Privacy policy

This English version is provided for convenience. The German version is legally binding.

1. Controller

The controller responsible for processing personal data on this website is:

Relevia GmbH
Aienbuchstraße 8/1, 78573 Wurmlingen
E-Mail: simon.symhoven@relevia.de
+49 176 57840763

2. Overview

We process personal data only as far as needed to run this website and our workspace. We do not use analytics or marketing tools and do not embed third-party content such as social media plugins or external fonts.

3. Hosting and server log files

This website is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. When you open a page, Vercel automatically processes technical data sent by your browser: IP address, date and time, the page requested, referrer URL, browser type and operating system.

This is necessary to provide the website securely and reliably. The legal basis is Art. 6(1)(f) GDPR. We have a data processing agreement with Vercel under Art. 28 GDPR. Data may be transferred to the USA in the process. Such transfers are based on the EU-US Data Privacy Framework, under which Vercel is certified, and on the EU Standard Contractual Clauses.

Our domain is registered with ALL-INKL.COM – Neue Medien Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany, which runs its name servers (DNS). When you open the website, these servers resolve the domain to the address of Vercel’s servers.

4. Cookies

We only use cookies that are technically necessary:

• NEXT_LOCALE stores the language you chose. Retention: one year.
• Sign-in cookies (starting with “sb-”) keep you signed in to the workspace. They are only set when you sign in and are deleted when you sign out.

The legal basis is Section 25(2) no. 2 TDDDG; no consent is required for these cookies. Further processing is based on Art. 6(1)(b) and (f) GDPR.

5. Workspace and user account

Access to the workspace is by invitation only. For user accounts we process your email address, optionally your name, your password (only as an encrypted hash) and the times of registration and last sign-in. We send you emails for invitations and password resets.

For sign-in and storing account data we use Supabase (Supabase Inc., 970 Toa Payoh North #07-04, Singapore 318992) as a processor. The data is stored on servers in Frankfurt am Main, Germany. Where data is transferred to countries outside the EU, this is based on the EU Standard Contractual Clauses.

The legal basis is Art. 6(1)(b) GDPR (use of the workspace) and Art. 6(1)(f) GDPR (protection against unauthorised access).

6. Contact by email

If you email us, we process your details to answer your request. The legal basis is Art. 6(1)(b) GDPR where your request relates to a contract, otherwise Art. 6(1)(f) GDPR.

7. Retention

We keep personal data only as long as needed for the purpose or as required by statutory retention periods. Account data is deleted when the account is closed.

8. Your rights

You have the right to:

• access the data we hold about you (Art. 15 GDPR)
• rectification of inaccurate data (Art. 16 GDPR)
• erasure (Art. 17 GDPR)
• restriction of processing (Art. 18 GDPR)
• data portability (Art. 20 GDPR)
• object to processing based on Art. 6(1)(f) GDPR (Art. 21 GDPR)

To exercise these rights, contact simon.symhoven@relevia.de. You may also lodge a complaint with a data protection supervisory authority, for example the State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg.

9. Encryption

This website uses TLS encryption for security. You can recognise it by “https://” in your browser’s address bar.