Privacy Policy

1. Controller

Ms Parmis Paschaei
Erfurter Straße 16
41069 Mönchengladbach
Phone: +49 178 8324883
Email: info@digitalvision.site

2. Overview of processing

Below we give you an overview of which data is processed when you visit this website and use the contact or booking form, for what purpose this happens and how long the data is stored. This website is aimed at prospective customers in Germany and is operated as a small business within the meaning of Section 19 UStG.

3. Hosting

This website is hosted by Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA. When the website is accessed, Vercel automatically processes technical data (so-called server log files) transmitted by your browser, including IP address, date and time of the request, page accessed, browser type, operating system and the previously visited page (referrer). This data is technically necessary to deliver the website and to ensure its stability and security; it is not merged with other data sources and is not evaluated for analytics or marketing purposes. The legal basis is our legitimate interest in the secure and trouble-free operation of the website (Art. 6 (1) (f) GDPR). The server log files are deleted automatically after a short time, at the latest after 30 days.

As Vercel Inc. is a company based in the USA, data may be transferred to a third country (USA). Vercel refers to appropriate safeguards under Art. 46 GDPR, in particular the standard contractual clauses (SCC) adopted by the EU Commission. A data processing agreement pursuant to Art. 28 GDPR is in place with Vercel.

4. SSL/TLS encryption

For security reasons and to protect the transmission of confidential content, this website uses SSL/TLS encryption. You can recognise an encrypted connection by the fact that the address bar of your browser changes from “http://” to “https://” and by the padlock symbol in the browser bar.

5. Contact form and appointment booking

Via the form on this website you can submit a project enquiry and book a non-binding consultation directly. The following data is processed:

Information you enter directly: name, email address, your chosen topic (SEO, website or management system), the services you selected and – depending on the topic – optional additional details such as project name, existing website or software, current status, satisfaction with an existing solution, desired number of users, planned usage (desktop, responsive, app), required integrations and a free-text description of your project.

Information from the calculator and appointment selection: the values you set for scope, competitive situation and desired start date or support period, the price range calculated from them, and the date, time and contact person you chose for the consultation.

Forwarding by email: All of the above information is transmitted to our mailbox via the email service Resend (Resend Inc., 2261 Market Street #5039, San Francisco, CA 94114, USA) so that we can process your enquiry or appointment booking. A data processing agreement pursuant to Art. 28 GDPR is in place with Resend; as Resend Inc. is based in the USA, data may also be transferred to a third country here, for which Resend provides appropriate safeguards under Art. 46 GDPR (including standard contractual clauses).

Storage in our database: To avoid double bookings and to coordinate appointments, when you book an appointment we additionally store the following in a database: the booked date, the time, the contact person, your email address, the chosen topic, the selected services, the scope, the competitive situation, the desired start or support period and the calculated price range. Your name and any additional details (e.g. free-text description, existing website/software, number of users, integrations) are transmitted by email only and are not stored in the database. This database is operated by Neon, Inc. (USA), a provider of managed PostgreSQL databases. A data processing agreement pursuant to Art. 28 GDPR is in place with Neon; as Neon, Inc. is based in the USA, data may also be transferred to a third country here, for which Neon provides appropriate safeguards under Art. 46 GDPR (including standard contractual clauses).

Legal basis for the above processing is Art. 6 (1) (b) GDPR, as the processing serves to handle your enquiry or to initiate a consulting or contractual relationship. The checkbox confirming the privacy policy in the booking form ensures that you have taken note of this privacy policy before submitting; it does not constitute separate consent under Art. 6 (1) (a) GDPR for any further processing.

Storage period: The data transmitted by email remains in our mailbox until your enquiry has been fully processed or a resulting contractual relationship has been completed and invoiced; after that it is deleted unless statutory retention obligations under commercial or tax law (generally 6 or 10 years under Sections 147 AO and 257 HGB for documents relevant to invoicing) prevent this. The appointment data stored in the database is deleted as soon as the appointment has taken place or the appointment coordination has been completed and the data is no longer needed.

6. Cookies and local storage

This website does not use cookies for analytics, marketing or tracking purposes and does not embed third-party services (e.g. web analytics or social media services) that would set cookies. No usage profiles are created and there is no tracking across multiple websites.

7. No automated decision-making

The calculator available on this website serves solely as a non-binding, rough estimate of a possible price range and does not constitute automated decision-making or profiling within the meaning of Art. 22 GDPR. No decisions are made that produce legal effects concerning you or similarly significantly affect you.

8. Recipients and processors

As part of the processing described above, the following recipients have access to personal data, in each case within the scope of data processing pursuant to Art. 28 GDPR or on the basis of appropriate safeguards for third-country transfers:

Vercel Inc. (hosting of the website and processing of server log files), Resend Inc. (sending of form and booking data by email) and Neon, Inc. (database for storing appointment data). Your data is not passed on to any other third parties, sold or used by us for advertising purposes.

9. Your rights as a data subject

Under the GDPR you have the following rights vis-à-vis us as the controller:

Right of access (Art. 15 GDPR): You can request information about whether and which personal data we process about you.

Right to rectification (Art. 16 GDPR): You can request the correction of inaccurate data or the completion of incomplete data concerning you.

Right to erasure (Art. 17 GDPR): You can request the deletion of your data stored by us, provided that no statutory retention obligations or other grounds for exception prevent this.

Right to restriction of processing (Art. 18 GDPR): Under certain conditions you can request the restriction of the processing of your data, for example while the accuracy of disputed data is being verified.

Right to data portability (Art. 20 GDPR): You can request that we hand over the data you have provided to us in a structured, commonly used and machine-readable format or – where technically feasible – transmit it to another controller.

Right to object (Art. 21 GDPR): Where we process data on the basis of a legitimate interest (Art. 6 (1) (f) GDPR), you can object to this processing at any time on grounds relating to your particular situation.

Withdrawal of consent (Art. 7 (3) GDPR): If you have given us consent, you can withdraw it at any time with effect for the future, without affecting the lawfulness of the processing carried out on the basis of the consent until its withdrawal.

To exercise these rights, you can contact us informally at any time using the contact details given in Section 1.

10. Right to lodge a complaint with a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a data protection supervisory authority about our processing of your personal data (Art. 77 GDPR). The supervisory authority responsible for us is:

State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (LDI NRW)
Kavalleriestraße 2–4
40213 Düsseldorf

11. Data security

We take appropriate technical and organisational measures to protect your data against accidental or intentional manipulation, loss, destruction or unauthorised access. These include in particular the encryption of transmission using SSL/TLS, the use of processors with contractually guaranteed security measures and the restriction of data access to what is necessary for processing. Our security measures are continuously improved in line with technological developments.

12. Validity and changes to this privacy policy

This privacy policy is currently valid. Due to the further development of our website and offers or due to changed legal or regulatory requirements, it may become necessary to change this privacy policy. You can find the current privacy policy on this page at any time.