Privacy Policy
1. Data Controller
The data controller responsible for data processing on this website is: VentCoach UG (haftungsbeschränkt), Hitzberg 1, 40699 Erkrath, Germany. Email: ventcoach@gal-ventilation.com
2. General Information on Data Processing
We process personal data only to the extent necessary to provide our services, to fulfil a contract, to comply with legal obligations, or based on your consent. Depending on the purpose, the legal basis is Art. 6(1)(b) GDPR (contract performance, e.g. account creation and use of the calculation features), Art. 6(1)(f) GDPR (legitimate interest, e.g. technical security and abuse prevention), or Art. 6(1)(a) GDPR (consent, e.g. Google Analytics).
3. Hosting (Vercel)
This website is hosted by Vercel Inc., USA. Vercel processes technical data (e.g. IP address, browser information) to deliver the website. Vercel is certified under the EU-U.S. Data Privacy Framework (DPF), which ensures an adequate level of data protection for the transfer of data to the USA. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in reliably operating the website).
4. Database & User Accounts (Supabase)
Account, project, and calculation data are stored via our processor Supabase. The database server we use is located in France (EU), so no transfer to a third country takes place for this data. Legal basis: Art. 6(1)(b) GDPR (contract performance).
5. Payment Processing (Stripe)
We use the payment provider Stripe to process payments. In doing so, payment data (e.g. name, payment details, billing address) may be transmitted to Stripe and transferred to the USA. Stripe is certified under the EU-U.S. Data Privacy Framework (DPF). Legal basis: Art. 6(1)(b) GDPR (contract performance).
6. Email Delivery (Resend)
We use our processor Resend, Inc., USA, to send transactional emails (e.g. registration confirmation, password reset). In doing so, your email address and the message content are processed and transferred to the USA. The transfer is based on the EU Standard Contractual Clauses (Art. 46(2)(c) GDPR). Legal basis: Art. 6(1)(b) GDPR (contract performance).
7. Error Monitoring (Sentry)
We use our processor Sentry (Functional Software, Inc., USA) to detect and fix technical errors. When an error occurs, technical data (e.g. browser and device information, IP address, error context) is processed and transferred to the USA. Sentry is certified under the EU-U.S. Data Privacy Framework (DPF). Legal basis: Art. 6(1)(f) GDPR (legitimate interest in stable and error-free operation).
8. Cookies & Google Analytics
We optionally use Google Analytics 4 on this website, a web analytics service provided by Google Ireland Limited. This service is only activated after you actively consent via our cookie banner, and it processes usage data (including a shortened IP address, device and browser information, and page views), in part on Google's servers in the USA; Google is certified under the EU-U.S. Data Privacy Framework. Legal basis: Art. 6(1)(a) GDPR in conjunction with § 25(1) TDDDG. You can withdraw your consent at any time with effect for the future via the "Cookie Settings" link in this website's footer.
9. Storage Period
We store personal data only for as long as necessary for the stated purposes or as required by statutory retention obligations. Account-related data is stored until the user account is deleted; technical log data is automatically deleted after a limited period.
10. Your Rights
You have the right to access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR), data portability (Art. 20 GDPR), and objection to processing (Art. 21 GDPR). You may withdraw any consent given at any time with effect for the future. You also have the right to lodge a complaint with a data protection supervisory authority.
11. Contact
For privacy-related inquiries, please contact us at ventcoach@gal-ventilation.com.