← noisefloor.systems
Privacy

Privacy Policy

This is a courtesy translation of our German Datenschutzerklärung. In case of discrepancies, the German version prevails.

1. Controller

Robin Malter, Arnulfstraße 293, 80639 München, Germany, email: privacy@noisefloor.systems

2. Hosting and server log files

This website is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA (“Vercel”). When you visit the website, the server automatically processes technical access data (IP address, date and time, requested page, user agent) to the extent required to deliver and secure the website (Art. 6(1)(f) GDPR). A data processing agreement pursuant to Art. 28 GDPR is in place with Vercel; where access data is transferred to the USA, the transfer is based on the EU Standard Contractual Clauses. Log files are stored only as long as required for these purposes and are then deleted automatically.

3. Web analytics

This website does not use cookies. For reach measurement we use Vercel Web Analytics (provider: Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA). The service works without cookies and without cross-device tracking; IP addresses are not stored permanently and visitors are not recognized across websites. The legal basis is our legitimate interest in measuring the reach of this website (Art. 6(1)(f) GDPR).

4. Contact by email and forms

If you contact us by email or via our forms (contact form, sample request), the data you submit (e.g. name, company, email address, content of your inquiry) is processed to handle the inquiry (Art. 6(1)(b) or (f) GDPR). The data is deleted once it is no longer required for handling the inquiry and no statutory retention obligations apply. We use Resend (Resend Inc., 2261 Market Street #5039, San Francisco, CA 94114, USA) as a processor pursuant to Art. 28 GDPR to deliver form messages; transfers to the USA are based on the EU Standard Contractual Clauses.

5. Appointment booking (Cal.com)

To schedule calls we use Cal.com (Cal.com, Inc., 2261 Market Street #4382, San Francisco, CA 94114, USA). When you book, the data you provide (name, email address, selected slot, any additional details) is processed to arrange and hold the appointment (Art. 6(1)(b) or (f) GDPR). We use the European offering (cal.eu), under which booking data is processed on servers in the EU. A data processing agreement pursuant to Art. 28 GDPR is in place with Cal.com; any transfers to the USA are based on the EU Standard Contractual Clauses.

6. Contact and customer management (Attio)

To manage inquiries and business contacts we use the CRM system Attio (Attio Limited, 42 St John's Square, 2nd Floor, London EC1M 4EA, United Kingdom) as a processor pursuant to Art. 28 GDPR. Contact and inquiry data (e.g. name, company, email address, content of the inquiry) is processed on the basis of Art. 6(1)(b) or (f) GDPR. The data is stored in data centers in the EU; the United Kingdom is covered by an adequacy decision of the European Commission (Art. 45 GDPR).

7. AI-assisted processing of inquiries

To handle inquiries and produce requested analyses (e.g. sample requests) we use AI services as processors pursuant to Art. 28 GDPR: Anthropic (Anthropic Ireland, Limited, 6th Floor, South Bank House, Barrow Street, Dublin 4, D04 TR29, Ireland) and OpenAI (OpenAI Ireland Limited, 1st Floor, The Liffey Trust Centre, 117–126 Sheriff Street Upper, Dublin 1, D01 YC43, Ireland). The details contained in your inquiry (e.g. name, company, content of the inquiry) may be processed in the course of this (Art. 6(1)(b) or (f) GDPR). Under the applicable API terms, submitted content is not used to train the models. Where data is transferred to the USA, the transfer is based on the EU Standard Contractual Clauses or the EU-US Data Privacy Framework.

8. Your rights

You have the right, vis-à-vis the controller, to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing (Art. 21 GDPR). You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR).

9. Fonts

The fonts used are served locally from this server. No connection to third-party servers (e.g. Google Fonts) is established.