Privacy Policy

1. Controller

The controller within the meaning of the GDPR is:

A.B. Digital Solutions UG (haftungsbeschränkt), Hartweg 39, 72793 Pfullingen, Germany, represented by the Managing Director Alexander Bossert, email: alex@bossert.digital

2. Hosting

This website is hosted by Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA. When the website is accessed, Vercel automatically collects and stores information in so-called server log files that your browser transmits, in particular the IP address, the date and time of access, the amount of data transferred, the page accessed, the browser type and the operating system.

This processing serves to ensure smooth operation and the security of the website on the basis of our legitimate interest (Art. 6 (1) lit. f GDPR).

As the processing may also take place in the USA, the transfer is based on the EU Standard Contractual Clauses as appropriate safeguards within the meaning of Art. 46 GDPR.

3. Appointment booking, contact & forms

When you book an appointment via the website, we process the data you provide (name, email address and an optional message) in order to organize and carry out the appointment. For this purpose a calendar entry is created and a video call is set up via Google Calendar / Google Meet. The recipient of this data is Google (Google Ireland Limited or Google LLC).

The legal basis for the appointment booking is the performance of pre-contractual measures or a contract (Art. 6 (1) lit. b GDPR).

If you contact us by email instead, we process your details to handle your enquiry on the basis of our legitimate interest in communication (Art. 6 (1) lit. f GDPR).

Forms on this website (for example enquiry forms for our services, requests for working materials or password-protected project questionnaires for clients) let you send us information. We process the data you enter, in particular your name, email address and your answers in the question and free-text fields. The information is sent to us by email and handled in our mailbox; it is not stored in a database on the website.

The legal basis is the performance of pre-contractual measures or a contract (Art. 6 (1) lit. b GDPR) and otherwise our legitimate interest in handling your enquiry (Art. 6 (1) lit. f GDPR). Where a form asks for your explicit consent (for example for an additional personal assessment), the legal basis is Art. 6 (1) lit. a GDPR; you can withdraw that consent at any time with effect for the future.

In multi-step forms your entries are cached locally in your browser only (sessionStorage of the current browser tab) until you submit them, so they are not lost when the page is reloaded. This caching happens on your device only, is not transmitted to us and ends when you close the tab, submit the form or discard the draft.

To protect against automated submissions we use technical measures without third-party services, including a hidden form field and a limit on requests per sender. Your IP address is processed briefly for this abuse prevention (Art. 6 (1) lit. f GDPR).

4. Email delivery

The service Resend (Resend, Inc., USA) may be used to send confirmation and notification emails and to deliver form submissions to us. The data required for delivery (in particular your email address and the content of the respective message) is processed in the process. The legal basis is Art. 6 (1) lit. b or lit. f GDPR. Where data is transferred to the USA, the transfer is based on the EU Standard Contractual Clauses (Art. 46 GDPR).

5. Web analytics

We use Vercel Analytics and Vercel Speed Insights to evaluate the use of the website and improve performance. The collection is cookieless and anonymous; no data is collected that would make you identifiable as a person.

The legal basis is our legitimate interest in a needs-based and secure design of the website (Art. 6 (1) lit. f GDPR).

6. Fonts

This website uses exclusively locally embedded (self-hosted) fonts. There is no connection to servers of Google Fonts or other external providers; no personal data is transmitted to third parties in the process.

7. Cookies

This website uses exclusively technically necessary cookies or comparable technologies that are required for operation. A consent banner is not required for this. No cookies are set for marketing or tracking purposes.

Password-protected areas (for example client portals or project questionnaires) set a technically necessary access cookie after the password has been entered successfully. It contains neither the password nor personal data, only grants access to the respective area and expires after 30 days at the latest.

8. Your rights

Under the GDPR you have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and a right to object to the processing (Art. 21).

To exercise your rights, an informal message to the email address given above is sufficient. In addition, you have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR).

9. Storage period

We process and store personal data only for as long as is necessary for the respective purpose or as statutory retention periods require. Once the purpose no longer applies or a statutory period expires, the data is deleted or blocked.