1 · Controller
The controller within the meaning of Art. 4 (7) GDPR is:
- Company
- Clarifin UG (haftungsbeschränkt) i. Gr.
- Address
- Johann-Sebastian-Bach-Str. 10
73663 Berglen
Germany - Represented by
- Pascal Haensel & Mathis Schade (Management)
- info@clarifinapp.com
For any questions regarding data protection, please contact us by email. A separate data protection officer has not been appointed, as there is no obligation to do so under Art. 37 (1) GDPR.
2 · Principles of data processing
We process personal data only to the extent necessary to provide our website and our services, or where another legal basis under Art. 6 GDPR applies:
- Art. 6 (1) (a) GDPR — consent of the data subject
- Art. 6 (1) (b) GDPR — performance of a contract or pre-contractual measures
- Art. 6 (1) (c) GDPR — compliance with a legal obligation
- Art. 6 (1) (f) GDPR — protection of our legitimate interests
3 · Hosting & infrastructure
Current hosting: This website is currently operated via Vercel Inc. (USA). We plan to migrate hosting to a German or European provider in the near future. This privacy policy will be updated after the switch.
When this website is accessed, the hosting provider automatically records server log files. These typically contain:
- IP address of the requesting device (anonymised where applicable)
- Date and time of access
- Requested URL, HTTP status code, amount of data transferred
- Browser type and version, operating system, referrer URL
Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in the operation and security of the service). Storage period: generally up to 30 days, after which data is automatically deleted.
As Vercel Inc. is a US company, data may be transferred to the USA. Vercel relies on Standard Contractual Clauses (SCCs) pursuant to Art. 46 (2) (c) GDPR and on its participation in the EU-US Data Privacy Framework (Art. 45 GDPR).
- Current provider
- Vercel Inc., 340 Pine Street, Suite 603, San Francisco, CA 94104, USA — privacy policy
- Planned migration
- Migration to a German / European provider is being prepared. This privacy policy will be updated after the switch.
4 · Data collected when visiting this website
This website uses no independent web tracking (no Google Analytics, no Matomo or similar). No analytics cookies are set, and we carry out no behaviour-based analysis of website visits.
Technically necessary data (log files, see section 3 above) is recorded exclusively by the hosting provider as part of regular operations.
5 · Web fonts (Bunny Fonts)
This website embeds the Inter typeface via the Bunny Fonts service (BunnyWay d.o.o., Cesta komandanta Staneta 4A, 1215 Medvode, Slovenia — EU). Bunny Fonts is a privacy-friendly alternative to Google Fonts with servers in the European Union.
When the typeface is loaded, your IP address is transmitted to the servers of BunnyWay d.o.o. within the EU. No cookies are set and no personal data is permanently stored.
Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in a consistent presentation). Privacy policy: fonts.bunny.net/about
6 · Contact form & email contact
If you use the contact form on this website or contact us by email, the data you provide (e.g. name, email address, company, message) is processed to handle your enquiry.
When you submit the contact form, your data is transmitted via HTTPS encryption to the form service provider Formspree (Formspree, Inc., 2100 Geng Road, Suite 210, Palo Alto, CA 94303, USA), which forwards the enquiry to us by email and processes it for spam prevention. Legal basis: Art. 6 (1) (b) GDPR (initiation of a contractual relationship). Storage period: until your enquiry has been conclusively dealt with, thereafter subject to statutory retention periods.
Formspree, Inc. is based in the USA. The transfer is based on Standard Contractual Clauses pursuant to Art. 46 (2) (c) GDPR. Privacy policy: formspree.io/legal/privacy-policy
For direct email contact at info@clarifinapp.com, your data is used exclusively to respond to your enquiry. Legal basis: Art. 6 (1) (f) GDPR. Storage period: until conclusively dealt with, thereafter subject to statutory retention periods.
6b · Scheduling (Calendly)
The "Book a meeting" button on this website is a direct link to Calendly (Calendly LLC, 271 17th St NW, Suite 1000, Atlanta, GA 30363, USA). No Calendly code or scripts are loaded on this page. Data is only transmitted to Calendly when you actively click the button and are redirected to Calendly's own website.
When you book an appointment, Calendly processes your name, email address and the selected time. This data is transferred to Calendly in the USA; the transfer is based on Standard Contractual Clauses (Art. 46 (2) (c) GDPR).
Legal basis for loading the widget: Art. 6 (1) (f) GDPR (legitimate interest in easy scheduling). Legal basis for the booking itself: Art. 6 (1) (b) GDPR.
Calendly privacy policy: calendly.com/pages/privacy
8 · Your rights as a data subject
Insofar as we process your personal data, you have the following rights:
You may request information about which data we process about you.
You may request the correction of inaccurate data.
You may request the deletion of your personal data, provided no statutory retention obligation applies.
You may request the restriction of the processing of your data.
You may request that we transmit your data in a common, machine-readable format.
You may object at any time to the processing of your data based on Art. 6 (1) (f) GDPR.
You may withdraw any consent given at any time with effect for the future.
To exercise your rights, please contact: info@clarifinapp.com
9 · Right to lodge a complaint with a supervisory authority
If you believe that the processing of your personal data violates the GDPR, you have the right under Art. 77 GDPR to lodge a complaint with a data protection supervisory authority.
Competent supervisory authority for Baden-Württemberg:
Lautenschlagerstraße 20
70173 Stuttgart, Germany
www.baden-wuerttemberg.datenschutz.de
Email: poststelle@lfdi.bwl.de
10 · Changes to this privacy policy
We reserve the right to amend this privacy policy if legal requirements change or new processing activities are introduced (e.g. use of analytics or a change of hosting provider). The current version is always available at this URL. Material changes will be communicated separately where appropriate.
Last updated: May 2026