Privacy Policy

Sentics GmbH
Last updated: April 28, 2026

1. Controller and Contact Information

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

Sentics GmbH
Hermann-Münch-Str. 2
38440 Wolfsburg, Germany

Commercial Register: HRB 210145, Amtsgericht Braunschweig
Represented by: Dr. Michael Demes, Sebastian Bienia (Managing Directors)

Phone: +49 (0) 531 391 65031
Email: info@sentics.de
Website: https://www.sentics.de

Data Protection Officer

Philipp Kabala
Email: p.Kabala@sentics.de

2. Overview of Data Processing

We process personal data only when necessary for the provision of a functional website and our content and services. The processing of personal data occurs regularly only with the consent of the user. An exception applies in cases where prior consent cannot be obtained for practical reasons and the processing of the data is permitted by law.

3. Legal Basis for Processing

We process personal data on the following legal bases under Article 6(1) GDPR:

  • Consent (Art. 6(1)(a) GDPR): Where you have given consent for a specific processing purpose (e.g., cookies, contact forms, lead generation forms).
  • Contract performance (Art. 6(1)(b) GDPR): Where processing is necessary for the performance of a contract or pre-contractual measures (e.g., demo requests, service inquiries).
  • Legal obligation (Art. 6(1)(c) GDPR): Where processing is necessary to comply with a legal obligation (e.g., tax retention requirements).
  • Legitimate interest (Art. 6(1)(f) GDPR): Where processing is necessary for the purposes of legitimate interests pursued by us or a third party, except where such interests are overridden by your fundamental rights and freedoms (e.g., website security, analytics, optimization).

4. SSL/TLS Encryption

This website uses SSL/TLS encryption for security reasons and to protect the transmission of confidential content, such as requests you send to us as the website operator. You can recognize an encrypted connection by the "https://" prefix in the browser address bar and the lock icon.

When SSL/TLS encryption is activated, the data you transmit to us cannot be read by third parties.

5. Server Log Files

The hosting provider of this website automatically collects and stores information in server log files that your browser transmits to us. These include:

  • Browser type and version
  • Operating system used
  • Referrer URL (the previously visited page)
  • Hostname of the accessing computer
  • Time of the server request
  • IP address

This data is not combined with other data sources. The processing is carried out on the basis of Article 6(1)(f) GDPR, as we have a legitimate interest in the technically error-free presentation and optimization of our website. Server log files are stored for 14 days and then automatically deleted.

6. Cookies

Our website uses cookies. Cookies are small text files stored on your device that help us recognize you, save your preferences, and analyze website usage.

Types of Cookies

Essential Cookies: Necessary for the website to function properly. These cookies do not require consent and are set on the basis of Article 6(1)(f) GDPR.

Functional Cookies: Allow the website to store information that makes use of our services more convenient, e.g., saving your language preferences. Legal basis: Article 6(1)(a) GDPR (consent).

Analytical Cookies: Help us understand and analyze website usage to improve performance and user experience. They provide anonymous data about user interaction. Legal basis: Article 6(1)(a) GDPR (consent).

Cookie Consent

When you first visit our website, a cookie consent banner will ask for your permission before setting non-essential cookies. You can change or withdraw your consent at any time by adjusting your browser settings or using our cookie settings on the website.

You can also configure your browser to refuse cookies or to alert you when cookies are being sent. Please note that some features of the website may not function properly without cookies.

7. Google Analytics

This website uses Google Analytics, a web analytics service provided by Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics uses cookies that enable an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there.

IP Anonymization

We have activated IP anonymization on this website. This means that your IP address is shortened by Google within member states of the European Union or in other states that are party to the Agreement on the European Economic Area before being transmitted to the USA.

Purpose and Legal Basis

We use Google Analytics to analyze and regularly improve the use of our website. The statistics obtained enable us to improve our offerings and make them more relevant for you. The legal basis for the use of Google Analytics is Article 6(1)(a) GDPR (consent).

Data Transfer to the USA

Google LLC is certified under the EU-U.S. Data Privacy Framework, which ensures an adequate level of data protection. For more information, see: https://policies.google.com/privacy

Opt-Out

You can prevent the collection of data by Google Analytics by withdrawing your cookie consent. You may also download and install the Google Analytics opt-out browser add-on: https://tools.google.com/dlpage/gaoptout

Data Retention

We have set Google Analytics to automatically delete user and event data that is older than 14 months.

8. Contact Forms and Demo Requests

If you contact us via forms on our website (e.g., "Request Demo"), we will collect the data you provide in the form, including your name, email address, company name, and any other information you choose to share. This data is processed for the purpose of handling your inquiry and for follow-up communication.

Legal basis: Article 6(1)(b) GDPR (pre-contractual measures) where your inquiry relates to our services, or Article 6(1)(f) GDPR (legitimate interest in responding to inquiries).

Storage duration: Data from contact forms is stored for as long as necessary to process your request. If your inquiry leads to a contractual relationship, the data will be retained in accordance with statutory retention periods (up to 10 years for commercial and tax law purposes). Otherwise, your data will be deleted after 12 months unless you consent to further communication.

9. LinkedIn Lead Generation Forms

We use LinkedIn Lead Generation Forms as part of our advertising campaigns on LinkedIn. When you interact with one of our LinkedIn ads and submit a Lead Generation Form, LinkedIn collects the following data from your LinkedIn profile (with your consent):

  • First name and last name
  • Email address
  • Job title
  • Company name

Purpose

We use this data exclusively for the following purposes:

  • To contact you with relevant information about our products and services
  • To offer a live demo of our platform
  • To respond to your expressed interest in our offerings

Data Transfer to HubSpot

The data collected through LinkedIn Lead Generation Forms is transferred to and stored in HubSpot (HubSpot, Inc., 25 First Street, Cambridge, MA 02141, USA), our customer relationship management (CRM) platform. HubSpot is certified under the EU-U.S. Data Privacy Framework.

Legal Basis

The processing is based on Article 6(1)(a) GDPR (your consent when submitting the Lead Generation Form on LinkedIn).

Storage Duration

Lead data is stored in our CRM for up to 24 months after collection, unless you request earlier deletion or a contractual relationship is established.

Your Rights

You may withdraw your consent at any time and request the deletion of your data by contacting us at info@sentics.de.

10. HubSpot CRM

We use HubSpot as our CRM platform to manage business contacts and communication. HubSpot may process the following data:

  • Contact information (name, email, company, job title)
  • Communication history (emails, form submissions)
  • Website interaction data (if linked to a contact)

Provider: HubSpot, Inc., 25 First Street, Cambridge, MA 02141, USA

Legal basis: Article 6(1)(b) GDPR (contract performance) and Article 6(1)(f) GDPR (legitimate interest in customer relationship management).

Data transfer: HubSpot, Inc. is certified under the EU-U.S. Data Privacy Framework. For more information: https://legal.hubspot.com/privacy-policy

11. Job Applications and Forms

We collect data from job applications and form submissions to process your requests or evaluate candidates. Information includes contact details, application documents, and supporting materials, and is used exclusively for the stated purposes.

Legal basis: Article 6(1)(b) GDPR (pre-contractual measures) and Section 26 BDSG (processing for employment purposes).

Storage duration: If your application is unsuccessful, your data will be deleted after 6 months unless you consent to longer storage for consideration in future openings. If your application results in employment, your data will be transferred to your personnel file.

12. Appointment Booking

Our website allows you to book appointments with our sales team using an integrated calendar tool. When using this feature, personal data such as your name, email address, and preferred time may be collected.

Legal basis: Article 6(1)(b) GDPR (pre-contractual measures).

Storage duration: This data is used exclusively for scheduling and will not be shared with third parties without your consent. Appointment data is deleted after 12 months unless a business relationship is established.

13. Social Media

Our website contains links to social networks, specifically LinkedIn and our YouTube channel. Clicking these links takes you to the pages of the respective networks, which are not covered by this privacy policy. Please refer to the individual providers' privacy policies:

We do not receive personal data from these platforms merely through the placement of links. Data is only transferred to these platforms when you actively click on the respective links.

14. Google Maps

Our website uses Google Maps to provide interactive maps and location information. When you access a page containing a Google Maps embed, a connection is established to Google servers. This may include the transmission of your IP address and other data.

Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Legal basis: Article 6(1)(a) GDPR (consent via cookie banner).

Data transfer to the USA: Google LLC is certified under the EU-U.S. Data Privacy Framework. For more information: https://policies.google.com/privacy

15. Hosting and Data Storage

Our website is hosted on Microsoft Azure Cloud.

Provider: Microsoft Ireland Operations Ltd., One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland.

Microsoft provides comprehensive security measures ensuring the confidentiality and integrity of all data processed through our website.

Legal basis: Article 6(1)(f) GDPR (legitimate interest in reliable and secure website hosting).

Data processing location: Our data is primarily processed within the European Union. Where data may be transferred to Microsoft servers in the USA, Microsoft Corporation is certified under the EU-U.S. Data Privacy Framework. For more information: https://privacy.microsoft.com/en-us/privacystatement

16. Your Rights

Under the GDPR, you have the following rights with respect to your personal data:

Right of Access (Art. 15 GDPR)

You have the right to request confirmation as to whether personal data concerning you is being processed. If so, you have the right to access this data and obtain further information about the processing.

Right to Rectification (Art. 16 GDPR)

You have the right to request the correction of inaccurate personal data concerning you without undue delay. You also have the right to have incomplete personal data completed.

Right to Erasure (Art. 17 GDPR)

You have the right to request the deletion of your personal data without undue delay, provided that one of the legally specified grounds applies (e.g., data is no longer necessary, consent has been withdrawn).

Right to Restriction of Processing (Art. 18 GDPR)

You have the right to request the restriction of processing under certain conditions, for example if you contest the accuracy of the data or the processing is unlawful.

Right to Data Portability (Art. 20 GDPR)

You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used, and machine-readable format. You also have the right to transmit this data to another controller without hindrance.

Right to Object (Art. 21 GDPR)

You have the right to object, on grounds relating to your particular situation, at any time to the processing of personal data concerning you which is based on Article 6(1)(e) or (f) GDPR. If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing.

Objection to direct marketing: If we process your personal data for direct marketing purposes, you have the right to object at any time. If you object, your personal data will no longer be processed for such purposes.

Right to Withdraw Consent (Art. 7(3) GDPR)

If processing is based on your consent, you have the right to withdraw that consent at any time. The withdrawal of consent does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal.

How to Exercise Your Rights

To exercise any of these rights, please contact us at:
Email: p.Kabala@sentics.de
Or by post: Sentics GmbH, Hermann-Münch-Str. 2, 38440 Wolfsburg, Germany

We will respond to your request within one month.

17. Right to Lodge a Complaint with a Supervisory Authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the member state of your habitual residence, place of work, or place of the alleged infringement, if you consider that the processing of personal data relating to you infringes the GDPR.

The supervisory authority responsible for Sentics GmbH is:

Der Landesbeauftragte für den Datenschutz Niedersachsen
Prinzenstr. 5
30159 Hannover, Germany

Phone: +49 (0) 511 120-4500
Email: poststelle@lfd.niedersachsen.de
Website: https://www.lfd.niedersachsen.de

18. Data Retention Overview

We retain personal data only for as long as necessary for the purposes stated in this privacy policy, or as required by law. General retention periods are:

  • Server log files: 14 days
  • Contact form / demo request data: 12 months (or longer if a business relationship is established)
  • LinkedIn Lead Gen data: Up to 24 months
  • Job application data: 6 months (unless consent for longer retention is given)
  • Appointment booking data: 12 months
  • Google Analytics data: 14 months
  • Commercial and tax records: Up to 10 years (as required by German law, HGB and AO)

19. Changes to This Privacy Policy

We reserve the right to update this privacy policy to reflect changes in our services, legal requirements, or data processing practices. Changes will be published on this page. We recommend reviewing this page periodically to stay informed about how we protect your data.

The current version of this privacy policy is dated April 28, 2026.