Privacy Policy

This policy sets out, in accordance with Articles 13 and 14 GDPR, what personal data we process when you visit this website or request a demo, for what purpose and on what legal basis, who receives that data, and what rights you have.

Details will be completed before commercial launch

The highlighted passages do not yet contain final details. They will be completed and reviewed by counsel before commercial launch.

Controller

The controller for the processing of personal data on this website within the meaning of Article 4(7) GDPR is:

Legal name
[To be added: full company name including legal form]
Address
[To be added: street, number, postcode, city, country]
Represented by
[To be added: name of the authorised representative]
Email
[To be added: email address for privacy enquiries]
Telephone
[To be added: telephone number]

Until the full details are published, you can reach us through the contact form on this website.

Data protection officer

Whether we are required to appoint a data protection officer under Article 37 GDPR in conjunction with § 38 BDSG depends, among other things, on the number of people permanently engaged in the automated processing of personal data. We will complete that assessment before commercial launch.

[To be confirmed: is the appointment of a data protection officer required? If so, add the name and contact details here.]

Purposes and legal bases of processing

Demo requests submitted through the form

When you submit the “Book a demo” form, we process the details you provide: name, company, work email address, company size, and the optional text of your message. We use this data solely to answer your enquiry and arrange a demo appointment.

The legal basis is Article 6(1)(b) GDPR to the extent that processing serves to take steps at your request prior to entering into a contract, and Article 6(1)(f) GDPR. Our legitimate interest lies in responding to business enquiries, documenting them so they can be traced, and preventing abuse of the form.

Providing this data is neither required by law nor by contract. Without your name, company, and work email address, however, we cannot process a demo request.

Provision of the website

When this website is accessed, we process the technical connection data without which delivery would not be possible. Details are set out in the section on server log files. The legal basis is Article 6(1)(f) GDPR; our legitimate interest lies in providing the service securely, reliably, and free of abuse.

Recipients and processors

We use carefully selected service providers who process personal data for us only on our instructions. Data processing agreements under Article 28 GDPR are concluded with these providers. The providers do not receive the data for their own purposes.

[Confirm before launch: data processing agreement with Cloudflare concluded and on file; record of processing activities maintained.]

Cloudflare

This website runs on Cloudflare Pages. Cloudflare provides hosting, delivery via its content delivery network, and protection against attacks, and in doing so processes the technical connection data of your visit. The data you submit through the form also passes through this infrastructure on its way to us.

Telegram

Where the internal notification feature is enabled, we additionally forward the contents of a demo request to a private internal channel on the Telegram messaging service so that our sales team can respond promptly.

[Confirm before launch: is the Telegram notification active in production? If so, document the recipients, retention, and legal basis; if not, remove this section.]

Transfers to third countries

Cloudflare, Inc. is based in the United States. This website is delivered through Cloudflare's global network, for visitors from Europe generally via European locations. Access by the US parent company can therefore not be ruled out in every case.

Where personal data is transferred to a third country, we base that transfer on the European Commission's standard contractual clauses under Article 46(2)(c) GDPR together with supplementary safeguards. You may request a copy of these safeguards from us.

[Review and document before launch: the provider's certification under the EU-US Data Privacy Framework as an additional basis, and the outcome of the transfer impact assessment.]

Retention

We retain personal data only for as long as it is required for the purposes described or for as long as statutory retention periods require.

  • Demo requests: until the matter is concluded. If no contract results, we then delete the data unless retention obligations prevent this.
  • Server log files: retained briefly by the hosting provider for security and operational purposes.
  • Retention obligations under commercial and tax law, in particular under § 147 AO and § 257 HGB, remain unaffected. The data concerned is blocked for other purposes.

[To be added: specific deletion periods — demo requests not pursued further (suggested: 12 months) and the retention period for server log files.]

Your rights as a data subject

You have the following rights against us in respect of the personal data concerning you:

  • access to the data processed and the circumstances of the processing (Article 15 GDPR),
  • rectification of inaccurate data and completion of incomplete data (Article 16 GDPR),
  • erasure, where no grounds for further processing exist (Article 17 GDPR),
  • restriction of processing (Article 18 GDPR),
  • receipt of the data you provided in a structured, commonly used, and machine-readable format, and its transmission to another controller (Article 20 GDPR),
  • objection to processing that we base on a legitimate interest, on grounds relating to your particular situation (Article 21 GDPR).

An informal message to the contact details given above is sufficient to exercise these rights. You will not be disadvantaged by doing so.

You also have the right to lodge a complaint with a data protection supervisory authority (Article 77 GDPR). You may contact the authority of your habitual residence, your place of work, or the place of the alleged infringement.

[To be added: the supervisory authority responsible for us based on the company's registered office, with its address.]

Server log files

When this website is accessed, our hosting provider processes the technically required connection data. This includes in particular the IP address of the requesting system, the date and time of access, the address requested, the status code returned, and information about the browser and operating system.

This data is not combined with other data sources and is not used to draw conclusions about you personally. The legal basis is Article 6(1)(f) GDPR; our legitimate interest lies in secure operation and in defending against attacks.

When the demo form is submitted, your IP address is additionally evaluated briefly in order to limit the number of requests per period (protection against automated bulk submissions). Receipt of the enquiry is logged as a record.

No cookies, no tracking

This website sets no cookies. We use no web analytics, no tracking, no profiling, no advertising networks, and no social media embeds. No cross-device recognition takes place.

All fonts are served from our own server. There is no connection to Google Fonts or any comparable service that would transmit your IP address to a third party.

Because no information is stored on or read from your device beyond what is strictly necessary to operate the site, consent under § 25(1) TDDDG is not required. For the same reason, this website displays no consent banner.

Changes to this policy

We update this privacy policy where changes to our processing activities, to the service providers we use, or to the legal position make this necessary. The version published on this page is the one that applies.

We will additionally notify customers in text form of material changes that affect them.

[To be added: the version date of this policy.]