Legal

Privacy Policy

Last updated: August 2026

1. Controller

DataHall GmbH
Am Saalehafen 1
06118 Halle (Saale)
Germany

Phone: +49 89 23 141 32-0
Email: contact@datafields.group
Website: datafields.group

2. Principles of data processing

We process personal data only to the extent necessary to provide a functional website and our content and services. Each processing activity has a specific lawful basis under Art. 6 GDPR, as described in the sections below. We do not sell personal data and do not use it for advertising.

3. Hosting and server access logs

Our website is hosted on a shared server located in Frankfurt, Germany (EU). When you visit any page on this website, your browser automatically transmits the following data, which our web server records in standard access logs:

  • IP address of the requesting device
  • Date and time of the request
  • URL of the requested page
  • HTTP status code
  • Browser type and operating system (user agent)
  • Referring URL (if applicable)

This data is technically necessary to deliver the website and is processed on the basis of our legitimate interest in the secure and efficient operation of our website (Art. 6(1)(f) GDPR). Access logs are retained for 30 days and then automatically deleted. They are not combined with other data sources and are not used for profiling.

4. Web analytics with Umami

This website uses Umami, a privacy-friendly open-source analytics tool.

What Umami collects

Umami captures anonymised usage statistics, including:

  • Pages visited and time spent
  • Country of origin (based on IP address, which is not stored)
  • Browser and operating system (anonymised user agent)
  • Referrer (referring website)

What Umami does not do

  • Umami sets no cookies
  • No personal data is stored permanently
  • No cross-site tracking takes place
  • No data is shared with third parties

Service provider

We use Umami Cloud, operated by Umami Software Inc. (USA). Because Umami does not store personal data — IP addresses are anonymised in transit and never persisted — no personal data is transferred to or retained by Umami's servers. The GDPR's rules on international data transfers (Art. 44 et seq.) are therefore not engaged for analytics data.

Legal basis

Since Umami does not store personal data within the meaning of the GDPR and does not use cookies, no consent is required. Analytics are carried out on the basis of our legitimate interest in understanding and improving our web offering pursuant to Art. 6(1)(f) GDPR.

For more information about Umami, visit umami.is.

5. Contact via web form

When you submit the contact form at datafields.group/contact, the following personal data is collected and processed:

  • First name and last name
  • Company name
  • Email address
  • Phone number (optional)
  • Your message and enquiry details (type of interest, selected services)
  • IP address (used for anti-spam rate-limiting; included in the notification sent to our team)
  • Submission timestamp

Purpose and legal basis

Your data is processed solely to handle your enquiry and, where applicable, to initiate or perform a contractual relationship. Legal basis: Art. 6(1)(b) GDPR (processing necessary for the performance of a contract or pre-contractual steps at your request).

The IP address is additionally processed to prevent abuse (rate limiting). Legal basis: Art. 6(1)(f) GDPR (legitimate interest in protecting the contact form from spam and abuse). Rate-limiting records are automatically deleted within 30 minutes of each request.

Recipients

Submitted data is delivered by email to the responsible team at DataHall GmbH. Email transmission is handled by MailChannels (MailChannels Corp., Canada), which acts as a data processor on our behalf. MailChannels does not retain message content after delivery; only minimal metadata (sender/recipient addresses, timestamps) is temporarily retained for delivery and abuse monitoring. Canada holds an EU adequacy decision under GDPR. A data processing agreement with MailChannels is in place.

Retention

Enquiry emails are retained in our team inboxes for as long as required to handle your request and for a further period of 3 years thereafter, in line with standard business record-keeping obligations. You may request erasure at any time (see Section 7).

Contact by email

If you contact us directly by email at contact@datafields.group, the data you provide will be processed under the same conditions as above.

6. Data processors and third-party disclosure

We use the following service providers who may process personal data on our behalf as data processors under Art. 28 GDPR:

  • Hosting provider — EU-based shared hosting (Frankfurt, Germany); processes server access logs as described in Section 3.
  • MailChannels Corp. (Canada, EU adequacy) — email relay for contact form notifications; does not retain message content after delivery.
  • Umami Software Inc. (USA) — analytics; does not store personal data (see Section 4).

Beyond the above, your personal data will not be transferred to third parties unless:

  • You have given your explicit consent (Art. 6(1)(a) GDPR)
  • Transfer is necessary for the performance of a contract (Art. 6(1)(b) GDPR)
  • There is a legal obligation to disclose (Art. 6(1)(c) GDPR)
  • Transfer is necessary to protect legitimate interests (Art. 6(1)(f) GDPR)

7. Your rights as a data subject

You have the following rights with regard to your personal data:

  • Right of access (Art. 15 GDPR)
  • Right to rectification of inaccurate data (Art. 16 GDPR)
  • Right to erasure (“right to be forgotten”, Art. 17 GDPR)
  • Right to restriction of processing (Art. 18 GDPR)
  • Right to data portability (Art. 20 GDPR)
  • Right to object to processing (Art. 21 GDPR)
  • Right to withdraw consent at any time (Art. 7(3) GDPR)

To exercise your rights, please contact us at: contact@datafields.group

8. Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority regarding the processing of your personal data by us. The competent authority for Saxony-Anhalt is:

State Commissioner for Data Protection in Saxony-Anhalt
Leiterstraße 9
39104 Magdeburg
Germany
www.datenschutz.sachsen-anhalt.de

9. Data security

We implement technical and organisational security measures to protect your data against accidental or intentional manipulation, loss, destruction, or access by unauthorised persons. Our security measures are continuously improved in line with technological developments.

Data transmission on our website is encrypted using the HTTPS protocol (TLS/SSL).

10. Updates to this privacy policy

This privacy policy is currently valid as of August 2026. As our website evolves or legal and regulatory requirements change, it may be necessary to update this privacy policy. The current version will always be available at datafields.group/privacy-policy.

This website is operated by DataHall GmbH. The DataFields brand is powered by DataHall GmbH.