Privacy Policy

1. Data Controller

The data controller within the meaning of the General Data Protection Regulation (GDPR) and other national data protection laws is:

2. Hosting & Content Delivery

We host our application with Vercel Inc. (340 S Lemon Ave #4133 Walnut, CA 91789, USA).

For the purpose of providing and securing the website, connection data (e.g., IP address, browser version) is processed automatically. This is done on the basis of our legitimate interest in the secure and efficient provision of our online services in accordance with Art. 6 (1) (f) GDPR.

3. Registration & Authentication

For login and user account management, we use the service Clerk (Clerk, Inc., 65 Langton St, San Francisco, CA 94103, USA).

When you register or log in, identification data (e.g., email address, password hash, IP address) is processed via Clerk. This is necessary to grant you access to the dashboard and our services (performance of a contract pursuant to Art. 6 (1) (b) GDPR).

4. Database & Storage

Our application data (customer profiles, assessments, technical data) is stored in a database provided by Neon. The server location is Frankfurt, Germany (AWS Region eu-central-1). Thus, your sensitive process data physically remains within the European Union.

5. Email Communication

For sending transactional emails (e.g., "forgot password", notifications about new analyses), we use Gmail (Google Workspace). The legal basis is the fulfillment of our contractual obligations (Art. 6 (1) (b) GDPR).

6. Google Services

For the visualization of locations and appointment booking, we use services provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland).

• Google Maps: Used to display location maps in the dashboard. Your IP address is transmitted to Google.
• Google Calendar: Used to synchronize appointments (only after your explicit consent/linking).

7. Your Rights

You have the right at any time to:

• Information about your data stored by us (Art. 15 GDPR).
• Rectification of incorrect data (Art. 16 GDPR).
• Erasure of your data ("Right to be forgotten") (Art. 17 GDPR).
• Restriction of processing (Art. 18 GDPR).
• Data portability (Art. 20 GDPR).

To exercise these rights, please contact the email address provided above at any time.