Pipewave LogoPipewave

Privacy Policy

This privacy policy explains which personal data we process on this website, for what purposes, and which rights you have.

1. Controller

Pipewave UG (haftungsbeschränkt)
Managing director: Joshua Kresse
Lottbeker Weg 13
22397 Hamburg, Germany
Email: kontakt@pipewave.de

2. Hosting and server log files

This website is hosted on servers of Strato AG, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany. When you visit the site, the server automatically processes log files: requested page, date and time, transferred data volume, browser type and version, operating system, referrer URL, and IP address. This data is required for technical operation and security and is not merged with other data sources. Legal basis: our legitimate interest in a secure and stable operation (Art. 6(1)(f) GDPR). A data processing agreement is in place with Strato.

3. Cookies and consent

On your first visit, a cookie banner asks for your consent. Without your consent, no analytics or marketing cookies are set. Your choice is stored locally in your browser and can be changed or withdrawn at any time via the "Cookie Settings" link in the footer. There are two categories: Analytics (Google Analytics, HubSpot) and Marketing (Google Ads conversion tracking). Legal basis: your consent (Art. 6(1)(a) GDPR, § 25(1) German TDDDG).

4. Google Analytics 4

We use Google Analytics 4, a web analytics service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, with Google Consent Mode v2: without your consent, no cookies are set and no persistent identifiers are stored; at most, cookieless aggregated signals are transmitted. IP addresses are truncated or discarded at collection. Data may be transferred to Google servers in the USA; Google LLC is certified under the EU-US Data Privacy Framework. A data processing agreement is in place. Legal basis: your consent (Art. 6(1)(a) GDPR), revocable at any time via the cookie settings.

5. Google Ads conversion tracking

We run ads via Google Ads (Google Ireland Limited). To measure whether visits from an ad lead to inquiries, we use conversion tracking: when you click an ad, Google passes a click ID (GCLID) to our website. Only if you have consented to the "Marketing" category is this click ID stored and a later inquiry attributed to the ad. We use conversion tracking solely to measure ad performance, not for personalized advertising or remarketing. Legal basis: your consent (Art. 6(1)(a) GDPR).

6. HubSpot

For contact forms, meeting scheduling, and our CRM we use HubSpot, a service of HubSpot Ireland Ltd., 1 Sir John Rogerson's Quay, Dublin 2, Ireland. Our HubSpot instance runs in an EU data center. HubSpot tracking (visitor recognition via cookies) is only loaded with your consent in the "Analytics" category. Data you actively submit (forms, bookings) is processed regardless of tracking consent. A data processing agreement is in place.

7. Contact form and meeting booking

When you use our contact form, we process the data you provide (name, email, optional company, your message) to answer your inquiry. For meeting bookings we process name, email, and the selected time slot. Data is stored in our CRM (HubSpot). Legal basis: pre-contractual measures (Art. 6(1)(b) GDPR) or our legitimate interest in handling inquiries (Art. 6(1)(f) GDPR).

8. Playbook download

You can request our playbook "From manual process to AI agent" on this website. We process the data provided in the form: first name, last name, email, company, and your answers regarding role, team size, and (optionally) the process you would like to automate. Delivery uses a double-opt-in procedure: you first receive a confirmation email; only after you click the confirmation link do we deliver the playbook, store your data in our CRM (HubSpot), and send a small number of follow-up emails on the topic, from which you can unsubscribe at any time. If you do not confirm, we remind you at most once by email; unconfirmed requests are deleted after 30 days at the latest. The technical processing runs on our self-hosted automation platform (n8n) on Strato servers in Germany; emails are sent via Microsoft 365. Legal basis: your consent (Art. 6(1)(a) GDPR), evidenced by the double opt-in.

9. AI readiness check

You can take a self-assessment on this website that gauges your company's AI readiness. Answering the questions and viewing the result happens entirely in your browser; no data is transmitted to us. Only if you request the detailed report do we process the data provided in the form (first name, last name, email, company) together with your test result (scores per dimension and maturity level). We send you the report by email, store the data in our CRM (HubSpot), and may contact you once about it. You will not receive further emails without separate consent. The technical processing runs on our self-hosted automation platform (n8n) on Strato servers in Germany; emails are sent via Microsoft 365 (see section 10). Legal basis: fulfilment of your request (Art. 6(1)(b) GDPR) and our legitimate interest in following up on business enquiries (Art. 6(1)(f) GDPR).

10. Email communication

We use Microsoft 365 (Microsoft Ireland Operations Ltd., One Microsoft Place, Dublin 18, Ireland) for our email communication. Data may be transferred to the USA; Microsoft Corporation is certified under the EU-US Data Privacy Framework. A data processing agreement is in place.

11. Social media links

Our website links to our profiles on LinkedIn and Instagram. These are plain links without embedded plugins or tracking pixels. Only when you follow a link does the respective provider process your data under its own privacy policy.

12. Your rights

Contact kontakt@pipewave.de for any of these. You also have the right to lodge a complaint with a supervisory authority; the authority responsible for us is the Hamburg Commissioner for Data Protection and Freedom of Information (HmbBfDI), Ludwig-Erhard-Str. 22, 20459 Hamburg, Germany.

13. Retention

We store personal data only as long as necessary for the respective purpose or as required by statutory retention obligations, and delete it afterwards.

Last updated: July 2026