Privacy policy

PLACEHOLDER — this text is not legally reviewed and must be replaced before launch.

The structure below outlines what this policy needs to cover under the GDPR. Each section is a prompt, not finished wording.

Who is responsible

The controller for data processed through this site is the person named in the Impressum. [ADD NAME, POSTAL ADDRESS AND CONTACT EMAIL — must match the Impressum.]

What is collected, and why

Beta access form: e-mail address and role. Collected to send a beta invitation and a short note on what to try first. Legal basis: consent (Art. 6(1)(a) GDPR), given by ticking the consent box.

Contact form: name, e-mail address and message. Collected to answer the enquiry. Legal basis: consent (Art. 6(1)(a) GDPR).

Server logs: [DESCRIBE WHAT THE HOSTING PROVIDER LOGS — typically IP address, timestamp, requested URL, user agent. Legal basis is usually legitimate interest, Art. 6(1)(f).]

How long it is kept

[STATE A RETENTION PERIOD FOR FORM SUBMISSIONS AND FOR SERVER LOGS.] Form submissions are stored in the site's own content store and in the mailbox that receives the notification.

Who else receives it

[NAME THE HOSTING PROVIDER AND THE MAIL PROVIDER, AND WHETHER A DATA PROCESSING AGREEMENT (AVV, Art. 28 GDPR) IS IN PLACE. State whether any data leaves the EU/EEA.]

Cookies and tracking

This site sets no analytics or advertising cookies. A session cookie is used for form security (CSRF protection). [UPDATE IF ANALYTICS IS EVER ENABLED — Peak ships a consent banner for that case.]

Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability, and to object. Where processing is based on consent, you may withdraw that consent at any time with effect for the future. You also have the right to lodge a complaint with a supervisory authority. [NAME THE COMPETENT SUPERVISORY AUTHORITY FOR YOUR FEDERAL STATE.]

To exercise any of these rights, write to the contact address in the Impressum.