Privacy policy

This policy explains how personal data is processed when you use this website, in accordance with the EU General Data Protection Regulation (GDPR).

1. Data controller

Full provider details are in the legal notice.

2. What data we process

We process personal data only where you actively provide it:

• White-paper download (gate): your email address, the requested white-paper title, and technical proof of consent (IP address, user agent, and a timestamp of the request).
• Newsletter / product updates (optional): your email address and the same proof of consent, if you tick the corresponding checkbox.

No further data is required. We use no tracking cookies (see section 7).

3. Purpose and legal basis

The purpose is to send you the requested white paper via a single-use download link and — where you consent — occasional product updates.

The legal basis is your consent under Art. 6(1)(a) GDPR. Consent is voluntary and can be withdrawn at any time with effect for the future (see section 8). We store the proof of consent (IP, user agent, timestamp) to meet our accountability obligation under Art. 7(1) GDPR.

4. Double opt-in and single-use download links

For product-update sign-ups we use a double opt-in: after you sign up, you receive an email with a confirmation link, and your address is added to the list only after you confirm.

White papers are delivered through signed, single-use links that expire after a short time, limiting access to the requested file to the person who asked for it.

5. Recipients and processors

We do not share your data with third parties for advertising. To provide the service we use the following processors (Art. 28 GDPR):

• Brevo (Sendinblue): sending transactional and newsletter emails. Processing within the EU, under a data-processing agreement.
• Hosting (self-managed): your email address and proof of consent are stored in a self-managed PostgreSQL database on EU-based servers (Hetzner, Germany).

6. Retention

We keep your data only as long as necessary for the purposes above. Newsletter data is kept until you withdraw consent or unsubscribe, after which it is deleted or blocked as proof of the withdrawal. Proof of consent is retained for the applicable statutory limitation periods TODO: set a concrete retention period.

7. Cookies, analytics and fonts

This website sets no tracking cookies and therefore needs no cookie banner. Where reach measurement is used, it runs through a cookieless, self-hosted analytics solution that builds no personal profiles and transfers no data to third parties in third countries.

Fonts are self-hosted and served locally. There is no request to Google Fonts or other external font CDNs, so your IP address is not transferred to third parties for this purpose.

When pages are loaded, our hosting provider processes technically necessary server log data (e.g. IP address, time of request) on the basis of our legitimate interest in secure operation (Art. 6(1)(f) GDPR).

8. Your rights

Under the GDPR you have, in particular, the following rights:

• right of access (Art. 15 GDPR);
• right to rectification (Art. 16 GDPR);
• right to erasure (Art. 17 GDPR);
• right to restriction of processing (Art. 18 GDPR);
• right to data portability (Art. 20 GDPR);
• right to withdraw consent with effect for the future (Art. 7(3) GDPR).

You can unsubscribe from product updates at any time via the unsubscribe link in every email or by messaging hello@fabriktechnologies.eu. An informal message to the same address is enough to exercise your other rights.

9. Right to complain

You have the right to lodge a complaint with a data-protection supervisory authority. In Denmark this is Datatilsynet (datatilsynet.dk).

Last updated: June 2026