Privacy Policy

Last updated: 15.09.2025

1. Controller

Mika Schultes
THHOR – TUHH Orbital Research
Hamburg University of Technology – Smart Sensors
Am Schwarzenberg-Campus 3 (E)
21073 Hamburg
Germany
E-mail: contact@thhor.space

2. Purposes and Legal Bases of Processing

We process personal data for the operation and provision of this website (https://thhor.space), for communication with you, and for the security and stability of the service. The legal bases are Art. 6 (1) (f) GDPR (legitimate interest in secure and stable website operation), Art. 6 (1) (b) GDPR (contract / pre-contractual measures, e.g. in case of inquiries), and, if applicable, Art. 6 (1) (c) GDPR (legal obligations).

3. Hosting (Cloudflare) and Server Log Files

This website is hosted via Cloudflare Pages and uses the infrastructure of Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA (including Content Delivery Network, edge caching, DDoS protection / web application firewall). When our pages are accessed, Cloudflare processes, among other things, your IP address, date/time, requested URL/path, referrer, user agent, HTTP headers, error/status codes, and a Ray ID (request identifier), and logs security-related events in server logs. Processing takes place for the purposes of technical delivery, delivery acceleration, network security (defense against attacks / bot traffic), and service stability. Legal basis: Art. 6 (1) (f) GDPR.

Cloudflare keeps operational and security-related logs, which are generally retained short-term and then deleted or anonymized; longer retention may occur in individual cases to preserve evidence of specific incidents. For more information, see the Cloudflare Privacy Policy and the Data Processing Addendum.

4. Cookies

We do not use tracking or analytics cookies. Through Cloudflare, technically necessary cookies may be set, such as __cf_bm (bot management) and cf_clearance (proof of passed challenge), to protect our website against malicious traffic and ensure availability. These cookies do not contain any tracking IDs used by us and serve exclusively security / availability purposes. Legal bases: Art. 6 (1) (f) GDPR and, for the storage / access of strictly necessary information, § 25 (2) No. 2 TTDSG.

5. Communication (Email / Discord)

When you contact us via email, we process the data you provide (e.g., name, email address, content of your message) in order to handle your inquiry (Art. 6 (1) (b) GDPR). Data will be deleted once it is no longer required for processing and no statutory retention obligations apply.

6. Embedded Content and External Links

Our website may contain links to external pages (e.g., Instagram). No third-party content is embedded that transmits data to third parties upon loading. When following external links, the privacy policies of the respective providers apply.

7. Recipients and Data Transfers to Third Countries

Recipients of personal data are primarily technical service providers, in particular Cloudflare (for website provision and protection). Data may be transferred to the USA. A Data Processing Agreement pursuant to Art. 28 GDPR exists with Cloudflare; international transfers are based on Standard Contractual Clauses (SCCs) under Art. 46 GDPR. Additionally, Cloudflare is certified under the EU-U.S. Data Privacy Framework (DPF). More information: Cloudflare DPA (incl. SCC), DPF Listing for Cloudflare.

8. Retention Period

We only process personal data for as long as it is necessary for the stated purposes or required by law. Afterward, the data is deleted or anonymized.

9. Your Rights

You have the right to access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR), data portability (Art. 20 GDPR), and objection (Art. 21 GDPR). You also have the right to withdraw any consent given at any time with effect for the future (Art. 7 (3) GDPR). You may lodge a complaint with a data protection supervisory authority.
The competent authority includes the Hamburg Commissioner for Data Protection and Freedom of Information
Ludwig-Erhard-Str. 22, 20459 Hamburg
Tel.: 040 428 54-4040, E-mail: mailbox@datenschutz.hamburg.de

10. Obligation to Provide Data

The provision of personal data is not legally required. For certain functions (e.g., contacting us), it may be necessary; without the required data, processing may not be possible.

11. Security

We implement technical and organizational measures to protect personal data against loss, destruction, unauthorized access, alteration, or dissemination, and regularly adapt these measures to the state of the art.

12. Web Analytics (Cloudflare Web Analytics)

We use Cloudflare Web Analytics, a privacy-friendly analytics service provided by Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA. The JavaScript beacon operates without cookies and only collects anonymized usage data (e.g., pages viewed, referrer, device type, browser/OS information, timestamp). No aggregation with personal data or user profiling takes place.

Processing is based on Art. 6 (1) (f) GDPR (legitimate interest in statistical evaluation to improve our offering). Cloudflare acts as a processor; a Data Processing Agreement is in place, and appropriate safeguards for data transfers apply (Standard Contractual Clauses, EU-U.S. Data Privacy Framework).

For more information, see the Cloudflare Web Analytics documentation and the Cloudflare Data Processing Addendum .

Retention / Sampling: The metrics collected by Cloudflare are stored according to the retention settings defined in our Cloudflare configuration; displayed data may be based on sampling. For questions, contact us at contact@thhor.space.