Privacy notice

At a glance

• The site sets no cookies and loads no analytics until a choice is made in the cookie dialog.
• A brief sent through the Inquiry page is stored on this site and read by the firm’s principals. It is not passed to a form service.
• The firm never stores a visitor’s IP address. Rate limits use a salted hash that lives for one hour.
• Analytics, with consent only: Google Analytics 4 and Microsoft Clarity, the same properties as on the firm’s knowledge platforms.
• No files are uploaded through the site. Documents are exchanged under the firm’s NDA, through the channel agreed at that point.
• Every person can ask what the firm holds, have it corrected or deleted, and withdraw a consent at any time. Requests go to the address below and are answered within one month.

1. Who is responsible

sentiention™, Inhaber Pierre Blanquett, Lüner Weg 19, 21337 Lüneburg, Germany. Email: . No data protection officer is appointed; the firm is below the thresholds of § 38 BDSG.

2. Visiting the site

The site is hosted in the European Union. Delivering a page means the web server processes what the browser sends.

• What: IP address, date and time, the requested page, the referring page, browser and operating system.
• Why: to deliver the page and keep the service secure. Legal basis: Art. 6 (1) f GDPR, the firm’s legitimate interest in a secure website.
• How long: in the hosting provider’s logs for a limited period, then deleted or anonymised. A data processing agreement under Art. 28 GDPR is in place with the provider.
• Not loaded: no fonts, scripts or embedded content from third-party servers.

3. Cookies and consent

• Before a choice: nothing is set. The dialog appears at the first interaction with a page.
• The choice itself: four first-party cookies (wp_consent_functional, _statistics, _marketing, _personalization), twelve months, strictly necessary under § 25 (2) TDDDG.
• With consent to analytics: Google Analytics 4 (Google Ireland Ltd.) and Microsoft Clarity (Microsoft Ireland Operations Ltd.) load. Legal basis: Art. 6 (1) a GDPR, § 25 (1) TDDDG. Cookies, retention and transfer safeguards are listed on the Cookies page.
• Not active: marketing and personalisation tools. A choice in those categories sets nothing beyond the consent cookies.
• Changing a choice: the control at the bottom left of every page reopens the dialog; a withdrawal takes effect for the future.

4. Sending a brief

The Inquiry page is the only form on the site. What it processes, and why:

• What is entered: the door chosen (Sourcing & Supply, Venture & Market, Design & Development), the mandate fields for that door, the brief text, how the firm came up, and the company, its size, the name, role, work email address and country of the person, the NDA request and the consent confirmation, plus the time and the page it was sent from.
• Attribution: the page the visitor arrived on, the referring address and a link parameter (via, ref or utm_source) are kept in the browser for the session only (sessionStorage, no cookie) and sent with the brief, so the firm knows which channel a lead came through.
• The draft: while the form is filled in, the entries are kept in the browser’s local storage on the visitor’s own device for up to seven days, so a reload does not erase them. The draft is deleted when the brief is sent and is never transmitted on its own.
• Where it goes: stored on this site’s server and sent by email to the firm’s lead mailbox. It is not passed to a third-party form service.
• Why: answering the inquiry and, where an engagement follows, preparing it. Legal basis: Art. 6 (1) b GDPR (steps prior to a contract at the request of the person) and, for the storage confirmed in the form, Art. 6 (1) a GDPR.
• Protection against automated submissions: a hidden field, a single-use token issued only after a real interaction with the page, and rate limits keyed on a salted hash of the sender’s IP address that is kept for at most one hour and cannot be reversed. The address itself is never stored.
• Spam checks in flight, where enabled: Akismet (Automattic Inc.) and Cloudflare Turnstile (Cloudflare Inc.) receive the submission and the sender’s IP address for that check only, under EU standard contractual clauses and, where certified, the EU-US Data Privacy Framework. Neither stores the brief.
• How long: as long as the inquiry or the engagement requires, then the commercial and tax retention periods (§ 257 HGB, § 147 AO). A brief that leads to nothing is deleted after twelve months.

5. The NDA

• If the brief asks for it, the firm generates its mutual NDA from the brief and mails a personal signing link at once.
• Signing stores name, position, time, the network address and a digest of the agreement text on the brief’s record: the evidence that the agreement was concluded (a simple electronic signature under eIDAS Art. 3 (10)).
• The signed copy goes to both parties by email; the firm countersigns by reply. Legal basis: Art. 6 (1) b GDPR.

6. Documents and files

• The site accepts no file uploads.
• Specifications, drawings, samples and commercial documents are exchanged only after the NDA, through the channel the parties agree at that point, and never through a public form.
• Email in transit is encrypted where the receiving server supports it. For material that must not travel by email the firm agrees a separate channel.

7. Who receives data

• Within the firm: the principals named on the Team page.
• Processors: the hosting provider (EU) and, where enabled, the spam-protection services in section 4.
• With consent: Google and Microsoft, for analytics, as described in section 3.
• Otherwise: only where a legal obligation requires it, or where the person has asked for it, for example when a brief is taken to a factory or partner after a go.

8. Your rights

• Access to the data the firm holds about you (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), portability (Art. 20), and objection to processing that rests on a legitimate interest (Art. 21).
• Withdrawal: a consent once given can be withdrawn at any time with effect for the future (Art. 7 (3)).
• How: write to the address in section 1. The firm answers within one month and asks for identification only where the request cannot otherwise be matched to a record.
• Complaint: to a supervisory authority. The authority responsible for the firm is Die Landesbeauftragte für den Datenschutz Niedersachsen, Prinzenstraße 5, 30159 Hannover.

9. Links

The site links to the firm’s knowledge platforms on subdomains of sentiention.com and to partner websites. Following a link takes the visitor to the respective provider, whose own notice applies.

10. Changes

This notice is updated when the site’s processing changes. The current version is always the one published here.

Version of 14 September 2026.