Privacy notice
13.09.2026
AnBu — Lê Nguyễn Thị Nhật Ánh
Freiberuflerin
Tassilostrasse 4
90429 Nürnberg
Deutschland
E-Mail: angela_le_@outlook.com
Tel.: +49 156 79092530
Scope and controller
These notices cover try.anbuhub.com and demo.anbuhub.com and related enquiries. The operator identified above is the controller.
Visits and project enquiries
Cloudflare processes technical access data such as IP address, time and requested resource for delivery and security (GDPR Article 6(1)(f): reliable, secure operation). Submitting the project form sends your name, contact detail, project description, selected service areas, language and, where selected, the demo-access request to our Cloudflare Worker for storage in D1. We use these details to process the enquiry and reply personally: Article 6(1)(b) for pre-contract enquiries, otherwise (f) for business correspondence. A pseudonymous access counter limits form abuse under (f) and is removed no later than the daily cleanup after 24 hours. Submitting does not grant demo access automatically; AnBu reviews the request. Facebook/WhatsApp are external contact channels with their own data processing after you open them.
Demo access
Guest access records include username, customer label, trial goal, approvals, timestamps and hashes of credentials. Email access additionally involves email address, identity ID, company and request goal. Our email sign-in is available only when enabled; Cloudflare Access protects the separate account portal. AnBu reviews access requests; AI does not decide them. Required details are needed to provide access (Article 6(1)(b)); abuse protection and access logs use (f).
Sample data and browser storage
Use fictional sample data only. Edits are sent to our Cloudflare Worker for processing and the test state is kept in browser sessionStorage, not persisted as business records in D1. A saved state is discarded on further use after its two-hour demo validity and cleared on logout. Guest sessions last 15, 30 or 60 minutes as issued. If enabled, our email sessions last 30 minutes and codes 10 minutes. Essential session cookies protect access (§25(2)(2) TDDDG). The application includes no advertising or visitor analytics; demo reports use sample data.
Retention
Daily cleanup removes inactive requests 30 days after their last status change or access expiry. Guest access is removed 30 days after the latest update, redemption deadline or session end. Access/notification history: 90 days. Temporary abuse counters and expired email proofs: after 24 hours, by the next daily run. Active access is preserved. Project correspondence: until the enquiry is resolved, then deleted unless statutory retention duties or specific legal claims require continued storage, limited to the necessary records. Cloudflare logs and backups: D1 is configured with EU jurisdiction. Recovery copies cover up to 7 or 30 days depending on Workers plan. Cloudflare Access authentication logs are retained for 24 hours, 30 or 180 days depending on plan; see Cloudflare documentation. Cloudflare may retain its own security/network data according to the purposes and necessity criteria in its privacy policy.
Providers and international transfers
We use Cloudflare, Inc., USA, for the hosting, security, database and access services deployed. Processing outside the EEA may occur. Cloudflare describes its processing in the Data Processing Addendum linked below. Transfers use the applicable safeguards in the Cloudflare DPA, including standard contractual clauses where required. Contact us for details or copies of relevant safeguards.
Your rights
Subject to legal conditions, request access, correction, deletion, restriction or portability using the email above. You may object on grounds relating to your situation to processing based on legitimate interests, and withdraw any consent prospectively. You may complain to a data protection authority, notably where you live, work or believe a breach occurred. We do not make solely automated decisions with legal or similarly significant effects.
Email contact
Your messages are processed in the Outlook mailbox listed above, provided by Microsoft. Microsoft may process data outside the EEA. See https://privacy.microsoft.com/privacystatement.
Sign-in emails through Resend
We use Resend (Plus Five Five, Inc., USA) for sign-in codes and access messages. Recipient address, message content including the sign-in code, and delivery data are processed to provide requested access (GDPR Article 6(1)(b)). Resend stores customer data in the United States; the Ireland sending region does not mean exclusively European storage. Processing, deletion and transfer safeguards: Resend DPA and Resend privacy information.