← Back to Home

Privacy Policy

Last updated: 2026-05-07

Controller

Niko Schwenzer
Freudestr. 6
53225 Bonn
Germany
Email: info@chemlens.app

Scope

This policy applies to the chemlens.app website and its embedded newsletter sign-up form.

Hosting, Cloudflare proxy, and server logs

When you visit this website, our hosting provider (Cloudflare) processes server log data such as IP address, date and time, requested URL, referrer, user agent, device information, and status code. This is necessary to deliver the site and to protect it against abuse.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure and reliable operation). Logs are stored for a limited period, usually up to 30 days, and then deleted unless needed for security or legal reasons.

Cloudflare bot protection and Turnstile

We use Cloudflare as a reverse proxy and security layer (including bot protection). The newsletter form uses Cloudflare Turnstile to prevent abuse. Cloudflare may process IP address, request metadata, browser and device data, and interaction signals. Cloudflare may set security cookies or similar identifiers as part of these protections.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in protecting the website and forms). Provider details: https://www.cloudflare.com/privacypolicy/

Newsletter sign-ups (Brevo)

If you subscribe to updates, we collect the data you submit in the form, such as:

  • Email address (required)
  • Role and institution details (optional)
  • Technical metadata (submission time, IP address, confirmation time for double opt-in)

The newsletter is sent and managed via Brevo. Brevo processes this data on our behalf as a processor under Art. 28 GDPR. Provider details: https://www.brevo.com/legal/

Legal basis: Art. 6(1)(a) GDPR (consent). You can withdraw your consent at any time via the unsubscribe link in every email or by contacting us.

If double opt-in is used, Brevo stores the time and IP address of your confirmation to document consent.

Newsletter emails may contain tracking pixels and tagged links to measure opens and clicks if enabled. If we use this, the legal basis is your consent. You can avoid this by unsubscribing.

Cookies and similar technologies

We do not use advertising cookies or on-site analytics cookies. Cloudflare may set essential security cookies for bot protection. The Brevo sign-up form and Turnstile may also set technical cookies or local storage entries required to protect the form and prevent abuse.

Recipients

We share data only with service providers that support operating this website or sending the newsletter, such as the hosting provider (Cloudflare), and Brevo. We do not sell your data.

International transfers

Cloudflare operates a global network and may process data outside the EU/EEA. Cloudflare uses appropriate safeguards such as EU Standard Contractual Clauses.

Brevo primarily processes data in the EU. If data is transferred to a country outside the EU/EEA, Brevo uses appropriate safeguards such as EU Standard Contractual Clauses.

Contact by email

If you contact us by email, we process your message and contact details to respond. Legal basis: Art. 6(1)(b) GDPR if related to a contract or pre-contractual steps, otherwise Art. 6(1)(f) GDPR.

Data retention

Server logs are kept for a limited period (usually up to 30 days). Newsletter data is stored until you unsubscribe. Proof of consent may be retained for longer to meet legal obligations.

Your rights

You have the right to access, rectification, erasure, restriction, data portability, and to object to processing. You can also lodge a complaint with a supervisory authority.

Data security

We use technical and organizational measures to protect your data, including HTTPS.

Changes

We may update this policy. The current version is always available on this page.