abuse prevention: To prevent mass submissions, your IP address is used briefly to limit the number of requests per minute. It is not stored in the process.
Providers: Cloudflare, Inc. for transmission (details in Section 3) and Microsoft for the mailbox (details in Section 8).
Purpose: Handling your enquiry.
Legal basis: Art. 6(1)(b) GDPR where your enquiry aims at concluding or performing a contract; otherwise Art. 6(1)(f) GDPR (legitimate interest in answering enquiries).
Transfer to third countries: For transmission via Cloudflare, the information in Section 3 applies.
Retention period: Your message is processed in our email mailbox. The information in Section 8 (Email Communication / Microsoft 365) applies.
Spam Protection (Cloudflare Turnstile)
To protect the form against spam and automated requests, we use Cloudflare Turnstile. Turnstile is not loaded on page access, but only when you open the form ("Write a message" tab) or click into a form field.
Provider: Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA.
Data processed: Technical characteristics of your browser and device as well as your IP address. Turnstile uses this data to detect whether a request is automated.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in protecting the contact form against spam and misuse).
Transfer to third countries: The information in Section 3 applies.
Further information: https://www.cloudflare.com/turnstile-privacy-policy/
8. Email Communication / Microsoft 365
We use Microsoft 365 for business email communication. If you contact us by email, your details are processed there.
Provider: Microsoft Ireland Operations Ltd., One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland.
Data processed: Email address, name, message content, metadata (timestamps).
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in reliable business communication).
Microsoft processes data under EU Standard Contractual Clauses (SCCs). A Data Processing Agreement (DPA) pursuant to Art. 28 GDPR has been concluded with Microsoft.
9. Videos (YouTube)
On some pages, we embed a webinar recording from YouTube. The video is not loaded on page access. Only when you click "Play video" is it loaded in the privacy-enhanced mode from youtube-nocookie.com.
Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Data processed: After the click, data is transmitted to Google, including your IP address, device and browser information and the page accessed. Google may use cookies or your browser's local storage.
Legal basis: Art. 6(1)(a) GDPR and Section 25(1) TDDDG (consent by clicking "Play video").
Transfer to third countries: Data may be transferred to Google LLC in the USA. Google LLC is certified under the EU-U.S. Data Privacy Framework (adequacy decision of the European Commission, Art. 45 GDPR).
Retention period: The retention period is determined by the provider's information: https://policies.google.com/privacy
Withdrawal: Your choice is not stored; on every page view, the video only loads after another click. You can withdraw your consent by not starting the video again. You can delete data stored by Google on your device in your browser settings.
10. Recipients of Personal Data
Personal data is not sold or traded. Recipients are exclusively the service providers named in this policy, to the extent described: Cloudflare (hosting and delivery, contact form and spam protection, Sections 3 and 7), Usercentrics (consent management, Section 4), Contentsquare (web analytics, only with consent, Section 5), Calendly (appointment booking, only after a click, Section 6), Microsoft 365 (email communication and receipt of contact form messages, Sections 7 and 8) and Google (videos, only after a click, Section 9).
Cloudflare and Microsoft act as data processors under a Data Processing Agreement (DPA) pursuant to Art. 28 GDPR and solely on our instructions.
11. Your Rights (Art. 15–22 GDPR)
Under the GDPR, you have the following rights:
- Right of access (Art. 15 GDPR): You have the right to obtain information about the data stored about you.
- Right to rectification (Art. 16 GDPR): You have the right to have inaccurate data corrected.
- Right to erasure (Art. 17 GDPR): You have the right to deletion of your data ("right to be forgotten").
- Right to restriction of processing (Art. 18 GDPR): You have the right to request the restriction of the processing of your data.
- Right to object (Art. 21 GDPR): You have the right to object to the processing of your data.
- Right to data portability (Art. 20 GDPR): You have the right to receive your data in a structured, commonly used format.
- Right to withdraw consent (Art. 7(3) GDPR): You have the right to withdraw any consent you have given at any time with effect for the future.
To exercise your rights, please contact: kontakt@wenske-cs.de
12. Supervisory Authority
You have the right to lodge a complaint with a data protection supervisory authority regarding the processing of your personal data. The competent supervisory authority for Wenske Cyber Solutions GmbH is:
Berliner Beauftragte für Datenschutz und Informationsfreiheit
(Berlin Commissioner for Data Protection and Freedom of Information)
Friedrichstr. 219
10969 Berlin