1. Introduction

We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how personal data may be collected, used, stored, and disclosed when you visit our website, contact us through our contact forms, or interact with our website’s cookies and analytics technologies.

This Privacy Policy is intended to provide information in accordance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

2. Data Controller

The data controller responsible for processing personal data through this website is:

Business or legal name: Sanh Media UG

Website: https://sanh-media.com/

Business address: Wohlfahrtstraße 217, 44799 Bochum

Email address: hoptac@sanh-media.com

For questions about this Privacy Policy or the processing of your personal data, please contact us using the details above.

3. Personal Data We Collect

Depending on how you interact with our website, we may process the following categories of personal data.

3.1 Information submitted through contact forms

When you contact us through a contact form, we may collect:

    • Your name

    • Your email address

    • Your message and any information you voluntarily provide

    • Any additional information requested by the form

We use this information to respond to inquiries, communicate with you, and handle requests.

Legal basis: Processing may be based on Article 6(1)(b) GDPR where necessary to take steps at your request before entering into a contract or to perform a contract. Other inquiries may be processed under Article 6(1)(f) GDPR, where our legitimate interests in responding to communications outweigh your rights and interests.

Please avoid submitting sensitive personal information unless it is necessary and specifically requested.

3.2 Technical and server log data

When you visit the website, technical information may be processed by our hosting provider or server infrastructure. Depending on the configuration, this may include:

    • IP address

    • Date and time of access

    • Requested page or resource

    • Browser type and version

    • Operating system

    • Referring URL

    • Technical error information

This information may be used to deliver the website, maintain security, troubleshoot technical issues, and prevent misuse.

Legal basis: Article 6(1)(f) GDPR, where applicable, based on our legitimate interests in operating and securing the website.

The actual log data collected and its retention period depend on our hosting provider and server configuration.

3.3 Analytics data

We may use website analytics technologies to understand how visitors use our website and to improve its performance and content.

Depending on the analytics service and configuration, information may include:

    • Pages visited and interactions with website content

    • Visit duration and navigation patterns

    • Referring websites

    • Device, browser, and approximate location information

    • Cookie identifiers or other online identifiers

Analytics may involve cookies or similar technologies. The specific analytics provider, data collected, and processing locations must be confirmed and identified in this Privacy Policy before publication.

Where consent is legally required, analytics technologies will be activated only after valid consent has been obtained.

Legal basis: Article 6(1)(a) GDPR where processing is based on consent. Where a different legal basis is relied upon, it must be appropriate to the specific analytics setup and applicable law.

3.4 Cookies and similar technologies

Our website may use cookies and similar technologies to support website functionality, remember preferences, measure usage, and provide analytics.

Cookies may include:

    • Strictly necessary cookies: Required for essential website functionality or security.

    • Preference cookies: Used to remember settings or preferences.

    • Analytics cookies: Used to measure and understand website usage.

    • Other cookies: Any additional categories must be identified according to the technologies actually implemented on the website.

Non-essential cookies and similar technologies will be used only where the required consent has been obtained.

You can manage your preferences through the website’s cookie settings, where available. You may also manage cookies through your browser settings. Blocking certain cookies may affect website functionality.

4 Purposes of Processing

We may process personal data for the following purposes:

    1. To operate and maintain the website.

    1. To respond to contact form submissions and other inquiries.

    1. To protect the website against spam, abuse, and security threats.

    1. To understand website traffic and improve website content and functionality.

    1. To remember user preferences and manage cookie consent.

    1. To comply with applicable legal obligations.

    1. To establish, exercise, or defend legal claims where necessary.

We will not use personal data for purposes incompatible with those described in this Privacy Policy without providing any additional information or obtaining consent where required.

5. Disclosure of Personal Data

We may share personal data with third parties where necessary for the purposes described above, including:

    • Website hosting providers: To host and deliver the website.

    • Contact form and email providers: To receive, process, and respond to inquiries.

    • Analytics providers: To measure website usage, if analytics services are enabled.

    • Technical service providers: To maintain website functionality and security.

    • Public authorities or legal advisers: Where disclosure is required by law or necessary to protect legal rights.

The identity of the providers currently used by this website has not been verified. Their names, roles, and relevant data protection arrangements should be added before publication.

We do not sell personal data unless this statement is revised to accurately reflect the website’s actual practices.

6. International Data Transfers

Some service providers may process personal data outside the European Economic Area (EEA).

Where personal data is transferred to a country outside the EEA, we will ensure that the transfer complies with applicable data protection law. Depending on the circumstances, this may involve an adequacy decision, appropriate safeguards such as Standard Contractual Clauses, or another lawful transfer mechanism.

The countries to which data may be transferred and the safeguards used depend on the providers and infrastructure actually used by the website. These details have not yet been verified.

7. Data Retention

We retain personal data only for as long as necessary for the purposes for which it was collected, unless a longer retention period is required or permitted by law.

Our retention practices should include the following:

    • Contact form submissions: Retained for as long as necessary to handle the inquiry and any related follow-up, subject to applicable legal retention requirements.

    • Server logs: Retained for the period necessary for security, troubleshooting, and operational purposes.

    • Analytics data: Retained according to the configuration of the analytics service and applicable consent requirements.

    • Cookie data: Retained according to the duration of each cookie and the applicable consent settings.

The exact retention periods must be confirmed based on our actual systems, service providers, and legal obligations.

8. Your Data Protection Rights

Subject to applicable law and the conditions for exercising each right, you may have the right to:

    • Access: Request confirmation of whether we process your personal data and obtain a copy.

    • Rectification: Request correction of inaccurate or incomplete information.

    • Erasure: Request deletion of personal data in applicable circumstances.

    • Restriction: Request restriction of certain processing activities.

    • Objection: Object to processing based on legitimate interests, including where applicable processing for direct marketing.

    • Data portability: Receive certain personal data in a structured, commonly used, machine-readable format.

    • Withdraw consent: Withdraw consent at any time where processing is based on consent. Withdrawal does not affect the lawfulness of processing before withdrawal.

    • Complain to a supervisory authority: Lodge a complaint with the competent data protection authority.

To exercise your rights, please contact us using the contact details provided in Section 2. We may request reasonable information to verify your identity where necessary.

Further information about these rights is available in the GDPR and official European data protection guidance.

9. Data Security

We take appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction.

Such measures may include access controls, secure connections, software updates, and appropriate security practices for website hosting and data handling.

No method of transmission or storage can be guaranteed to be completely secure. Our specific security measures should be confirmed against the website’s actual technical configuration.

10. Cookie Consent and Preference Management

Where required by applicable law, our website will request consent before placing or accessing non-essential cookies or using similar technologies.

Visitors should be able to accept or reject non-essential cookies and change their preferences later through a cookie settings mechanism, where applicable.

Withdrawing consent should be as straightforward as giving it. Cookie preferences and consent records should be managed in accordance with the actual consent-management system used on the website.

11. Third-Party Websites

Our website may contain links to external websites or services. We are not responsible for the privacy practices, content, or security of third-party websites.

When you visit an external website, its own privacy policy and terms may apply. We recommend reviewing those documents before providing personal data.

12. Children’s Privacy

Our website is not intended to collect children’s personal data unnecessarily. If we become aware that personal data has been collected unlawfully from a child, we will take appropriate steps in accordance with applicable law.

Any age restrictions or additional safeguards should reflect the website’s actual audience and activities.

13. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our website, data processing activities, service providers, or applicable legal requirements.

The latest version will be published on this page, together with the date of the most recent update.

14. Contact

If you have questions about this Privacy Policy or wish to exercise your data protection rights, please contact:

Email: hoptac@sanh-media.com
Address: Wohlfahrtstraße 217, 44799 Bochum.