This page sets out the nature, scope, purpose and legal basis of how we process personal data.
This is a translation for convenience. The legally binding version is the German one at safestar-reputation.com/datenschutz. Article references are to the EU GDPR, which the UK GDPR mirrors.
Leano Reuter, SafeStar Reputation
Flurstraße 29, 22549 Hamburg, Germany
Email: leano@safestar-reputation.com
Phone: +49 (0) 163 481 6463
We are not legally required to appoint a data protection officer (§ 38 (1) BDSG).
This website is hosted by Hetzner Online GmbH, Industriestr. 25,
91710 Gunzenhausen, Germany. The server is located in Nuremberg, Germany. A data processing agreement under Art. 28 GDPR is in place.
Legal basis: Art. 6 (1) (f) GDPR. Our legitimate interest is providing this website securely and reliably.
Every visit automatically records data your browser sends: IP address, date and time, the address requested, the volume of data transferred, HTTP status code, referrer, and browser and operating system identifiers.
Purpose: Delivering the website, troubleshooting, defending against attacks.
Legal basis: Art. 6 (1) (f) GDPR.
Retention: 14 days, after which the logs are deleted automatically.
Through the contact form we process your name, email address, phone number, the service you are after and your message. Through the partner form we additionally process company name, website and volume details. The data is stored on our server in Germany and is not passed on to third parties.
Legal basis: Art. 6 (1) (b) GDPR where the enquiry is aimed at a contract; otherwise Art. 6 (1) (f) GDPR (answering your enquiry).
Retention: until your enquiry has been fully dealt with, at most 24 months. Statutory retention obligations are unaffected.
The chatbot on this website sends the messages you type to OpenAI Ireland Limited, 1st Floor, The Liffey Trust Centre,
117–126 Sheriff Street Upper, Dublin 1, Ireland, in order to answer them. Processing may take place on servers in the USA. The transfer is based on the EU standard contractual clauses under Art. 46 (2) (c) GDPR and a data processing agreement under Art. 28 GDPR. The content is not used to train models.
Legal basis: Art. 6 (1) (f) GDPR (answering enquiries outside business hours).
Please do not enter sensitive or special category data in the chat.
For specific matters please use the contact form or send an email.
We use Google Analytics 4 from Google Ireland Limited, Gordon House,
Barrow Street, Dublin 4, Ireland, to analyse how this website is used. The analytics script is
only loaded once you have chosen “Accept all” in the cookie notice. If you choose “Essential only” or make no choice at all, no analysis takes place and no connection to Google is made. The IP address is processed in truncated form.
Transfer to Google LLC in the USA is possible. Google LLC is certified under the EU-US Data Privacy Framework (European Commission adequacy decision of 10 July 2023).
Legal basis: Art. 6 (1) (a) GDPR and § 25 (1) TDDDG (consent).
Withdrawal: at any time via
change cookie settings. Withdrawal takes effect for the future.
Retention: at most 14 months.
We store your choice from the cookie notice in your browser’s local storage so we do not have to ask again on every visit. That storage is technically necessary to carry out your choice (§ 25 (2) no. 2 TDDDG). You can delete it at any time in your browser settings.
We also store the country determined from your IP address in a cookie, in order to set the language and currency of this website. The cookie contains only the country code and expires after 30 days.
For clients of our Leadflow service we run a protected login area. There we process name, email address, a password stored in encrypted form, and the data held as part of the engagement.
Legal basis: Art. 6 (1) (b) GDPR (performance of the contract).
Retention: for the duration of the contractual relationship, after that in line with statutory retention periods.
We approach businesses by email. The data we use for this — company name, contact person, business email address, website, industry and location — comes from publicly available sources, in particular company websites, legal notices, trade directories and Google business profiles. We do not collect it from you directly; this information is provided under Art. 14 GDPR.
Purpose: Initiating a business relationship in a B2B context.
Legal basis: Art. 6 (1) (f) GDPR. Our legitimate interest is direct marketing to businesses (see recital 47 GDPR).
Retention: until you object. After an objection we keep your email address on a suppression list so you are not written to again — that is the sole purpose of storing it.
You can object to this processing at any time — informally by email to
leano@safestar-reputation.com. From the moment you object we no longer process your data for this purpose.
Where we carry out such outreach on behalf of a client, the client is the controller within the meaning of Art. 4 (7) GDPR and we are the processor under Art. 28 GDPR.
Beyond the parties named here we do not pass your data on. In detail:
• Hetzner Online GmbH (Germany) – hosting, processor
• OpenAI Ireland Limited (Ireland/USA) – chatbot, processor
• Google Ireland Limited (Ireland/USA) – analytics, only with consent
• IONOS SE (Germany) – email mailboxes and sending
We disclose data to authorities only where we are legally obliged to.
You have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and
objection to processing based on legitimate interests
(Art. 21 GDPR). You can withdraw consent at any time with effect for the future (Art. 7 (3) GDPR).
Just email us at leano@safestar-reputation.com.
You can complain to a data protection supervisory authority at any time (Art. 77 GDPR). The authority responsible for us is:
Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit
Ludwig-Erhard-Straße 22, 20459 Hamburg, Germany
Last updated: August 2026