Skip to content
Let's talk →
Legal

Privacy Policy

Last updated: July 2026

We keep this simple, because our data collection is simple: the contact form, the mailing-list signup, and — only if you agree to it — website analytics. We don't run ads, we don't sell data, and we don't track you around the internet.

1. Who is responsible

The controller responsible for data processing on this website is:

Found Key Solutions UG
Johannesstr. 19
99084 Erfurt, Germany
Email: via our contact page

2. What we collect, and why

Contact form. When you send us an inquiry, we collect the details you enter — typically your name, email address, company, and the message itself. We use this data only to respond to your inquiry and, if things move forward, to prepare a possible engagement. The legal basis is Art. 6(1)(b) GDPR (steps prior to entering into a contract) and Art. 6(1)(f) GDPR (our legitimate interest in answering inquiries directed at us). Your inquiry is delivered to a mailbox we operate with Google Workspace, and you receive an automatic confirmation at the address you gave us, quoting what you sent.

Mailing list. If you sign up for our insights mailing list, we collect your email address and use it solely to send you that mailing. The legal basis is your consent, Art. 6(1)(a) GDPR. Alongside the address we record the time of signup and the IP address it came from, so that a subscription can be shown to be genuine if it is ever disputed (Art. 7(1) GDPR). Every mailing contains an unsubscribe link, and you can withdraw your consent at any time with effect for the future; following that link deletes the entry outright rather than merely marking it inactive.

Server logs. Like almost every website, our hosting provider automatically records technical access data (IP address, browser type, time of access) in server logs for security and stability purposes. These logs are not merged with the data above and are deleted on a routine schedule.

3. Cookies and analytics

Nothing is stored on your device until you decide. On your first visit a bar asks whether we may use analytics; until you answer, no analytics cookies are set and no analytics script is loaded. Declining is a single click, and the two buttons carry equal weight.

Your choice. We remember the answer itself, in your browser's local storage and in a cookie named fksconsent that expires after 180 days. This is strictly necessary to honour your decision and to avoid asking again on every page, so it does not require consent (§ 25(2) TDDDG). You can change or withdraw your answer at any time via Cookie Settings at the bottom of any page.

Google Analytics. Only if you agree, we load Google Analytics 4, operated by Google Ireland Limited. It sets cookies in your browser (_ga and _ga_<id>, valid up to two years) and processes browser and device details, the pages you open and the actions you take on them — such as sending the contact form or signing up for the mailing list — so that we can see which pages help visitors and which do not. Your IP address is used to derive an approximate location and is not stored by Analytics. The legal basis is your consent, Art. 6(1)(a) GDPR and § 25(1) TDDDG. Data may be transferred to Google LLC in the USA; Google is certified under the EU-US Data Privacy Framework. Google's advertising features are switched off: ad storage, ad user data and ad personalisation stay denied whatever you choose.

Spam protection. The forms are protected by Cloudflare Turnstile, operated by Cloudflare Ireland Limited. The moment you start filling one in, it loads a script from challenges.cloudflare.com and sends Cloudflare your IP address together with technical signals from your browser, which is how it tells a person from a bot. Turnstile sets no advertising cookies and does not follow you across websites. Because it is what keeps the forms usable at all, it runs without asking: the legal basis is Art. 6(1)(f) GDPR (our legitimate interest in forms that are not flooded by bots). It loads only on pages carrying a form, and only once you touch one.

Form protection. When you use the contact form, we store a timestamp in your browser's session storage to stop the same form being submitted repeatedly by bots. It is deleted when you close the tab, never leaves your device, and is strictly necessary for a service you asked for. Our server also counts submissions per IP address for a short time for the same reason; that count lives in memory only and is never written to disk.

4. What we don't do

We don't sell or rent your personal data to anyone.
We don't use advertising cookies, and we don't track you across other websites — analytics is the only optional category we ask about.
We don't use your inquiry data for marketing unless you separately opt in to the mailing list.

5. Who processes the data

Your data is processed by us and by the service providers we need to run this website:

IONOS SE (Germany) — the server this site runs on, located in Germany,
Cloudflare Ireland Limited — the network the site is delivered through, and the spam protection on the forms,
Google Ireland Limited — the mailbox that receives your inquiry and sends our email, and, only with your consent, Google Analytics.

Where we use such providers, we have data processing agreements in place per Art. 28 GDPR, and we prefer providers that process data within the EU.

6. How long we keep it

Contact inquiries are kept as long as needed to handle your request, plus any retention period required by law if an engagement follows. Mailing-list data is kept until you unsubscribe, at which point the entry is deleted immediately. Analytics data, if you consented to it, is retained by Google for 14 months and then deleted automatically.

7. Your rights

Under the GDPR you have the right to:

access the personal data we hold about you (Art. 15),
have it corrected (Art. 16) or deleted (Art. 17),
restrict processing (Art. 18) or object to it (Art. 21),
receive your data in a portable format (Art. 20),
withdraw any consent at any time, with effect for the future,
lodge a complaint with a data protection supervisory authority.

To exercise any of these rights, just contact us — no special form required.

8. Changes to this policy

If our data practices change — for example, if we add new tools to the website — we'll update this policy and the date at the top. The current version always applies.

Skip to content
Found Key
Solutions
Legal

Privacy Policy

Last updated: July 2026

We keep this simple, because our data collection is simple: the contact form, the mailing-list signup, and — only if you agree to it — website analytics. We don't run ads, we don't sell data, and we don't track you around the internet.

1. Who is responsible

The controller responsible for data processing on this website is:

Found Key Solutions UG
Johannesstr. 19
99084 Erfurt, Germany
Email: via our contact page

2. What we collect, and why

Contact form. When you send us an inquiry, we collect the details you enter — typically your name, email address, company, and the message itself. We use this data only to respond to your inquiry and, if things move forward, to prepare a possible engagement. The legal basis is Art. 6(1)(b) GDPR (steps prior to entering into a contract) and Art. 6(1)(f) GDPR (our legitimate interest in answering inquiries directed at us). Your inquiry is delivered to a mailbox we operate with Google Workspace, and you receive an automatic confirmation at the address you gave us, quoting what you sent.

Mailing list. If you sign up for our insights mailing list, we collect your email address and use it solely to send you that mailing. The legal basis is your consent, Art. 6(1)(a) GDPR. Alongside the address we record the time of signup and the IP address it came from, so that a subscription can be shown to be genuine if it is ever disputed (Art. 7(1) GDPR). Every mailing contains an unsubscribe link, and you can withdraw your consent at any time with effect for the future; following that link deletes the entry outright rather than merely marking it inactive.

Server logs. Like almost every website, our hosting provider automatically records technical access data (IP address, browser type, time of access) in server logs for security and stability purposes. These logs are not merged with the data above and are deleted on a routine schedule.

3. Cookies and analytics

Nothing is stored on your device until you decide. On your first visit a bar asks whether we may use analytics; until you answer, no analytics cookies are set and no analytics script is loaded. Declining is a single click, and the two buttons carry equal weight.

Your choice. We remember the answer itself, in your browser's local storage and in a cookie named fksconsent that expires after 180 days. This is strictly necessary to honour your decision and to avoid asking again on every page, so it does not require consent (§ 25(2) TDDDG). You can change or withdraw your answer at any time via Cookie Settings at the bottom of any page.

Google Analytics. Only if you agree, we load Google Analytics 4, operated by Google Ireland Limited. It sets cookies in your browser (_ga and _ga_<id>, valid up to two years) and processes browser and device details, the pages you open and the actions you take on them — such as sending the contact form or signing up for the mailing list — so that we can see which pages help visitors and which do not. Your IP address is used to derive an approximate location and is not stored by Analytics. The legal basis is your consent, Art. 6(1)(a) GDPR and § 25(1) TDDDG. Data may be transferred to Google LLC in the USA; Google is certified under the EU-US Data Privacy Framework. Google's advertising features are switched off: ad storage, ad user data and ad personalisation stay denied whatever you choose.

Spam protection. The forms are protected by Cloudflare Turnstile, operated by Cloudflare Ireland Limited. The moment you start filling one in, it loads a script from challenges.cloudflare.com and sends Cloudflare your IP address together with technical signals from your browser, which is how it tells a person from a bot. Turnstile sets no advertising cookies and does not follow you across websites. Because it is what keeps the forms usable at all, it runs without asking: the legal basis is Art. 6(1)(f) GDPR (our legitimate interest in forms that are not flooded by bots). It loads only on pages carrying a form, and only once you touch one.

Form protection. When you use the contact form, we store a timestamp in your browser's session storage to stop the same form being submitted repeatedly by bots. It is deleted when you close the tab, never leaves your device, and is strictly necessary for a service you asked for. Our server also counts submissions per IP address for a short time for the same reason; that count lives in memory only and is never written to disk.

4. What we don't do

We don't sell or rent your personal data to anyone.
We don't use advertising cookies, and we don't track you across other websites — analytics is the only optional category we ask about.
We don't use your inquiry data for marketing unless you separately opt in to the mailing list.

5. Who processes the data

Your data is processed by us and by the service providers we need to run this website:

IONOS SE (Germany) — the server this site runs on, located in Germany,
Cloudflare Ireland Limited — the network the site is delivered through, and the spam protection on the forms,
Google Ireland Limited — the mailbox that receives your inquiry and sends our email, and, only with your consent, Google Analytics.

Where we use such providers, we have data processing agreements in place per Art. 28 GDPR, and we prefer providers that process data within the EU.

6. How long we keep it

Contact inquiries are kept as long as needed to handle your request, plus any retention period required by law if an engagement follows. Mailing-list data is kept until you unsubscribe, at which point the entry is deleted immediately. Analytics data, if you consented to it, is retained by Google for 14 months and then deleted automatically.

7. Your rights

Under the GDPR you have the right to:

access the personal data we hold about you (Art. 15),
have it corrected (Art. 16) or deleted (Art. 17),
restrict processing (Art. 18) or object to it (Art. 21),
receive your data in a portable format (Art. 20),
withdraw any consent at any time, with effect for the future,
lodge a complaint with a data protection supervisory authority.

To exercise any of these rights, just contact us — no special form required.

8. Changes to this policy

If our data practices change — for example, if we add new tools to the website — we'll update this policy and the date at the top. The current version always applies.