Privacy
Controller
Tobias Pipper, VULEN
Ludwig-Richter-Str. 8
55218 Ingelheim am Rhein, Germany
Email: [email protected]
Website hosting and security
Cloudflare Pages hosts this website. Cloudflare also provides the authoritative nameservers for vulen.net. Access involves processing technical connection and request data, which may include IP address, access time, requested URL, browser/device information and security events.
This processing delivers the website and detects or prevents disruption and attacks. Its legal basis is Article 6(1)(f) GDPR: our legitimate interest in a secure, reliable website. Cloudflare's Self-Serve terms identify Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA, as the provider and incorporate its data processing addendum. See the terms, privacy policy and data processing addendum.
Cloudflare operates a global network; processing exclusively in Germany or the EU is not promised. Transfers to third countries are subject to the applicable conditions and safeguards under Chapter V GDPR. The data processing addendum provides EU Standard Contractual Clauses and additional safeguards for transfers within its scope. Relevant safeguards can be viewed in the linked agreement or requested from us.
Data is processed only as long as required for the relevant operational and security purposes or legal obligations. The criteria are necessity for secure operation, investigation of specific security incidents and legal retention duties; data must be deleted once these grounds cease. There is no single retention period applying to all Cloudflare data.
If Cloudflare presents a security challenge to protect against attacks, successful completion sets a technically necessary cookie (cf_clearance).
Email contact
When you email us, we process your email address, the information you provide and your message to handle your request and reply. Please provide only what is necessary.
General enquiries are processed under Article 6(1)(f) GDPR, based on our legitimate interest in responding. Requests relating to entering into or performing a contract are processed under Article 6(1)(b). Applicable statutory retention duties are fulfilled under Article 6(1)(c).
We use Proton Mail, provided by Proton AG, Route de la Galaise 32, 1228 Plan-les-Ouates, Geneva, Switzerland. See its privacy policy and Mail privacy policy. Switzerland is a third country covered by a European Commission adequacy decision. Provider documents describe contractual terms and subprocessors. Proton's data processing agreement also applies to the Free plan, according to Proton.
Ordinary enquiries are deleted no later than six months after the matter is closed. Documents required by law or for establishing, exercising or defending legal claims are retained separately for the necessary period. Technical security evidence is minimised and reviewed separately. Statutory retention depends on the content of correspondence. Ordinary emails between different providers are not promised to have end-to-end encryption.
Vulnerability reports
Reports first reach the company mailbox managed by the owner, who coordinates technical investigation. We also use AI-assisted development tools (Anthropic PBC, OpenAI). Before sharing, we remove personal information; only technical details are passed on. The owner does this manually and does not pass on the reporter's name or email address.
Please do not send credentials, complete private backups or third-party personal data. We will agree on a suitable channel for sensitive technical details if needed.
Website functions
This website contains no analytics or advertising scripts, contact forms or externally loaded fonts. Language links switch between the German and English pages. Our website code sets no cookies and uses no persistent browser storage.
Hosting and security functions are separate. Security checks may use technically necessary cookies. The public website does not use a Cloudflare Access login.
External links
When you follow an external link, your browser does not transmit the address of the page you came from. The linked provider is responsible for its processing. Email links open your email application. No publicly released VULEN applications or checkout process currently form part of this website.
Your rights
Subject to legal conditions, you have rights of access, rectification, erasure, restriction and data portability. You may object on grounds relating to your particular situation to processing based on Article 6(1)(f) GDPR. Consent, where given, can be withdrawn for the future.
Contact [email protected]. You may complain to a data protection supervisory authority. The authority for our location is the State Commissioner for Data Protection and Freedom of Information Rhineland-Palatinate: datenschutz.rlp.de.
App privacy
See the additional Storage Keeper privacy notice.
Changes
We review this notice when services or processing change. Last updated: 6 November 2026.