Privacy policy
This policy tells you which personal data this website processes, why, and which rights you have.
Controller
ThreatWeaver GbRCarlo Gebhardt
Karlstrasse 9
66424 Homburg (Saar)
Germany
Email: info@threatweaver.io
We have not appointed a data protection officer. The law does not require one for us (§ 38 BDSG).
What this website does not do
This website sets no cookies and stores nothing on your device. It uses no analytics, no tracking, no advertising and no content from other websites. The fonts, pictures and video come from this website.
Hosting
Microsoft Azure Static Web Apps hosts this website. The provider is Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland.
When you open a page, your browser sends technical data: your IP address, the date and time, the page, and your browser and operating system. Microsoft uses these data to deliver the page and to protect the service. We have not set up access logs or monitoring for this website.
Legal basis: Article 6 (1)(f) GDPR. Our legitimate interest is a safe website that works.
Microsoft processes the data for us under a data processing agreement (Article 28 GDPR). The origin server of this website is in the USA (Azure region East US 2), and a global network delivers the pages. Microsoft is certified under the EU-US Data Privacy Framework (Article 45 GDPR), and the standard contractual clauses of the European Commission also apply (Article 46 GDPR).
When you send us an email, for example to book a demo, we process your email address, your name and the content of your message. We use these data only to answer you and to prepare a demo.
Legal basis: Article 6 (1)(b) GDPR for steps before a contract. In other cases, Article 6 (1)(f) GDPR: our legitimate interest is to answer your enquiry.
Google Workspace hosts our email. The provider is Google Cloud EMEA Limited, 70 Sir John Rogerson's Quay, Dublin 2, Ireland, under a data processing agreement (Article 28 GDPR). Google can process data in the USA: Google LLC is certified under the EU-US Data Privacy Framework, and the standard contractual clauses also apply.
We delete your emails when your enquiry is complete, unless tax law tells us to keep them. Business letters can have a retention period of up to 6 years (§ 147 AO).
Your rights
Under the GDPR you have these rights:
- access to your data (Article 15)
- rectification (Article 16)
- erasure (Article 17)
- restriction of processing (Article 18)
- data portability (Article 20)
- objection to processing on the basis of Article 6 (1)(f) GDPR (Article 21)
To use a right, send an email to info@threatweaver.io.
You can also complain to a data protection supervisory authority. The authority for us is:
Unabhängiges Datenschutzzentrum SaarlandFritz-Dobisch-Straße 12
66111 Saarbrücken
Germany
Changes to this policy
We change this policy when this website changes. Last update: 26 October 2026.