Privacy notice
Protecting your personal data matters to us. Below we inform you in accordance with Art. 13 GDPR about how your data is processed on this website.
Controller
Digitalaufbau OÜ
Represented by: Priit Zirnask
Registered office
Manufaktuuri tn 16-8110323 Tallinn
Estonia
Contact address in Germany
Rabenbergstr. 5738440 Wolfsburg
Germany
Email kontakt@digitalaufbau.de
Phone +49 15222926670
Register entry: Äriregister (Estland)
Register number: 17534125
Purpose and legal basis of processing
When you use our partnership inquiry form, we process the data you provide (in particular your name, company, city, trade, team size, contact details, message, inquiry language and the page you accessed) solely to handle your request and communicate with you. The legal basis is Art. 6(1)(b) GDPR (pre-contractual steps) and (f) GDPR (legitimate interest in handling B2B inquiries).
Processors
To operate this website and receive partnership inquiries we use carefully selected service providers under data processing agreements (Art. 28 GDPR): Vercel (hosting) and Supabase (database) – both processing data within the EU/EEA (Frankfurt and Dublin/Helsinki respectively). For Vercel, data may be transferred to the USA on the basis of EU Standard Contractual Clauses or the EU-US Data Privacy Framework (Art. 44 et seq. GDPR).
Abuse prevention
To protect against automated and repeated form submissions we store a non-reversible hash value (SHA-256) derived from your IP address in your inquiry metadata. The IP address itself is not stored permanently. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in abuse prevention). The hash is deleted as soon as it is no longer required for abuse prevention, and at the latest together with the inquiry after the retention periods stated under "Retention period".
Server log files
When you access this website, our hosting provider automatically collects technical access data (e.g. IP address, date and time of access, page requested, browser type) in server log files. This serves the technical provision, stability and security of the website. The legal basis is Art. 6(1)(f) GDPR (legitimate interest). Log data is deleted automatically within 30 days at the latest unless security-related retention is required.
Cookies and tracking
This website uses no tracking or marketing cookies; one exception is the YouTube video on selected study pages, which loads only after you click play (see the YouTube section). It does not use Google Analytics or comparable services.
To remember your language choice we use the strictly necessary cookie "NEXT_LOCALE" (retention: until you delete it in your browser). The legal basis is § 25(2) no. 2 TDDDG in conjunction with Art. 6(1)(f) GDPR (legitimate interest in delivering the site in your chosen language).
Your theme preference (light/dark) is stored locally in your browser only (likewise § 25(2) no. 2 TDDDG in conjunction with Art. 6(1)(f) GDPR).
For the strictly necessary settings above, consent under § 25(1) TDDDG is not required.
YouTube
On selected study pages you can play an embedded video from our YouTube channel. Before you click play we load nothing from YouTube or other Google servers; only a locally stored thumbnail and a notice are shown. Only when you click play is the video loaded via youtube-nocookie.com from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Personal data (e.g. IP address, device information) may then be transmitted to Google and cookies may be set. Data may also be transferred to Google LLC in the USA; Google LLC is certified under the EU-US Data Privacy Framework (adequacy decision of the European Commission, Art. 45 GDPR). The legal basis is your consent by clicking (Art. 6(1)(a) GDPR, § 25(1) TDDDG). Consent applies only to that play: if you reload the page, the video loads again only after another click. You can delete cookies set by YouTube in your browser; transmissions already made remain unaffected. Further information: Google's privacy policy.
Your rights
You have the right to access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR), data portability (Art. 20 GDPR) and objection (Art. 21 GDPR). To exercise your rights please contact us at the address above.
Right to lodge a complaint with a supervisory authority
You have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The competent authority for our registered office in Estonia is the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon), Tatari 39, 10134 Tallinn, Estonia – www.aki.ee.
Retention period
We store your inquiry data only for as long as is necessary to handle your request or as required by statutory retention periods.