Privacy Policy

This English text is a non-binding translation. The German version prevails.

1 · Controller

Crosby Thirty-Three GmbH
Adalbertstrasse 74, 10997 Berlin, Germany
Represented by: Hans Christoph Luther
Email: contact@crosby33.com

2 · Hosting and server log files

This website is hosted by Cloudflare (Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA). When the site is accessed, information is automatically recorded in server log files (including IP address, date and time of access, requested file, browser type, referrer URL). Processing is carried out to ensure secure and stable operation on the basis of Art. 6(1)(f) GDPR. Transfer to the USA may occur; it is safeguarded by the EU Commission’s Standard Contractual Clauses (processing under Art. 28 GDPR).

3 · Contact by email or contact form

If you contact us by email or use the contact form, we process your name, email address, message, and associated technical request metadata to handle your enquiry. The legal basis is Art. 6(1)(b) or (f) GDPR. The data is used only to respond to your enquiry and reasonable follow-up; it is deleted once it is no longer required and no statutory retention obligations apply.

The form is delivered through Formspark, operated by Trampoline Software SRL, Ghent, Belgium. Formspark receives the submitted fields and standard HTTP metadata and processes them on our behalf to deliver the enquiry and filter spam. Its infrastructure is hosted in Ireland. See the Formspark privacy policy.

Spam protection. Forms are protected by Botpoison. When you submit a form, your IP address is transmitted to Botpoison transiently to distinguish humans from bots; it is not used for any other purpose.

4 · Analytics

Analytics. This site uses PostHog, hosted in the EU (PostHog EU Cloud, Frankfurt). We run it cookieless: no cookies, no cross-site identifiers, no fingerprinting, and therefore no consent banner — nothing on this site requires your consent under the TTDSG. IP addresses are discarded at ingestion and never stored. Events are aggregated, within-session measurements (which pages, which language, which region band) with no persistent visitor identity. Session recordings are switched off. Analytics events are retained for 6 months, then deleted.

5 · Report submissions

Report submissions. If you use the submission form, we process: your email address, the System Snapshot report generated by our free local pass, and any context you optionally add. The report is designed to contain counts and categories, never content — no code, no credentials, no schema names, no business logic — and you read it before you send it. We use your submission solely to prepare and send you a recorded response and, if you choose to proceed, to scope a Production Readiness Review (legal basis: taking steps at your request prior to entering into a contract, Art. 6(1)(b) GDPR). The report is read by Hans Luther only and is never shared with third parties. Submissions are retained for 12 months, then deleted; you can request earlier deletion at any time at contact@crosby33.com.

6 · Regional pricing

Regional pricing. Prices may display per region. The region is derived from your country at the moment of each request and used only to render the page — it is not stored, not written to a cookie, and not part of any URL.

7 · Language preference

Language preference. If you actively switch the site language, we store that choice in your browser so the site stays in your language. This is the only item this site stores on your device; it is strictly necessary for the function you requested and contains no identifier.

8 · Your rights

You have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20), and objection (Art. 21 GDPR). You have the right to lodge a complaint with a supervisory authority. The competent authority is the Berlin Commissioner for Data Protection and Freedom of Information.

9 · TLS encryption

This website uses TLS encryption to protect data in transit.