Privacy Policy

1. Controller

The controller within the meaning of the GDPR is:

Entreprenerds OHG
NordN​E​R​Dstraße 13
01099 Dresden
Germany

Email: hendrik@entreprenerds.de
Phone: +49 351 20629519

You can find further details in the imprint.

2. Hosting (Vercel)

This website is hosted by Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA. When the site is accessed, Vercel processes connection and log data (log files, see section 3) on our behalf. The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in a technically error-free and secure provision of the website). A data processing agreement pursuant to Art. 28 GDPR is in place with Vercel.

Vercel operates servers in the USA, among other locations. Personal data may therefore be transferred to a third country. For this transfer, Vercel relies on the EU standard contractual clauses (SCCs) pursuant to Art. 46 (2) (c) GDPR. You can find more information in Vercel's privacy policy: vercel.com/legal/privacy-policy.

3. Server log files

When this website is accessed, the hosting server automatically records information that your device's browser transmits. In particular, these are:

• IP address of the requesting device
• date and time of access
• page / file accessed
• HTTP status code and amount of data transferred
• referrer (previously visited page)
• browser type and operating system

This data is processed exclusively to ensure operation, for error analysis and to defend against attacks. The legal basis is Art. 6 (1) (f) GDPR. The data is not merged with other data sources. The log files are deleted after 30 days at the latest, unless security-related incidents require longer storage.

4. Getting in touch

If you contact us by email, phone or via the contact form on this website, we process the data you provide (e.g. name, company, email address, content of the message) in order to handle your enquiry and to manage any business relationship that may arise from it.

The legal basis is Art. 6 (1) (b) GDPR (initiation or performance of a contract) or Art. 6 (1) (f) GDPR (legitimate interest in responding to your enquiry). The data is deleted as soon as the purpose of the processing no longer applies and no statutory retention periods prevent this.

Newsletter and funding quick-check: We process your email address and the information from the funding quick-check on the basis of your consent (Art. 6 (1) (a) GDPR) via Resend and our customer portal, in order to send you the newsletter or to handle your enquiry; you can withdraw your consent at any time.

5. Email delivery of the contact form (Resend)

For the technical delivery of the messages received via the contact form, we use the service Resend from Resend, Inc., 2261 Market Street #4667, San Francisco, CA 94114, USA. In doing so, Resend processes the data you enter in the form (name, company, email address, content of the message) exclusively to deliver the message to our email address, and does so on our behalf.

The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in reliable email delivery). A data processing agreement pursuant to Art. 28 GDPR is in place with Resend.

Resend operates servers in the USA; data may therefore be transferred to a third country. This transfer relies on the EU standard contractual clauses (SCCs) pursuant to Art. 46 (2) (c) GDPR. You can find more information in Resend's privacy policy: resend.com/legal/privacy-policy.

6. Cookies

This website does not set any tracking or marketing cookies and does not integrate analytics services such as Google Analytics, Meta Pixel or similar. For reach measurement we use the cookie-less analytics tool Umami (see section 7), which sets no cookies and builds no personal profiles. Only technically necessary storage mechanisms are used, insofar as they are required to display the page (legal basis: § 25 (2) no. 2 TTDSG in conjunction with Art. 6 (1) (f) GDPR).

7. Web analytics (Umami)

To statistically evaluate the use of this website, we use the privacy-friendly, open-source web analytics tool Umami. Umami works cookie-less: no cookies are set, no cross-device profiles are built and no cross-site tracking takes place.

Only aggregated, anonymised usage data is collected, in particular:

• pages accessed and time spent
• referrer (previously visited page)
• approximate origin (country), derived from the IP address
• browser, operating system and device type used
• screen resolution

The IP address is not stored permanently, but only processed briefly to determine the country of origin and then anonymised. It is not possible for us to draw conclusions about individual persons.

We operate Umami self-hosted on a server in Germany. The usage data mentioned above is processed and stored exclusively on this server. No personal data is transferred to third parties or to a third country outside the EU/EEA in the process.

The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in a needs-based design and the statistical optimisation of our offer). Since Umami does not use cookies or comparable technologies and does not store or read out any information on the device, consent under § 25 TTDSG is not required. You can find more information in Umami's privacy overview: umami.is/privacy.

8. Fonts

On this website we use the fonts Inter, Lora and Rock Salt. The fonts are embedded via the next/font function integrated into the Next.js framework. The files are downloaded at build time and subsequently delivered from our own server. When the website is accessed there is therefore no connection to Google servers (Google Fonts); in particular, your IP address is not transmitted to Google.

9. Embedded media

On the home page we show a background video. This video is hosted directly on our server and is not embedded via external services such as YouTube or Vimeo. No data is transmitted to third parties when it is accessed; only the server log files described in section 3 apply.

10. Your rights as a data subject

With regard to the personal data concerning you, you have the following rights vis-à-vis the controller:

• Access to the processed data (Art. 15 GDPR)
• Rectification of incorrect data or completion of incomplete data (Art. 16 GDPR)
• Erasure of the data stored by us (Art. 17 GDPR)
• Restriction of data processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Objection to the processing (Art. 21 GDPR)
• Withdrawal of a consent once given, with effect for the future (Art. 7 (3) GDPR)

To exercise these rights, an informal message to the email address stated in the imprint is sufficient.

11. Right to lodge a complaint with a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a data protection supervisory authority, in particular in the member state of your place of residence, your place of work or the place of the alleged infringement, if you are of the opinion that the processing of the personal data concerning you infringes the GDPR (Art. 77 GDPR).

The authority responsible for the seat of our controller is:
Sächsischer Datenschutzbeauftragter
Devrientstraße 1, 01067 Dresden
www.saechsdsb.de

12. Data security

This website is transmitted encrypted via HTTPS (TLS). We take technical and organisational measures to protect the data against accidental or deliberate manipulation, loss, destruction or against access by unauthorised persons. Our security measures are continuously improved in line with technological developments.

13. Currency of this privacy policy

This privacy policy is updated whenever processing operations or legal requirements change. The current version can always be found at the URL shown above in the browser.