Privacy policy

Controller

Viewconic GmbH, Ammerseestr. 23, 82131 Gauting. Email: info@viewconic.de. Reach us at this address with any privacy question.

Hosting and server logs

This website is hosted by Vercel Inc., USA. When you visit it, Vercel processes technically necessary data in server logs: IP address, date and time, page requested, browser and device information and the referring page. This serves to deliver the website and to protect it against attacks.

The legal basis is our legitimate interest in secure and stable operation (Art. 6(1)(f) GDPR). Vercel processes the data on our behalf (Art. 28 GDPR). For transfers to the USA, Vercel relies on the EU-US Data Privacy Framework and the EU Standard Contractual Clauses.

Contact form, security check and booking request

When you write to us through a form, we process what you enter, such as name, company, email address, phone number, the address of your application, your message and preferred date. We use it to answer your request, run the free security check or prepare an offer. The data is passed through a function at Vercel to our mailbox and stored there.

For the security check we access the address you gave from the outside, as any browser does, and only evaluate publicly visible information.

The legal basis is pre-contractual steps at your request (Art. 6(1)(b) GDPR) and our legitimate interest in handling enquiries (Art. 6(1)(f) GDPR). We delete the data once the request is closed, unless statutory retention duties apply (for example for business letters under German commercial and tax law).

Code upload after a booking

If you choose to hand over your code as a ZIP archive, we send you a personal, time-limited upload link. We store the uploaded archive in private Vercel storage (Vercel Blob) in Frankfurt am Main. Only we have access. We use the archive solely for the commissioned audit and delete it afterwards.

The legal basis is the performance of the contract or pre-contractual measures (Art. 6(1)(b) GDPR). If the code contains personal data, the data processing agreement also applies.

Booking a call with Calendly

We only load the calendar of Calendly LLC, USA, once you click “Load calendar”. Only then is data such as your IP address sent to Calendly, and Calendly may set its own cookies. The legal basis is your consent given by that click (Art. 6(1)(a) GDPR, Section 25(1) TDDDG). It applies to the current page view only and ends when you reload the page. For transfers to the USA, Calendly relies on the EU-US Data Privacy Framework.

Cookies, storage and tracking

We set no cookies and use no analytics or marketing tools. Fonts are served from our own server; no data goes to font services.

So that your selection from the booking flow or the security check appears in the contact form, we keep it in your browser’s session storage (sessionStorage). It is cleared when you close the tab. This is technically necessary for the feature you use (Section 25(2) no. 2 TDDDG).

Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). You may object to processing based on legitimate interests (Art. 21). You can withdraw consent at any time with effect for the future. To do so, write to info@viewconic.de.

You may also lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), in particular in your country of residence. The authority responsible for us is the Bavarian Data Protection Authority (BayLDA), Promenade 18, 91522 Ansbach, Germany.

Further information

We do not make automated decisions within the meaning of Art. 22 GDPR. The audits themselves are also governed by the agreements in the engagement, in particular the non-disclosure agreement and the data processing agreement.