We, Centinel Analytica GmbH ("Centinel Analytica/we"), welcome your use of our website and web app ("Our Services"). In the following provisions, we inform you about the type, scope, and purposes of the collection and use of your personal data when using our services.
1. Provider
Centinel Analytica GmbH
Colbestraße 20
10247 Berlin, Germany
Email: info@centinelanalytica.com
2. Data Processing to Enable Use
Whenever you access the content of our services, connection data is transmitted to our web server. This connection data includes:
- The IP address of the user
- The date and time of the request
- The referring URL
- Device identifiers such as UDID and comparable device numbers
- Device information (e.g., device type)
- Browser type / browser version
This connection data is not used to infer the identity of the user nor merged with data from other sources but solely serves to provide the website.
Legal basis: Art. 6 para. 1 sentence 1 lit. f GDPR.
3. Data Processing upon Request
Our landing page can generally be used without providing personal data. However, to use our web app or subscribe to the newsletter, certain data must be provided.
3.1 Registration, Waitlist, and Login
For registration and joining the waitlist, we collect:
- Email address: used for authentication via a magic link
- Organization name: used for waitlist management
Purpose: enabling registration and waitlist handling
Legal basis: Art. 6 para. 1 sentence 1 lit. b GDPR (contract performance) and Art. 6 para. 1 sentence 1 lit. f GDPR (legitimate interest)
Storage duration: 30 days
3.2 Newsletter Subscription
If you subscribe to our newsletter through our landing page, we store the data you provide (e.g., name, email address) to regularly send you our newsletter.
Purpose: Sending company, product, and service updates
Legal basis: Art. 6 para. 1 sentence 1 lit. a GDPR (consent)
4. Data Processing for Service Optimization
We load the analytics and marketing services described below on every visit. A notice on your first visit points to this page; it is a disclosure, and dismissing it does not change what is measured. We store that dismissal in local storage so the notice does not reappear.
You can stop this measurement in your browser: block the scripts or their storage through your browser settings or an extension, and use your browser's Do Not Track or tracking-protection features. To ask about the data already processed, exercise the rights described in section 7.
[VERIFY] The lawful basis named for the three services below is under review by our privacy owner and has not been confirmed for this configuration.
4.1 Google Analytics
We use Google Analytics 4, a web analytics service provided by Google Ireland Limited. It helps us understand visits, page use, and selected actions such as requests for an audit. Google Analytics can set first-party cookies named _ga and _ga_* to distinguish visits and sessions. We configure those cookies for a maximum of 180 days without extending that period on each visit. Advertising storage, Google signals, and ad-personalization signals are disabled.
Google receives the measured event, a restricted page address, technical request data such as the IP address, and browser/device information. We do not send form values, email addresses, messages, or the website entered in an audit request as analytics event data. If the link you arrived through carries campaign parameters (utm_*), their values are sent with page views; the page address itself is sent without its query string. Events also carry the address of the first page of your visit and of the last blog article you opened in the tab, both without a query string. Processing by Google may involve transfers outside the EEA.
Legal basis: [VERIFY] under privacy-owner review.
4.2 Product Analytics (PostHog)
We use PostHog, provided by PostHog, Inc. (United States), to measure the same restricted page, navigation, and lead-funnel events. Our integration does not use the PostHog browser library, cookies, session recording, or authenticated user IDs. It stores random analytics and session identifiers in session storage for the current browser tab, together with the first page of the visit, the last blog article opened, and whether a request was already counted. It does not link visits across tabs, and sends events through our same-origin collection endpoint to PostHog's United States service region. PostHog also receives technical request data needed to provide the service.
Legal basis: [VERIFY] under privacy-owner review.
4.3 Marketing Analytics (Leadsy)
The site loads Leadsy for marketing analytics and business-visitor identification. Loading the service exposes technical request data, including the IP address and requested page, to the provider. The exact provider entity, additional identifiers or storage, retention, international-transfer safeguards, and immediate withdrawal behavior require privacy-owner review before production activation.
4.4 Hosting and Content Delivery (Cloudflare)
Our website is hosted and delivered through Cloudflare, a service provided by Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA. When you visit our website, your request passes through Cloudflare's servers, which process your IP address to deliver content and to protect the service against attacks and abuse.
Legal basis: Art. 6 para. 1 lit. f GDPR (legitimate interest in the secure and reliable operation of our website).
5. Data Transfer
We only transfer your data when it is necessary for providing our services, you have consented, a legal obligation exists, or another legal basis applies.
5.1 Data Transfer to Non-EU Countries
Your data may be transferred to countries outside the EU, including the USA. Because the USA does not provide an adequate data protection level, we rely on EU Standard Contractual Clauses (SCCs) and Art. 49 GDPR (where applicable).
6. Storage Duration
We store your data only as long as necessary for the purposes for which it was collected or until legal retention periods expire.
We protect your data with appropriate technical and organizational measures to prevent unauthorized access and data loss.
7. Your Rights
You have the right to:
- Access your data
- Correct incorrect data
- Request deletion
- Restrict processing
- Object to processing
8. Right to Object
You may object to the processing of your personal data at any time.
9. Changes to the Privacy Policy
We will update this privacy policy as necessary. The current version is always available on our website.