Trickhouse

Privacy Policy

As of: September 2026

This privacy policy informs you about how we process personal data when you visit our website, use our services or contact us.

1. Controller

Trickhouse
Jülicher Straße 96
40477 Düsseldorf

Email: info@trickhouse.net
Phone: +49 1575 7057960
Website: www.trickhouse.net

2. Collection and storage of personal data

We process personal data in particular when you:

  • visit our website
  • use one of our contact or application forms
  • book a consultation
  • commission content or other services from us
  • provide image, video, audio or product material for processing
  • communicate with us by email or phone

2.1 Visiting the website

When you visit our website, the following technical data in particular may be processed:

  • IP address
  • Device type, browser and operating system
  • Time of access
  • Pages and files accessed
  • Referrer URL
  • Technically necessary cookies and comparable technologies
  • Analytics and marketing data, provided you have consented to this

2.2 Customer and contract data

In the course of a business relationship, the following data in particular may be processed:

  • Name and contact details
  • Address
  • Email address and phone number
  • Company name and business address
  • Payment and invoicing information
  • Project-related information and communication

2.3 Materials for AI and content production

If you provide us with image, video, audio, product or other files as part of a project, the following data in particular may be processed:

  • Image data
  • Video data
  • Audio material
  • Product and reference material
  • Technical metadata of the files

Processing takes place exclusively for the agreed project purpose.

Project material is deleted as soon as it is no longer required to carry out the project and there are no statutory, contractual or other legitimate grounds for further storage. Different archiving or usage arrangements can be agreed by contract.

3. Purposes of data processing

We process personal data in particular for the following purposes:

  • Carrying out our AI and content productions
  • Creating images, videos, digital twins and other visual content
  • Preparing offers and handling contracts
  • Communicating with prospective and existing customers
  • Handling contact enquiries and applications
  • Scheduling appointments
  • Operating and securing our website
  • Audience measurement and marketing, where corresponding consent has been given
  • Preventing misuse and spam

4. Legal bases

Personal data is processed in particular on the basis of:

  • Art. 6(1)(b) GDPR – performance of pre-contractual measures and of the contract
  • Art. 6(1)(a) GDPR – consent
  • Art. 6(1)(f) GDPR – legitimate interests, in particular security, prevention of misuse and the technically necessary operation of the website
  • Art. 6(1)(c) GDPR – compliance with legal obligations, where applicable

5. Recipients and disclosure of data

Personal data is only disclosed insofar as this is necessary for the respective purpose.

This may include in particular:

  • Hosting and infrastructure providers
  • Content management systems
  • CRM and form providers
  • Appointment booking services
  • Analytics and marketing services after consent
  • Payment service providers
  • Technical service providers and render infrastructure
  • Employees, freelancers and processors used for specific projects

Where a service provider processes personal data on our behalf, we conclude the data processing agreements required by law.

Personal data is not disclosed to unauthorised third parties.

6. Storage period and deletion

Personal data is in principle only stored for as long as is necessary for the respective processing purpose.

Longer storage may take place in particular if:

  • statutory retention obligations exist
  • data is needed to assert or defend legal claims
  • contractual agreements provide for further retention

Once the respective purpose has ceased to apply and statutory retention periods have expired, the data is deleted.

7. Rights of data subjects

Within the framework of the statutory requirements, you have in particular the following rights:

  • Right of access
  • Right to rectification
  • Right to erasure
  • Right to restriction of processing
  • Right to data portability
  • Right to object to certain processing
  • Right to withdraw consent given, with effect for the future

In addition, you have the right to lodge a complaint with a competent data protection supervisory authority.

8. Data security

We take appropriate technical and organisational measures to protect personal data.

These include in particular:

  • TLS/SSL encryption
  • Access restrictions
  • User and authorisation concepts
  • Security measures for our systems and infrastructure
  • Appropriate protective measures for customer and project material

9. Cookies, Google Analytics and Meta Pixel

Our website uses technically necessary cookies and comparable technologies, for example to store your cookie choice.

In addition – exclusively after your prior consent – analytics and marketing services may be used.

Google Analytics 4

We may use Google Analytics 4, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, to analyse the use of our website.

Google Analytics is only activated if you have consented to the “Statistics” category via our cookie banner.

Consent can be withdrawn at any time via the cookie settings.

Meta Pixel

We may use the Meta Pixel of Meta Platforms Ireland Limited, Merrion Road, Dublin 4, Ireland, to measure the effectiveness of advertising measures and to build audiences.

The Meta Pixel is only activated if you have previously consented to the “Marketing” category.

HubSpot tracking

HubSpot may additionally use tracking technologies to attribute website visits and form enquiries.

Such marketing and tracking functions are only activated in accordance with your cookie choice.

The processing of data that you actively submit via a HubSpot form is to be distinguished from this and takes place in order to handle your respective enquiry or application.

The legal basis for analytics and marketing technologies requiring consent is Art. 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG.

You can change or withdraw your consent at any time via “Cookie settings” in the footer.

10. AI and generative media

In the course of our services, personal and project-related data may be processed with the help of AI-supported systems.

We use customer and project material exclusively for the purposes agreed by contract.

Personal customer or project materials are only used for our own training purposes if this has been expressly agreed or a corresponding legal basis exists.

When selecting technical service providers, we pay attention to appropriate data protection and security standards.

Real persons are only processed in digital twin or comparable projects on the basis of corresponding contracts, consents or rights of use.

11. Newsletter

Insofar as we offer a newsletter, it is only sent after corresponding consent has been given.

Consent given can be withdrawn at any time with effect for the future.

12. Hosting and service providers used

Vercel

Our website is provided via Vercel.

The provider is Vercel Inc., USA.

When our website is accessed, Vercel processes technical data, in particular IP addresses, times of access and requested content, insofar as this is necessary for the provision, security and operation of the website.

Server-side functions of our website are configured for the Frankfurt region.

Insofar as Vercel processes personal data on our behalf, this takes place on the basis of a corresponding data processing agreement.

Sanity

We use Sanity to manage and deliver our website content.

The provider is Sanity AS, Oslo, Norway.

Sanity is used to manage texts, images and other website content. When content provided via Sanity is retrieved, technical access data may be processed.

Data from our contact and application forms is not stored in Sanity.

HubSpot

We use HubSpot for our CRM as well as our contact and application form.

The data entered via these forms is transmitted to HubSpot and processed to handle your enquiry or application.

This may include in particular:

  • Name
  • Contact details
  • Company information
  • Details from the message or application field

Processing takes place in particular to carry out pre-contractual measures and to handle your enquiry pursuant to Art. 6(1)(b) GDPR and – where applicable – on the basis of legitimate interests pursuant to Art. 6(1)(f) GDPR.

HubSpot's tracking and marketing functions are only used in accordance with your cookie choice.

Spam and misuse protection

HubSpot may use technologies to protect its forms from spam and automated access.

In this process, technical information such as IP address, browser information and interaction data may be processed.

Processing takes place on the basis of our legitimate interest in the security of our website and in preventing misuse pursuant to Art. 6(1)(f) GDPR.

Calendly

We use Calendly to schedule intro calls.

Calendly is only loaded when you call up the corresponding booking function or use the “Book an intro call” button.

When it is used, your contact details, appointment data and technical access information in particular may be transmitted to Calendly.

Processing takes place for the purpose of scheduling appointments and carrying out pre-contractual measures.

13. Social media

Our website contains links to external social media platforms such as Instagram, TikTok or LinkedIn.

Merely visiting our website does not transmit any data to the respective platform through these links. Only when you click on a corresponding link do you leave our website, and the privacy provisions of the respective provider apply.

14. Changes to this privacy policy

We reserve the right to adapt this privacy policy if our data processing, the services used or legal requirements change.

Current version: September 2026