Last updated: 24 September 2026
At a glance
This website is built to process as little personal data as possible. It sets no cookies, stores nothing on your device, uses no analytics or tracking, embeds no content from other providers and serves its fonts from its own server. The only personal data processed when you visit are the technical request data every web server needs to deliver a page. If you email or call us, we process what you send us to answer you.
Controller
Cyber Monks GmbHDarmstädter Landstraße 116, 4th floor
60598 Frankfurt am Main, Germany
Phone: +49 69 75 66 800-0
Email: info@cyber-monks.com
Represented by the managing director, Anas Handous.
Visiting this website: hosting and server logs
This website is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. When you open a page, your browser sends and Vercel’s servers process the following data:
- your IP address
- date and time of the request
- the page or file requested and the amount of data transferred
- the website you came from (referrer)
- your browser and operating system (user agent)
- the response status (for example, whether the page was found)
Purpose: to deliver the website to you, to keep it stable and to detect and defend against attacks and misuse.
Legal basis: Art. 6(1)(f) GDPR. Our legitimate interest is a website that works and is secure.
Storage: the log data are kept by the hosting provider only for a short period and then deleted automatically. Where an incident requires analysis, the relevant data are kept until it has been resolved.
Processor and transfer outside the EU: Vercel processes these data on our behalf under a data processing agreement (Art. 28 GDPR). Vercel may process data in the USA. The transfer is based on the European Commission’s adequacy decision for the EU–U.S. Data Privacy Framework, under which Vercel is certified (Art. 45 GDPR), and on the standard contractual clauses in Vercel’s data processing agreement (Art. 46(2)(c) GDPR).
Contacting us
If you contact us by email or phone, we process the data you give us — typically your name, company, contact details and the content of your message — to deal with your enquiry.
Legal basis: Art. 6(1)(b) GDPR where your enquiry relates to a contract with us or to steps before entering into one; otherwise Art. 6(1)(f) GDPR, our legitimate interest in answering the enquiries we receive.
Storage: we delete the data once your enquiry has been dealt with, unless statutory retention obligations, in particular under commercial and tax law, require us to keep them longer.
No cookies, no tracking, no third-party content
This website does not set cookies and does not store or read any other information on your device. It uses no web analytics, no advertising or social-media tracking, no embedded videos, maps or social plugins, and loads no fonts or scripts from other providers. That is why there is no cookie banner.
Links to other websites
This website links to our support portal and our LinkedIn page. These are separate services with their own privacy notices; this policy covers only this website. When you follow such a link, the other website receives your IP address and, as the referrer, only the address of our website — not the page you were on.
Recipients
Apart from our hosting provider, acting as our processor, we do not pass on your data unless we are legally obliged to do so.
Your rights
Under the GDPR you have the right to:
- access the personal data we hold about you (Art. 15)
- have inaccurate data corrected (Art. 16)
- have your data erased (Art. 17)
- have the processing restricted (Art. 18)
- receive your data in a portable format (Art. 20)
Right to object (Art. 21 GDPR): where we process your data on the basis of our legitimate interests (Art. 6(1)(f) GDPR), you have the right to object at any time, on grounds relating to your particular situation. We will then stop processing the data unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.
To exercise any of these rights, contact us using the details in section 1. You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is the Hessian Commissioner for Data Protection and Freedom of Information (Der Hessische Beauftragte für Datenschutz und Informationsfreiheit), Wiesbaden: datenschutz.hessen.de.
Further information
You are not obliged to provide us with personal data. Without the technical request data, however, we cannot deliver this website to you. We do not use automated decision-making or profiling (Art. 22 GDPR).
All connections to this website are encrypted (HTTPS). We update this policy whenever the website or the law changes; the date at the top shows the current version.

