Privacy policy
Last updated: 21 October 2026
1. Who is responsible
Squarehouse UG (haftungsbeschränkt) i. G., Brandenburgische Straße 77, 10713 Berlin, Germany. Managing director: Jann Brunken. Email: info@squarehouse.eu.
We are not required to appoint a data protection officer. For any question about your data, write to the address above.
2. In short
This website uses no analytics, tracking, advertising or social media plugins and sets no cookies of its own. Fonts, images and video are delivered together with the website by our hosting provider, not loaded from third-party servers. Links to external sources only send data to their operators when you click them. Personal data is only processed as described below.
3. Hosting and security
This website is hosted by Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA (Cloudflare). When you open the website, Cloudflare's servers automatically process the data your browser transmits: IP address, date and time of the request, the page requested, the referring page, browser type and operating system. This is technically necessary to deliver the website and to protect it against attacks and misuse.
Legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is the secure, fast and stable operation of the website.
Cloudflare processes the data on our behalf under a data processing agreement pursuant to Art. 28 GDPR. We have not activated request logging in our Cloudflare account and do not store server log files ourselves. How long Cloudflare itself retains such data is set out in Cloudflare's privacy policy.
If unusual traffic is detected, Cloudflare may ask a visitor to pass a security check and store the result in a cookie (cf_clearance). This cookie is strictly necessary to protect the website, contains no tracking and is not used for analytics. Legal basis is § 25(2) no. 2 TDDDG and Art. 6(1)(f) GDPR.
4. Contacting us
The contact form on this website does not send or store any data. It opens your own email program with a prepared message to info@squarehouse.eu, which you decide to send or not.
When you write to us by email, we process the details you give us, typically your name, company, country, email address, the information on your German business and the content of your message, in order to answer your enquiry and, where applicable, to prepare a contract.
Legal basis is Art. 6(1)(b) GDPR for enquiries that relate to a possible contract, otherwise Art. 6(1)(f) GDPR, our legitimate interest in answering business enquiries. We delete the data once it is no longer needed for this purpose, unless statutory retention periods apply, in particular under commercial and tax law (§ 257 HGB, § 147 AO).
Our email is hosted by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany, which processes the messages on our behalf under a data processing agreement pursuant to Art. 28 GDPR.
5. Recipients and transfers
We do not sell your data or pass it on for advertising. It is only processed by the service providers named above, on our behalf.
Cloudflare is based in the USA and may process data there. For this transfer we rely on the adequacy decision of the European Commission of 10 July 2023 for the EU-U.S. Data Privacy Framework (Art. 45 GDPR), under which Cloudflare is certified. Should the certification no longer apply, the EU Standard Contractual Clauses in Cloudflare's data processing agreement take effect (Art. 46(2)(c) GDPR).
6. Your rights
You have the right to:
- access the data we hold about you (Art. 15 GDPR),
- have incorrect data corrected (Art. 16 GDPR),
- have your data erased (Art. 17 GDPR),
- restrict processing (Art. 18 GDPR),
- receive your data in a portable format (Art. 20 GDPR),
- object to processing based on Art. 6(1)(f) GDPR on grounds relating to your particular situation (Art. 21 GDPR).
You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the EU member state of your habitual residence, your place of work or the place of the alleged infringement (Art. 77 GDPR). The authority for our registered office is the Berlin Commissioner for Data Protection and Freedom of Information.
7. No automated decisions
We do not use automated decision-making or profiling within the meaning of Art. 22 GDPR on this website. Providing data through the contact form or by email is voluntary.
8. Our LinkedIn page
We run a company page on LinkedIn. When you visit it, LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland (LinkedIn) processes your data under its own privacy policy. We have no influence on that processing.
LinkedIn provides us with page statistics (Page Insights). For these statistics we and LinkedIn are joint controllers (Art. 26 GDPR) under the Page Insights Joint Controller Addendum. LinkedIn has taken on the main responsibility, including informing you and handling requests about your rights. We only receive aggregated statistics and cannot link them to individual people. Legal basis is Art. 6(1)(f) GDPR, our legitimate interest in presenting our company and reaching business contacts.
If you write to us or comment on LinkedIn, we process your message to answer it. You can exercise your rights with LinkedIn directly or with us.
9. Changes
We update this policy when our website or the legal requirements change. The current version is always available on this page.