Privacy policy

This English version is provided for convenience. The German version is legally binding.

Last updated: November 2026

1. Controller

Charleo UG (haftungsbeschränkt), Kirschbaumweg 26, 90491 Nuremberg, Germany, represented by its Managing Director, Matthew Hammond. Email: matt@charleo.co

2. Overview

This website uses no cookies, no analytics or tracking tools and no third-party content. Fonts are loaded from our own server. We process personal data only when you visit the website (technically necessary server data) and when you write to us through the contact form or by email.

3. Hosting and server data

The website is hosted by Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. When you visit it, Cloudflare processes technically necessary data, in particular your IP address, the date and time, the page requested, your browser type and the referrer, to deliver the website and protect it against attacks.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is providing the website securely and reliably. Cloudflare processes the data as our processor under a contract in line with Art. 28 GDPR. Data may be transferred to the USA. Cloudflare is certified under the EU-US Data Privacy Framework (European Commission adequacy decision, Art. 45 GDPR).

4. Contact form and email

When you write to us through the contact form or by email, we process your name, your email address, your company if you give it, and your message, in order to answer your enquiry. Messages from the form are sent by Cloudflare as an email to our mailbox. Our mailbox is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, as our processor. Data may be transferred to the USA. Google is certified under the EU-US Data Privacy Framework.

The legal basis is Art. 6(1)(b) GDPR where your enquiry relates to a contract, and otherwise Art. 6(1)(f) GDPR, our legitimate interest being to answer your enquiry. We delete your details once the enquiry is settled, unless statutory retention periods apply (for example for business correspondence under § 257 HGB and § 147 AO, the German Commercial and Tax Codes).

5. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). Where we process data on the basis of Art. 6(1)(f) GDPR, you may object on grounds relating to your particular situation (Art. 21). To use these rights, write to matt@charleo.co.

You may also complain to a data protection supervisory authority. The authority responsible for us is the Bavarian Data Protection Authority (Bayerisches Landesamt für Datenschutzaufsicht), Promenade 18, 91522 Ansbach, Germany.

6. No automated decision-making

We do not use automated decision-making, including profiling, under Art. 22 GDPR.