Data Protection

CNT AG takes the protection of your personal data very seriously. We process your data exclusively in accordance with legal regulations, particularly the General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG). The following information explains how we collect, process, and protect your personal data on this website.

1. Responsible for Data Processing

The responsible party for processing your personal data in accordance with Art. 4 para. 7 GDPR is:

  • CNT AG
  • Ludwig-Erhard-Allee 20
  • 76131 Karlsruhe
  • Germany

info@cnt.net

2. Data Protection Officer

For any questions regarding data protection, you can contact our Data Protection Officer:

  • Mathias Link, Attorney at Law
  • CNT AG
  • Ludwig-Erhard-Allee 20
  • 76131 Karlsruhe
  • Germany

dsb@cnt.net

3. Types of Processed Data

We process personal data that you actively provide to us, as well as data that is automatically collected during your use of our website:

Data You Actively Provide

  • Personal contact details: Name, Email address, Phone number
  • Function: Information about your professional role, if you provide this in contact forms
  • Project data: Information about specific projects, if you provide this in contact forms

Automatically Collected Data

  • IP address, Browser type, Operating system, Access time, Visited pages (server log files), Referrer URL (the previously visited website)
  • Cookies and tracking data (see section Cookies and Consent)

4. Purposes and Legal Bases of Data Processing

The processing of your personal data is carried out for the following purposes and on the following legal bases:

Processing inquiries (Art. 6 para. 1 lit. b GDPR)

To process contact inquiries, including analyzing project data or information about your function, to provide specific solutions or responses.

Analysis and improvement of the website (Art. 6 para. 1 lit. f GDPR)

To optimize our website based on anonymized usage data.

Fulfillment of legal obligations (Art. 6 para. 1 lit. c GDPR)

To comply with legal requirements, e.g., for the storage of data for security reasons.

5. Recipients or Categories of Recipients

Your personal data will only be shared with third parties if this is legally permissible or necessary:

Hosting Providers

Data is processed on servers in Germany.

Analysis Service Providers

Use of Google Analytics, SalesViewer, and Hotjar (see section Cookies and Consent)

Internal Departments

Data may be forwarded within CNT AG to responsible departments or specialist areas to process your request.

6. Duration of Data Storage

We store your personal data only as long as necessary to fulfill the above purposes:

Contact Form Data

Until your request is fully processed and possibly within the framework of legal retention periods.

Server Log Files

30 days

8. Google Analytics

We use Google Analytics 4, a web analytics service from Google LLC, for anonymized analysis and improvement of our website. Google Analytics 4 uses cookies to collect information about your use of the website and create anonymized statistics. Data processing is carried out in accordance with the enhanced privacy features of Google Analytics 4, including IP anonymization being enabled by default.

Collected Data

The collected information includes page views, duration of stay, referrer URL, browser type, and operating system. Your IP address is anonymized before processing.

IP Anonymization

The IP anonymization feature is enabled, so your IP address is truncated within the EU before being transmitted to the USA.

Legal Basis

Processing is based on our legitimate interest according to Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in analyzing user behavior to improve our website.

Cookie Settings

You can adjust your cookie settings at any time using the button under item 7 "Cookies and Consent" to deactivate Google Analytics. Alternatively, Google offers a browser add-on to deactivate Google Analytics: tools.google.com/dlpage/gaoptout Further information on Google's privacy policy can be found here: policies.google.com/privacy

9. SalesViewer

This website uses SalesViewer technology from SalesViewer GmbH on the basis of the website operator’s legitimate interests (Section 6 paragraph 1 lit.f GDPR) in order to collect and save data on marketing, market research and optimisation purposes.

Collected Data

SalesViewer only collects anonymized information, including:

  • IP addresses (truncated or anonymized)
  • Company data from publicly available sources.

Personal data such as names or contact details are not processed.

In order to do this, a javascript based code, which serves to capture company-related data and according website usage. The data captured using this technology are encrypted in a non-retrievable one-way function (so-called hashing). The data is immediately pseudonymised and is not used to identify website visitors personally.

The data stored by SalesViewer will be deleted as soon as they are no longer required for their intended purpose and there are no legal obligations to retain them.

The data recording and storage can be repealed at any time with immediate effect for the future, by clicking on www.salesviewer.com/opt-out in order to prevent SalesViewer from recording your data. In this case, an opt-out cookie for this website is saved on your device. If you delete the cookies in the browser, you will need to click on this link again.

10. Hotjar

We use Hotjar, an analysis and feedback tool from Hotjar Ltd., to better understand user behavior on our website and improve usability. Hotjar allows us to analyze and evaluate user behavior using heatmaps, session recordings, surveys, and feedback tools. This information helps us continuously optimize our offerings.

Collected Data

Hotjar stores the following information about visitors:

  • IP address (anonymized before storage)
  • Screen resolution and device type (desktop, mobile, tablet)
  • Operating system and browser type.
  • Geographical information (only country).
  • Mouse movements, clicks, and scroll activities.
  • Form inputs (excluding sensitive data such as passwords).

Legal Basis

Data processing is based on our legitimate interest according to Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in optimizing the usability of our website, analyzing user behavior, and continuously improving our offerings.

Cookie Settings

You can adjust your cookie settings at any time using the button under item 7 "Cookies and Consent" to deactivate Hotjar. Alternatively, you can deactivate tracking on all websites that use Hotjar via the following link: www.hotjar.com/legal/compliance/opt-out Further details on data processing by Hotjar can be found in Hotjar's privacy policy: www.hotjar.com/legal/policies/privacy/

11. Content Management and Delivery via Sanity (CMS & CDN)

We use the headless content management system Sanity, including its associated Content Delivery Network (CDN), to manage and deliver our website content. In this process, personal data such as your IP address and browser information may be transmitted to servers located in Norway and/or third countries (e.g. the United States).

Data processing is based on our legitimate interest in ensuring a performant and reliable website experience (Art. 6 para. 1 lit. f GDPR).

12. Rights of Affected Persons

As an affected person, you have the following rights:

Right to Information

About the personal data we store (Art. 15 GDPR).

Right to Rectification

Have inaccurate or incomplete data rectified (Art. 16 GDPR).

Right to Erasure

Have your data erased unless there are legal retention obligations (Art. 17 GDPR).

Restriction of Processing

Have processing restricted under certain conditions (Art. 18 GDPR).

Data Portability

Request the release of your data in a common format (Art. 20 GDPR).

Right to Object

Object to the processing of your data if it is based on Art. 6 para. 1 lit. f GDPR (Art. 21 GDPR).

Contact for affected rights: privacy@cnt.net

13. Right to Lodge a Complaint with a Supervisory Authority

We take your concerns and rights very seriously. However, if you believe that we have not adequately addressed your complaints or concerns, you have the right to lodge a complaint with a competent data protection supervisory authority.

Competent Supervisory Authority

14. Changes to the Privacy Policy and Current Status

We reserve the right to adjust this privacy policy to comply with changed legal requirements or new features on our website. Please visit this page regularly to stay informed about updates.

Status of the privacy policy: April 2025.