Privacy policy

This is a translation. In case of doubt, the German version applies.

This website presents Sanktum Defence Partners. It sets no cookies, puts nothing in your browser's local storage, measures no reach and loads nothing from third parties. What data is processed nonetheless, for what purpose and for how long, is set out here.

01Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

Sanktum Defence Partners is a brand of realxtrade GmbH.

02What this website does not do

We set no cookies, put nothing in your browser's local storage and use no analytics, tracking or advertising tools. No third-party content is embedded: no maps, no social media plugins, no externally hosted videos. Fonts, images and the video do not come from Google Fonts or any other third-party service: everything your browser loads on a visit comes from our own server. Like any website's fonts, images and scripts, they are kept in your browser's ordinary cache so they need not be loaded again on every visit.

03Hosting and server logs

The website runs on a server of our own, which we rent from STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany, and operate ourselves. The server is located in a data centre in Germany. STRATO GmbH provides the server and the network connection and processes the data on our behalf in doing so (Art. 28 GDPR).

When you open the site, the server processes the connection data this technically requires:

• IP address
• date and time of the request
• requested address and amount of data transferred
• address of the previously visited page (referrer)
• browser and operating system

This data is used to deliver the site, to find errors and to fend off attacks. We do not combine it with other data and do not use it for advertising or profiling. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is the secure and stable delivery of the website.

We delete the logs after 7 days at the latest. Where a specific attack has to be investigated, we keep the entries concerned until the investigation is complete.

04Encrypted transmission

The website is delivered exclusively over an encrypted connection (TLS). You can tell by the “https://” in your browser's address bar.

05Contact by email

If you email us, we process the details it contains, usually name, email address, company and the content of your message, to answer your enquiry. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is answering business enquiries. Where your enquiry aims at a contract with you personally, the legal basis is Art. 6(1)(b) GDPR.

Our mailboxes are operated on our behalf (Art. 28 GDPR) by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (Google Workspace). A transfer to Google LLC in the USA cannot be ruled out; Google is certified under the EU-U.S. Data Privacy Framework.

We delete your enquiry once it has been dealt with, unless statutory retention obligations apply. If it leads to a working relationship, we keep the business correspondence for as long as commercial and tax law require, usually six years (Section 257 HGB, Section 147 AO).

06Contact form

Through the contact form you send us your name, company and email address, a description of your project if you wish, and the language you are reading the site in. We need your name, company and email address to be able to reply; the form cannot be sent without them.

Our server forwards these details as an email to our mailbox info@sanktum.de and does not store them itself. A short confirmation of receipt, containing nothing from the form, goes to the address you gave, no more than one a day to the same address. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is answering business enquiries. Where your enquiry aims at a contract with you personally, the legal basis is Art. 6(1)(b) GDPR. The emails are then treated as set out under 05: they are kept in our mailbox with Google Workspace and deleted on the same terms.

To prevent misuse, the server limits how often the form can be sent from one IP address and how often a confirmation goes to the same email address. For this it keeps both for up to one day as an irreversible identifier (hash) in memory only; it does not write them to disk or link them to anything else. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is protecting the form and our mailbox from mass misuse.

07Your rights

You have the right of access to the data we hold about you (Art. 15 GDPR), to rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). An informal message to info@sanktum.de is enough.

Right to object under Art. 21 GDPR: Where we process data on the basis of Art. 6(1)(f) GDPR, you may object at any time on grounds relating to your particular situation. We will then no longer process the data unless we demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

08Right to lodge a complaint

You may lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is:

09No obligation, no automated decisions

You are under no statutory or contractual obligation to provide us with data. Without the technically necessary connection data, however, the website cannot be delivered, and without a name, company and email address no enquiry can be sent through the form. There is no automated decision-making, including profiling (Art. 22 GDPR).

10Changes

We update this privacy policy when the website or the law changes. The version published here applies.

As of September 2026