# Privacy Policy | P-CATION > Privacy policy of P-CATION Consulting and Solutions GmbH. > Source: https://p-cation.de/en/privacy-policy/ > Language: en Legal # Privacy Policy Protecting your personal data is important to us. On this page, we transparently explain the type, scope, purpose, and legal bases of our data processing. ## 1. General information Protecting your personal data is important to us. Personal data (hereinafter referred to as "data") is processed exclusively in accordance with applicable legal provisions, in particular the General Data Protection Regulation (GDPR). In this privacy policy, we inform you about the type, scope, purpose, and legal bases of processing personal data when using our website. "Processing" means any operation performed on personal data, in particular collection, storage, use, transfer, or deletion (Art. 4 No. 2 GDPR). ## 2. Controller The controller within the meaning of the GDPR is: P-CATION Consulting and Solutions GmbH Krishnamoorthy, Prasath Kirchstraße 44 59823 Arnsberg Germany Phone: +49 2933 7845999 Fax: +49 2933 7845998 Email: [privacy@p-cation.de](mailto:privacy@p-cation.de) A data protection officer has not been appointed, as there is no legal obligation to do so. ## 3. Rights of data subjects You have the following rights under the GDPR: - Access to information about the processing of your data (Art. 15 GDPR) - Rectification of inaccurate data or completion of incomplete data (Art. 16 GDPR) - Erasure of your data (Art. 17 GDPR) - Restriction of processing (Art. 18 GDPR) - Data portability (Art. 20 GDPR) - Objection to the processing of your data (Art. 21 GDPR) - Withdrawal of granted consent with effect for the future (Art. 7 para. 3 GDPR) - Lodging a complaint with a supervisory authority (Art. 77 GDPR) ## 4. Server log files When our website is accessed, your internet browser automatically transmits data to our servers or infrastructure service providers. This data includes in particular: - IP address - Date and time of access - Pages accessed - Referrer URL - Browser type and version - Operating system Processing is based on Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in ensuring the security, stability, and functionality of our website. The data is stored only as long as necessary to achieve these purposes. ## 5. Use of Cloudflare (CDN, DNS proxy, Workers) To secure and optimize our website, we use services provided by Cloudflare Inc., 101 Townsend Street, San Francisco, CA 94107, USA. Cloudflare acts as a content delivery network (CDN), DNS proxy, and edge infrastructure provider (Cloudflare Workers). User requests are routed via Cloudflare servers. In this context, IP addresses and technical access data may be processed in particular. Processing is based on Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in the secure and efficient operation of our website and protection against attacks. Cloudflare is certified under the EU-US Data Privacy Framework (adequacy decision pursuant to Art. 45 GDPR). Further information: [https://www.cloudflare.com/privacypolicy/](https://www.cloudflare.com/privacypolicy/) ## 6. Cookie consent management To manage consent, we use a cookie consent tool provided by orestbida ([https://cookieconsent.orestbida.com](https://cookieconsent.orestbida.com/)). A technically necessary cookie is stored to document your consent decision. The legal basis is Art. 6 para. 1 lit. c GDPR (legal obligation) and Art. 6 para. 1 lit. f GDPR (legitimate interest in legally compliant consent management). Cookie settings can be adjusted or withdrawn at any time via the link provided in the website footer. ## 7. Cookies Our website uses cookies and comparable storage technologies. Technically necessary cookies and security-related storage access are set or triggered without consent. On pages with native contact or lead forms, Web3Forms and hCaptcha are also integrated as technically necessary components for form delivery and spam protection. Optional processing for analytics, Google functional storage, personalization, marketing, and external content is activated only after prior consent. You can withdraw your consent at any time via the cookie settings, accessible through a corresponding link in the website footer. ## 8. Google Tag Manager We use Google Tag Manager provided by Google Ireland Limited, Dublin, Ireland, for the technical control of website tags and consent signals. Google Tag Manager itself acts as a delivery layer and processes the consent signals we set (`ad_storage`, `analytics_storage`, `functionality_storage`, `personalization_storage`, `security_storage`, `ad_user_data`, `ad_personalization`) so that optional Google tags are triggered only in line with your selection. Optional Google services managed through Google Tag Manager are activated only after your consent in accordance with Art. 6 para. 1 lit. a GDPR. A transfer of data to the USA cannot be ruled out. Google is certified under the EU-US Data Privacy Framework. Further information: [https://policies.google.com/privacy](https://policies.google.com/privacy) ## 9. Leadinfo (B2B lead generation) Persona Insights highlights which known contacts may be connected to a visitor session. It uses signals like form submissions, URL parameters, cookies, campaign URLs, and integrations to suggest relevant contacts and rank them by confidence. Leadinfo never stores a link between a session’s IP address and an email address. Persona Insights signals are processed by our algorithm to display possible contacts and enrich them with available Leadinfo Contact data. These insights are only visible to you, never shared with other customers and never reused in any other part of the Leadinfo platform. Leadinfo processes all Persona Insights data as a GDPR-compliant data processor, acting exclusively on your behalf and in accordance with your instructions and applicable regulations. When you interact with our communications or features; for example by submitting a form, opening our emails, or engaging with our content we may process personal data such as your name, email address, and interaction data. This information is used to optimize our communication and tailor our services to your needs. Leadinfo: We use the lead generation service provided by Leadinfo B.V., Rotterdam, The Netherlands, which recognizes visits of companies to our website based on IP addresses and shows us related publicly available information, such as company names or addresses. In addition, Leadinfo places two first-party cookies for providing transparency on how our visitors use our website and the tool processes domains from provided form inputs (e.g. “leadinfo.com”) to correlate IP addresses with companies and to enhance its services. For additional information, please visit [https://www.leadinfo.com.](https://www.leadinfo.com./) On this page: [https://www.leadinfo.com/en/opt-out](https://www.leadinfo.com/en/opt-out) you have an opt-out option. In the event of an opt-out, your data will no longer be used by Leadinfo. ## 10. Google Analytics 4 We use Google Analytics 4, a web analytics service provided by Google Ireland Limited, Dublin, Ireland. Google Analytics is used to analyze the use of our website. Processing is carried out exclusively after your consent in accordance with Art. 6 para. 1 lit. a GDPR. Among others, the following data is processed: - Page views and interactions - Device and browser information - Approximate location data IP addresses are processed by Google only in shortened form and are not stored permanently. A transfer of data to the USA cannot be ruled out. Google is certified under the EU-US Data Privacy Framework. Consent can be withdrawn at any time via the cookie settings in the website footer. Further information: [https://policies.google.com/privacy](https://policies.google.com/privacy) [https://policies.google.com/technologies/partner-sites](https://policies.google.com/technologies/partner-sites) ## 11. Google Ads Conversion Tracking, Remarketing, and Website Call Conversion We use Google Ads features to measure the effectiveness of our ads, remarketing audiences, and phone clicks on our website. In particular, click identifiers, pseudonymous browser IDs, page views, conversion information, and clicks on phone numbers may be processed. The Google tag infrastructure is loaded only after you consent to analytics or marketing services. Before that, we only set the Consent Mode default signals in the browser; `analytics_storage`, `ad_storage`, `ad_user_data`, `ad_personalization`, `functionality_storage`, and `personalization_storage` remain disabled until you make a choice, while `security_storage` stays active for security-related signals. We also enable Google Ads Data Redaction as an additional privacy safeguard to further reduce ad click data when marketing consent has not been granted. Processing is carried out exclusively after your consent in accordance with Art. 6 para. 1 lit. a GDPR. A transfer of data to the USA cannot be ruled out. Google is certified under the EU-US Data Privacy Framework. Consent can be withdrawn at any time via the cookie settings in the website footer. Further information: [https://policies.google.com/privacy](https://policies.google.com/privacy) [https://support.google.com/google-ads/answer/7548399](https://support.google.com/google-ads/answer/7548399) ## 12. Meta Pixel (Facebook / Instagram) We use the Meta Pixel from Meta Platforms Ireland Limited, Dublin, Ireland. The Meta Pixel is used to analyze user behavior and deliver personalized advertising. Processing is carried out exclusively after your consent in accordance with Art. 6 para. 1 lit. a GDPR. We are jointly responsible with Meta Platforms Ireland Limited in accordance with Art. 26 GDPR. The joint controller agreement is available at: [https://www.facebook.com/legal/terms/page_controller_addendum](https://www.facebook.com/legal/terms/page_controller_addendum) Meta is certified under the EU-US Data Privacy Framework. Consent can be withdrawn at any time via the cookie settings in the website footer. ## 13. Google Web Fonts (local installation) We serve the font used on this website locally from our own server. As a result, visiting our pages does not establish a connection to Google servers for font delivery. No marketing cookies are set in this context and no personal data is transmitted to Google for font delivery purposes. ## 14. Web3Forms and hCaptcha (contact and lead forms) On pages with native contact or lead forms, we use the Web3Forms form service together with hCaptcha for spam and abuse prevention. When the form is loaded and used, IP address, timestamp, browser and device data, form metadata, and security-related interaction data for bot detection may in particular be processed. The actual form entries are forwarded to us via Web3Forms. The integration is used only on pages where such a form exists. Processing is based on Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in providing secure contact options and protecting them against automated abuse and spam requests. A transfer of data to third countries cannot be ruled out. According to Web3Forms, its servers are located in the US-East region. hCaptcha is operated by a US provider. Further information: [https://docs.web3forms.com/getting-started/faq](https://docs.web3forms.com/getting-started/faq) [https://www.hcaptcha.com/privacy](https://www.hcaptcha.com/privacy) ## 15. AI starting-point check: Brandfetch and Google Chat For the AI starting-point check, we process your first name, business email address, the company domain derived from it, your answers, internal assessment signals, and the generated result. The purposes are to personalize the check, create your assessment, forward the lead to P-CATION, and potentially contact you. Only after your explicit consent do we send the company domain derived from your email address to Brandfetch Sàrl, Route de la Goille 2, 1073 Savigny, Switzerland. Your first name, complete email address, and quiz answers are not sent to Brandfetch. We obtain publicly available brand and company information through the Brand API and Brand Context API. These requests are made server-side; Brandfetch may log our servers’ IP address, timestamp, user agent, and requested domain in particular. The company logo is additionally loaded directly from your browser through the Logo API at cdn.brandfetch.io. This request technically transmits your IP address, browser and device data, timestamp, referrer, requested domain, and our Brandfetch client ID to Brandfetch in particular. Brandfetch requires an origin referrer for direct logo embedding. Brandfetch states that its APIs process only publicly available brand data associated with domain names. According to Brandfetch, operational logs may contain IP addresses and user-agent data and may be retained for up to 90 days. Brandfetch hosts its infrastructure on Amazon Web Services. Potential international transfers and the safeguards used for them are governed by Brandfetch’s statements and contractual documentation. After completion of the check, we send the first name, business email address, company domain, answers, result, and technical source information through an incoming webhook to a Google Chat space controlled by P-CATION. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Processing is used solely for internal lead notification and handling. Processing by Google LLC in the United States cannot be ruled out; Google is certified under the EU-US Data Privacy Framework. Data transferred to P-CATION and Google Chat is retained only as long as required for handling, contact, and statutory record-keeping. The complete check payload is not additionally stored persistently in your browser’s local storage. The legal basis for this processing is your consent pursuant to Art. 6 para. 1 lit. a GDPR. Without consent, neither Brandfetch personalization nor quiz submission is triggered. The assessment is an orientation aid and does not result in a solely automated decision with legal or similarly significant effects. You may withdraw your consent at any time with effect for the future; this does not affect the lawfulness of processing before withdrawal. Further information: [https://brandfetch.com/privacy,](https://brandfetch.com/privacy,) [https://docs.brandfetch.com/logo-api/overview,](https://docs.brandfetch.com/logo-api/overview,) [https://docs.brandfetch.com/support/security-soc2](https://docs.brandfetch.com/support/security-soc2) and [https://policies.google.com/privacy](https://policies.google.com/privacy) ## 16. Links to third-party providers Our website contains links to external platforms. When such a link is clicked, data (e.g., IP address) is transmitted to the respective provider. The respective provider is solely responsible for processing this data. This applies in particular to: - Facebook / Instagram (Meta Platforms) - LinkedIn (LinkedIn Ireland Unlimited Company) - YouTube (Google Ireland Limited) - GitHub (GitHub Inc., USA - Microsoft Corporation) ## 17. Updates This privacy policy is updated in the event of technical or legal changes. Version: 2026