Privacy Policy

High-quality 3D illustration for data protection, security and documentation

Informational English translation. The German Datenschutzerklärung is the authoritative version.

Last updated: 11 October 2026

1. Controller

CodePartner GmbH
Twisterlingsbogen 5
26160 Bad Zwischenahn
Germany
Email: kontakt@banneragentur.de
Phone: +49 441 1813 1820

2. Hosting and server logs

This website is hosted on classic web hosting provided by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. When the website is accessed, the web server processes technically necessary access data. This may include the time and requested resource, referrer, browser and operating-system information and technical connection data.

Processing is carried out to provide the website securely, reliably and without technical errors on the basis of Article 6(1)(f) GDPR. Our legitimate interest is the secure and reliable operation of our website. Hetzner acts as a processor in connection with hosting. According to Hetzner, IP addresses in web-hosting logs are anonymised; Apache access and error logs are retained for seven days by default, although the retention period can be configured in the hosting account.

3. Contact by email or telephone

If you contact us by email or telephone, we process the information you provide to handle your enquiry and communicate with you. Where the enquiry concerns entering into or performing a contract, the legal basis is Article 6(1)(b) GDPR. Otherwise, processing is based on Article 6(1)(f) GDPR and our legitimate interest in handling business enquiries appropriately.

4. Contact form

When you use the contact form, we process the required fields name, email address and message. Company, telephone number and creative type are optional. The data is used only to handle your enquiry, communicate with you and, where applicable, take steps prior to entering into a contract.

The legal basis is Article 6(1)(b) GDPR for pre-contractual enquiries and otherwise Article 6(1)(f) GDPR. Consent to data processing is not required in order to use the contact form. A notice referring to this privacy policy is displayed before submission.

5. Delivery of form messages via Postmark

We use Postmark, provided by AC PM, LLC, 1 N Dearborn Street, Suite 500, Chicago, IL 60602, USA, to deliver contact-form messages. The form data is transmitted server-side to Postmark and delivered from there to us by email. The email address you provide is set as the Reply-To address so that we can reply directly to your enquiry.

Postmark acts as our processor. Processing is governed by AC PM's Data Processing Addendum (DPA). For transfers of personal data to third countries for which no adequacy decision applies, the DPA provides for the European Commission's Standard Contractual Clauses under Decision (EU) 2021/914, in particular Module 2 for controller-to-processor transfers. The DPA, including its international-transfer provisions, is available at postmarkapp.com/dpa.

Postmark stores message content, event data and related metadata for 45 days by default. According to Postmark, a retention option can set this period between 7 and 365 days. For the production account, the shortest period compatible with the operational purpose should be used and the actual setting should be documented internally.

Open and link tracking are disabled in our form integration. The Postmark server token is stored only on the server and is never exposed to the browser.

6. Contact-form protection

To protect the form against automated or abusive submissions, we use technical checks such as an invisible honeypot field, server-side input validation, request-size limits and an origin/host check. No external CAPTCHA service is used.

7. Cookies, local storage, analytics and marketing

In the current website version, we do not use web analytics, marketing or tracking services and do not store non-essential cookies or comparable information on your device. No consent-management mechanism is therefore required for this version. If such services are added later, the requirements of the GDPR and Section 25 TDDDG will be reviewed and implemented before activation.

8. Local assets and external content

Graphics, icons and fonts required for the layout are delivered locally from Banneragentur.de. The current site does not embed external maps, videos, social-media widgets or externally hosted web fonts that would establish additional third-party connections merely by visiting a page.

9. Recipients

Within CodePartner GmbH, personal data is accessible only to people who need it to deal with the relevant enquiry. Hetzner Online GmbH may process data as a hosting processor and AC PM, LLC/Postmark as the processor used for technical email delivery. Other recipients receive data only where required to perform a contract, comply with a legal obligation or on another lawful basis.

10. Retention

We retain personal data only for as long as necessary for the relevant purpose or as required by statutory retention obligations. Enquiries that do not lead to a contractual relationship are deleted once handling is complete and there are no factual or legal reasons for further retention. Where information becomes part of a contract or business transaction, applicable commercial and tax-law retention periods apply. Technical logs and service-provider delivery histories follow the periods actually configured or contractually provided for.

11. Your rights

Subject to the statutory requirements, you have the right of access under Article 15 GDPR, rectification under Article 16 GDPR, erasure under Article 17 GDPR, restriction of processing under Article 18 GDPR and data portability under Article 20 GDPR.

Right to object: Where we process personal data on the basis of Article 6(1)(f) GDPR, you have the right under Article 21 GDPR to object at any time, on grounds relating to your particular situation, to that processing.

12. Right to lodge a complaint

Under Article 77 GDPR, you have the right to lodge a complaint with a data-protection supervisory authority. For our registered office, the State Commissioner for Data Protection of Lower Saxony is in particular competent. You may also contact any other supervisory authority competent under the GDPR.

13. Updates to this policy

We update this privacy policy if the website, service providers, data processing or the legal framework changes. The version published on this page is the applicable version.