Datenschutzerklärung

1. Verantwortlicher für die Datenverarbeitung

Verantwortlicher im Sinne der Datenschutz-Grundverordnung (DSGVO) ist:

[TODO: Company name]
[TODO: Street and house number]
[TODO: Postal code and city]
Deutschland
Email: hello@vernointel.com
Phone: [TODO: Phone number]

2. Data Protection Officer

Under Art. 37 GDPR, a Data Protection Officer is not required for this website. We do not meet the criteria that would make appointing one mandatory.

3. Server Log Files

The hosting provider automatically stores information in server log files:

• IP address of the requesting client
• Browser and operating system
• Referrer URL
• Date and time of request
• HTTP status code

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in infrastructure security and troubleshooting).

Retention: 30 days

4. Contact and Inquiry Form

When you send us a message through the contact form, we collect:

• Name
• Email address
• Company (optional)
• Message text

Legal basis: Art. 6(1)(b) GDPR (pre-contractual steps). These details are necessary to process your enquiry.

Retention: 12 months after last contact

Recipient: Postmark (email delivery, see section 6)

5. Account and Usage

When you create an account, we process:

• First and last name
• Email address
• Hashed password
• Two-factor authentication (optional)
• Order history and credit balance
• Trusted devices

Legal basis: Art. 6(1)(b) GDPR (contract performance).

Retention: Duration of contract plus 30 days. Orders and transactions are retained for 10 years (§147 AO – German tax requirement). Upon account deletion (Art. 17 GDPR), your name is dissociated from orders but financial records are retained.

6. Recipients and Processors

Your data is transferred to the following processors:

The current and complete list, including processing location and status, is available at Subprocessors.

Google Fonts

This website loads its typefaces (Manrope, JetBrains Mono) from servers operated by Google LLC. When you open a page, your browser establishes a direct connection to Google and transmits your IP address along with technical details about your browser and operating system. This transfer happens whether or not you hold an account with us.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in consistent presentation). We are preparing to serve these typefaces locally, after which this transfer will no longer occur.

7. Transfer of Data to Third Countries

Some of our processors are located outside the EU:

• Postmark (USA): Processing protected by Standard Contractual Clauses (Art. 46 GDPR).
• Google Fonts (USA): Your IP address is transmitted to Google LLC when typefaces are loaded, see section 6.

8. Cookies

This website uses no cookies for tracking, analytics, or marketing. Only functionally necessary cookies for authentication are stored.

We use Vercel Web Analytics to measure traffic. It sets no cookies and stores nothing on your device; it processes IP address and user agent, from which only aggregate statistics are produced. Because nothing is accessed on your device, no consent under § 25 TDDDG is required for it.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in understanding traffic). You may object to this under Art. 21 GDPR.

9. Your Rights Under GDPR

You have the following rights:

• Right of access (Art. 15): You can request information about your stored data.
• Right to rectification (Art. 16): You can request correction of inaccurate data.
• Right to erasure (Art. 17): You can delete your account and associated data. Financial records are retained per §147 AO.
• Right to restriction (Art. 18): You can restrict processing of your data.
• Right to data portability (Art. 20): You can export your data in a structured, machine-readable format.

To exercise these rights, contact us at hello@vernointel.com.

11. Right to Lodge a Complaint

You have the right to lodge a complaint with the competent supervisory authority:

[Competent state data protection authority for the controller’s registered seat] [Address] [Website]

12. Data in Our POI Datasets

We collect structured data about businesses via the Google Places API — including name, address, telephone number, rating and coordinates — and supply it to customers as a dataset.

Information about a company is not normally personal data. Where a business is run by a natural person as a sole trader, however, the business address and telephone number may at the same time be that person’s personal data. We are the controller for that processing.

Legal basis: Art. 6(1)(f) GDPR. Our legitimate interest lies in supplying market data for location and competitive analysis. Only information the business has itself made publicly available is processed; no special categories under Art. 9 GDPR are processed.

Source of the data: The Google Places API. The data does not originate from the data subject, which is why we inform under Art. 14 GDPR. Notifying every recorded business individually would involve disproportionate effort (Art. 14(5)(b) GDPR); this notice takes its place.

Recipients: Customers who purchase a dataset for the city in question. They are contractually obliged to delete an entry within 30 days where we pass on a removal request to them.

Your rights as a recorded business: You may object to this processing at any time under Art. 21 GDPR and request deletion of your entry. We then remove it permanently and add it to a suppression list, so that later collections do not pick it up again. To do so, contact hello@vernointel.com.