Privacy Policy#

Last updated: 7 July 2026

This privacy policy explains how Destack GmbH (“Destack”, “we”, “us”) processes personal data when you visit destack.io or contact us. We process personal data in accordance with the EU General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).

1. Controller#

Destack GmbH Schwedter Str. 236 10435 Berlin, Germany Email: admin@destack.io

2. What we collect and why#

Website access#

When you load a page, our hosting provider automatically processes technical data (IP address, user agent, requested URL, timestamp) in server logs to deliver the site and keep it secure. Legal basis: our legitimate interest in operating a secure website (Art. 6(1)(f) GDPR).

Contact form#

If you use the contact form, we process the name, email address, subject, and message you submit in order to respond to your enquiry. Legal basis: performance of pre-contractual measures and our legitimate interest in answering enquiries (Art. 6(1)(b) and (f) GDPR). Submissions are delivered to us by email through our email provider (see Processors below).

Bot protection#

The contact form uses Cloudflare Turnstile to distinguish humans from automated abuse. This processes technical signals from your browser. Legal basis: our legitimate interest in preventing spam and abuse (Art. 6(1)(f) GDPR).

Analytics#

With your consent, we use Google Analytics to understand how the site is used. Analytics cookies are only set after you accept them in the consent banner. Legal basis: your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time via the consent banner.

We use a consent management platform (GetTerms) to record your cookie choices. Strictly necessary cookies are always active; analytics cookies are set only with your consent. You can change or withdraw your consent at any time.

4. Processors and recipients#

We share personal data only with service providers acting on our behalf under data processing agreements:

Cloudflare, Inc. — website hosting, CDN, and bot protection (Turnstile).
Mailjet / Sinch — delivery of contact-form emails.
Google Ireland Ltd. — analytics (only with consent).

Where a provider processes data outside the EU/EEA (e.g. in the United States), transfers are safeguarded by EU Standard Contractual Clauses.

5. Retention#

We keep contact enquiries for as long as needed to handle your request and to comply with statutory retention obligations, then delete them. Server logs are retained for a short period for security. Analytics data is retained according to our Google Analytics configuration.

6. Your rights#

Under the GDPR you have the right to access, rectification, erasure, restriction of processing, data portability, and objection. Where processing is based on consent, you may withdraw it at any time with future effect. You also have the right to lodge a complaint with a supervisory authority — for Destack that is the Berlin Commissioner for Data Protection and Freedom of Information (Berliner Beauftragte für Datenschutz und Informationsfreiheit).

To exercise any of these rights, contact us at admin@destack.io.

7. Changes#

We may update this policy as our services or legal obligations change. Material changes affecting you will be communicated where required. The “Last updated” date above reflects the current version.