Privacy Policy

1. Privacy at a glance

Protecting your personal data matters to us. This privacy policy explains what data we collect on this website, how we use it, and what rights you have. Personal data is only collected on this site to the extent technically necessary, or when you actively reach out to us (e.g. by email or booking a call).

2. Data controller

The party responsible for data processing on this website is:

Vendaru GbR

Alessandro Scicolone and Harry Urban

Mairichstraße 6, 99867 Gotha, Germany

Email: kontakt@vendaru.de

Phone: 0176 80488597

3. Hosting

This website is hosted by Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA. When you access the website, Vercel automatically processes technical access data (including IP address, date and time of access, pages visited, browser used) in server log files in order to deliver the website and ensure its stability and security. Because Vercel Inc. is based in the USA, data may be transferred to a country outside the EU/EEA; Vercel commits to complying with the EU Standard Contractual Clauses as an appropriate safeguard under Art. 46 GDPR. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in reliable and secure delivery of the website).

4. Cookies

This website uses exactly one technically necessary cookie (NEXT_LOCALE) to remember your chosen language (German/English). This cookie contains no personal data, is not used for analytics or tracking, and is set on the basis of Art. 6(1)(f) GDPR (legitimate interest in a functional, user-friendly website). No analytics, marketing, or tracking cookies are currently in use.

5. Contact form and email

When you contact us via the contact form or by email, we process the details you provide (name, email address, optionally phone number and business, and the content of your request) solely to handle your request. The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures) and your consent under Art. 6(1)(a) GDPR, which you can withdraw at any time with effect for the future. The data is deleted once it is no longer needed to handle your request and no statutory retention obligations apply.

6. Delivery of form requests via Resend

To deliver messages sent through the contact form to our inbox, we use the email service Resend (Resend Inc., USA). The data entered in the form is transmitted to Resend and processed solely for delivery to our inbox. Transfers to the USA are based on the EU Standard Contractual Clauses. The legal basis is Art. 6(1)(b) and (f) GDPR (legitimate interest in reliably receiving requests).

7. Your rights

You have the right, at any time, to request information about the personal data we hold about you, its origin and recipients, and the purpose of processing. You also have the right to rectification, erasure, or restriction of processing, the right to object to processing, and the right to data portability. If you have questions about your rights or our data processing, you can reach us at the email address above at any time. You also have the right to lodge a complaint with a data protection supervisory authority.

8. SSL/TLS encryption

For security reasons, this website uses SSL/TLS encryption to transmit confidential content. You can recognize an encrypted connection by the browser address bar switching from "http://" to "https://" and by the padlock icon in your browser's address bar.