Privacy Policy
What we collect, why, and what you can do about it.
What we collect, why, and what you can do about it.
Last updated: September 15, 2026
This privacy policy explains what personal data we process when you visit the Distrify website at distrify.io, for what purposes, and on which legal basis. It covers the website only. The Distrify software platform is governed by separate data protection terms agreed with our customers.
Types of data processed: contact data (name, email address, company, phone number), communication data, usage and log data (for example IP address, browser, pages visited), and, with consent, analytics data.
Data subjects: website visitors and people who send us a demo request.
Purposes: providing a secure and working website, answering inquiries, security and, with your consent, analysing website use.
We process personal data in accordance with the EU General Data Protection Regulation (GDPR). The legal bases we rely on are:
In addition to the GDPR, German national data protection law applies, in particular the Federal Data Protection Act (BDSG) and the Telecommunications Digital Services Data Protection Act (TDDDG), which governs the use of cookies and similar technologies.
If your personal data is processed on the basis of Art. 6(1)(e) or (f) GDPR, you have the right to object to the processing at any time for reasons arising from your particular situation. This also applies to profiling based on these provisions. If you object, we will no longer process your data unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or the processing serves the establishment, exercise, or defence of legal claims (Art. 21(1) GDPR).
If your personal data is processed for direct marketing purposes, you have the right to object at any time. This also applies to profiling related to such marketing. If you object, your data will no longer be used for direct marketing (Art. 21(2) GDPR).
We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, in accordance with legal requirements. These measures include safeguarding the confidentiality, integrity, and availability of data through access controls, encryption, and secure system design. We apply the principles of privacy by design and privacy by default.
Please be aware that data transmission over the internet (e.g. email communication) may have security vulnerabilities. Complete protection against third-party access is not possible.
We only share personal data with service providers we need to run the website, handle inquiries and, with your consent, analyse website use: our hosting provider, our email providers and Google Analytics, named below. We have concluded data processing agreements with them.
Where we transfer data to countries outside the EU/EEA (“third countries”), we ensure compliance with legal requirements. For transfers to the US, we primarily rely on the EU-US Data Privacy Framework (DPF), recognized by the EU Commission’s adequacy decision of July 10, 2023. Additionally, we have concluded Standard Contractual Clauses (SCCs) with relevant providers as a fallback safeguard.
For each service provider we state below where data is processed and which safeguard applies. More information about the DPF is available at dataprivacyframework.gov.
We delete personal data when consent is withdrawn or no further legal basis for processing exists, unless legal obligations or legitimate interests require longer retention.
Retention periods under German law:
Retention periods generally begin at the end of the calendar year in which the triggering event occurred.
Under the GDPR, you have the following rights:
We process visitor data to provide our website, including IP addresses necessary to deliver content to your browser. The legal basis is our legitimate interest in a secure and working website (Art. 6(1)(f) GDPR).
Hetzner, website hosting: our website runs on a server we operate at Hetzner Online GmbH, Industriestrasse 25, 91710 Gunzenhausen, Germany. The server is located in Germany. We have concluded a Data Processing Agreement (DPA) with Hetzner under Art. 28 GDPR. Privacy policy: hetzner.com/legal/privacy-policy.
Server log files: access to our website is logged in server log files containing the requested URL, date and time, data volume, browser and operating system, referrer URL, and IP address. Log data is stored for a maximum of 30 days and then deleted or anonymized, except where retention is required for incident investigation.
No third-party requests without consent: the website loads all of its files, including fonts, images and scripts, from our own server. Data is only sent to another provider, Google, if you consent to analytics.
When you first visit our website, a banner asks whether you agree to analytics. Without your consent we set no cookies and load nothing from third parties. You can reject, accept, or choose in the settings, and each option is equally easy.
Your choice: we store your decision in your browser (local storage) so that the banner does not appear on every page. This entry contains only the choice and its date, is strictly necessary to respect your decision (§ 25(2) No. 2 TDDDG) and expires after 12 months, after which we ask again.
Analytics cookies are only set with your consent (§ 25(1) TDDDG, Art. 6(1)(a) GDPR). You can withdraw or change your consent at any time via “Cookie settings” at the bottom of every page. Withdrawal takes effect immediately and does not affect the lawfulness of processing before it.
When you contact us, via the demo request form, email, phone, or social media, we process your data to handle your inquiry.
Demo request form: the form on our website asks for your name, work email, company and, optionally, your phone number. We also record the page from which you sent the request. The form sends these details as an email to our sales mailbox so that we can get in touch with you. No data from the form is used for newsletters or advertising.
Legal basis: pre-contractual measures at your request (Art. 6(1)(b) GDPR) and our legitimate interest in answering business inquiries (Art. 6(1)(f) GDPR). Providing the phone number is voluntary.
Storage: we keep your request for as long as needed to handle it. If no business relationship follows, we delete it at the latest after 12 months, unless statutory retention periods apply.
Email processing: the request is sent through our mail server at Hetzner Online GmbH (Germany) and received in our mailbox at Google Workspace, provided by Google Cloud EMEA Limited, 70 Sir John Rogerson’s Quay, Dublin 2, Ireland. Transfers to Google LLC in the US are covered by the Data Privacy Framework (DPF) and Standard Contractual Clauses.
Google Analytics 4: with your consent, we use Google Analytics to understand how our website is used, for example which pages are visited, how visitors arrive (referrer), and what type of device and browser they use. This helps us improve the content for electronics distributors. We do not use Google Analytics advertising features, Google signals or ad personalisation.
Data processed: pseudonymous online identifiers, pages visited and time on page, referrer, approximate location derived from the IP address, device and browser information. Google Analytics 4 does not log or store IP addresses of users in the EU.
We also record two events of our own: that a demo or assessment request was sent successfully, and that a button leading to the form was clicked. Each carries only which form or button it was and the path of the page it happened on. Your name, email address, company and anything else you typed are never sent to Google; they go only to us, by email.
Legal basis: your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG). Cookies: _ga and _ga_<ID>, storage period up to 2 years. Analytics data is kept for 14 months.
Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Data may be transferred to Google LLC in the USA; Google LLC is certified under the EU-US Data Privacy Framework (DPF), and Standard Contractual Clauses apply in addition. We have concluded a data processing agreement with Google. Privacy policy: policies.google.com/privacy.
We update this privacy policy as needed when our data processing practices change. Where changes require your action (e.g. renewed consent), we will notify you accordingly.