Privacy Policy
This policy explains, in accordance with Art. 13 and 14 GDPR, which personal data we process, on what legal basis, how long we store it, with whom we share it, and what rights you have. Last updated: 07.06.2026.
Controller
The controller for the data processing on this website is:
Anton Shakin (sole trader / Einzelunternehmen) Bernhard-Göring-Straße 86 04275 Leipzig Germany
Email: hi@procursa.de
We can be reached in writing; we do not maintain a telephone line. We are not legally required to appoint a data protection officer (Art. 37 GDPR); please direct any data protection matters to the email address above.
Definitions and principles
Personal data is any information relating to an identified or identifiable person (Art. 4 No. 1 GDPR), which includes your IP address. We process personal data only as far as this is necessary to operate the website and provide our services, and we base every processing operation on a legal ground under Art. 6 GDPR.
Accessing the website and server logs (hosting)
This website is delivered by Cloudflare on the Cloudflare Pages platform with a Frankfurt edge location. The provider is Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA, with its German branch Cloudflare Germany GmbH.
Each time the website is accessed, Cloudflare, acting as our processor, automatically processes technically necessary connection data (server logs): your IP address, the date and time of access, the page or file requested, the volume of data transferred, the HTTP status code, the page visited before (referrer), and details of your browser and operating system. This data is necessary to deliver the website and to keep it secure (including defence against attacks and DDoS protection).
The legal basis is our legitimate interest in the secure and stable operation of the website under Art. 6(1)(f) GDPR (see Recital 49 GDPR on network and information security).
A data processing agreement under Art. 28 GDPR is in place with Cloudflare (Cloudflare Data Processing Addendum). Cloudflare, Inc. is based in the USA, which may involve a transfer to a third country. Cloudflare, Inc. is certified under the EU-U.S. Data Privacy Framework; transfers to the USA are therefore covered by the European Commission's adequacy decision of 10.07.2023 (Art. 45 GDPR). In addition, Cloudflare relies on the EU Commission's Standard Contractual Clauses (Art. 46 GDPR). Further information: https://www.cloudflare.com/en-gb/trust-hub/gdpr/.
Fonts and external content
Fonts and design elements are served exclusively from our own server (Cloudflare/Frankfurt). No fonts or scripts are loaded from Google Fonts or any other external service; accessing the site therefore establishes no connection to third parties and transmits no IP address to them.
Contact and intake form
When you contact us through the form on the contact page or by email, we process the data you provide, typically your name, your email address, and the content of your message, in order to handle your enquiry. If your enquiry concerns booking one of our services, the processing is carried out to take pre-contractual steps and to perform the contract under Art. 6(1)(b) GDPR. For a general enquiry with no contractual purpose, we rely on your consent under Art. 6(1)(a) GDPR and on our legitimate interest in responding to your enquiry under Art. 6(1)(f) GDPR.
The form is transmitted technically through a service with a server location in the European Union ([EU form relay — provider to follow]). A data processing agreement under Art. 28 GDPR is in place with this provider. No transfer to a third country takes place.
Order data
When you book a service, we process the documents and information needed to carry it out: the contents of your CV (name, contact details, education, work history), the job posting you submit, your cover-letter details, and your notes and approvals. We process this data exclusively to provide the service you have booked, under Art. 6(1)(b) GDPR.
Providing this data is voluntary but necessary to deliver the service: without the details required for your application documents we cannot carry out the order.
Your order documents are processed exclusively on infrastructure within the European Union. Please do not submit any special categories of personal data within the meaning of Art. 9 GDPR through the form (for example, details of health, religion, trade union membership, or ethnic origin) unless they are necessary for the service.
We do not use your order documents for AI training and not for portfolio or case-study purposes, unless you have given your express written consent.
Use of AI and no automated decision-making
We use AI as a production tool, for example to analyse job postings, match keywords, suggest structure, and check quality. Every deliverable is reviewed and finalised by a human; the use of AI is disclosed with every deliverable.
No decision producing legal effects concerning you is taken solely on the basis of automated processing (Art. 22 GDPR). We do not carry out profiling.
Recipients and processors
We share your data only as far as this is necessary to operate the website and provide our services. We use the following processors under Art. 28 GDPR:
- Cloudflare (hosting/delivery of the website; USA, EU-U.S. Data Privacy Framework, see above);
- the provider of the EU form relay for receiving and forwarding your form messages (server location European Union, [EU form relay — provider to follow]);
- the provider of our email mailbox for handling your enquiries.
We do not share your data for advertising purposes, and we do not sell it.
Retention period
We store personal data only for as long as it is needed for the respective purpose (Art. 5(1)(e) GDPR).
- Server logs are kept by the host for a short period to ensure operation and are then deleted.
- Enquiries made through the contact form or by email are deleted once the enquiry has been fully handled and no statutory retention obligations apply.
- Order documents are deleted 30 days after delivery, unless an active follow-up order exists.
Where we are legally required to retain data, in particular for invoices and tax-relevant documents, we store the data concerned until the end of the relevant retention period: as a rule eight years (§ 147 Abs. 3 i.V.m. Abs. 1 Nr. 4 AO; § 257 HGB; since 01.01.2025).
Your rights
Under the GDPR you have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and the right to object to processing based on our legitimate interest (Art. 21). Where processing is based on your consent, you may withdraw it at any time with effect for the future (Art. 7(3) GDPR); the lawfulness of processing carried out before the withdrawal is unaffected.
To exercise your rights, an informal message to hi@procursa.de is sufficient.
Data security
We take appropriate technical and organisational measures to protect your data (Art. 32 GDPR). This website and the contact form are transmitted in encrypted form via the HTTPS (TLS) protocol.
Changes to this policy
We update this privacy policy when the legal situation or our data processing changes. The version published on this page applies in each case.