Privacy

This page says what happens to data when you visit turnkeel.com and when you write through the contact form. It is about this website only, not about the Turnkeel software, which you run yourself.

Who is responsible

The controller under the General Data Protection Regulation (GDPR) is:

In short

• The site sets no cookies and uses no local storage.
• There is no analytics, no tracking and no advertising.
• Every page loads only files from turnkeel.com itself. The fonts are files of this site; no font host, script host or other third party is asked for anything.
• The contact form sends your message by email and stores nothing else from it.

How the site is served

The pages are static files. They are stored in Amazon S3 in the AWS region Frankfurt (eu-central-1) and delivered by Amazon CloudFront, a network of servers in many countries; a request is usually answered by a server near you, which can be outside the European Union. Both are services of Amazon Web Services, in Europe Amazon Web Services EMEA SARL, 38 Avenue John F. Kennedy, L-1855 Luxembourg, which processes the data on our behalf under its data processing terms.

To deliver a page, your browser has to send technical data with each request: your IP address, the date and time, the address requested, and what your browser sends in its headers, such as its name and version and the referring page. AWS processes this to answer the request and may keep it for a limited time in its own logs for the security and operation of its services. We have not turned on CloudFront’s access logs for this site, and we do not analyse who visits.

Where AWS processes data outside the European Economic Area, for example in the United States, the transfer rests on the EU–US Data Privacy Framework, under which Amazon is certified, and on the European Commission’s standard contractual clauses.

Legal basis: Art. 6 (1) (f) GDPR. Our legitimate interest is to deliver the site securely and reliably.

The contact form

When you send the form, these fields go to a function of ours in the AWS region Frankfurt: your name, your email address, the subject and the message. The function checks them and sends them, through Amazon Simple Email Service in the same region, as one plain-text email to support@turnkeel.com. It does not store the message anywhere else. The email stays in that mailbox as long as it is needed to answer you and for any follow-up.

To keep automated mail out, the form uses three checks that need no cookie and no outside service:

• a field that people do not see and leave empty;
• a challenge that the function signs when the page loads, which your browser solves with a short calculation before it sends; the challenge holds a random number and a time, nothing about you; its number is kept, set to expire after about an hour, so that it can be used only once;
• a limit on messages per day. For it the function keeps a counter under a keyed hash of your IP address, not the address itself. The counter is set to expire 24 hours after it was made, and AWS then deletes it.

The function’s log records whether a message was sent or refused, why it was refused, and a reference number. It does not record your IP address or anything you typed.

Legal basis: Art. 6 (1) (b) GDPR where you ask about using Turnkeel or a matter that leads to an agreement, otherwise Art. 6 (1) (f) GDPR. Our legitimate interest is to answer your message and to keep the form free of abuse.

You can also write to support@turnkeel.com directly. Then the same applies to your email, without the checks of the form.

Your rights

Under the GDPR you have the right to access the data about you (Art. 15), to have it corrected (Art. 16) or erased (Art. 17), to restrict its processing (Art. 18), to receive it in a portable form (Art. 20), and to object to processing based on Art. 6 (1) (f) (Art. 21). To use them, write to support@turnkeel.com.

You also have the right to complain to a supervisory authority. The authority for us is:

Other points

There is no automated decision-making or profiling. You are not obliged to give us any data; without it, we cannot answer a message.

This page was last changed on 13 November 2026.