Privacy Policy
1.1 Data Controller
The data controller responsible for processing your personal data is WebProductForge, registered at 13409 Winterstraße 20, Berlin, Germany. For all data-related inquiries, contact us at [email protected].
1.2 Data We Collect
We collect the following categories of personal data when you interact with our platform:
- • Contact information: name, email address, phone number, company name
- • Project specifications and business requirements submitted via inquiry forms
- • Technical metadata: IP address, browser type, operating system, referral URLs
- • Usage analytics: page views, session duration, navigation patterns
1.3 Legal Basis for Processing
We process your personal data under the following legal bases as defined by Regulation (EU) 2016/679 (GDPR): (a) performance of a contract or pre-contractual measures at your request; (b) legitimate interests in improving our services and ensuring platform security; (c) your explicit consent for marketing communications; (d) compliance with legal obligations.
1.4 Data Retention
Personal data submitted through inquiry forms is retained for a maximum of 24 months from the date of last interaction, or longer if required by applicable tax or commercial record-keeping obligations. Anonymized analytics data may be retained indefinitely for service improvement purposes.
1.5 Data Sharing & Third Parties
We do not sell, rent, or trade your personal information. Data may be shared with: (a) cloud infrastructure providers (AWS, Cloudflare) operating under EU Standard Contractual Clauses; (b) payment processors for transaction facilitation; (c) analytics providers for anonymized usage data; (d) law enforcement when legally required.
1.6 Your Rights
Under GDPR, you have the following rights regarding your personal data:
- • Right of access (Art. 15 GDPR): Request a copy of all personal data we hold about you
- • Right to rectification (Art. 16 GDPR): Request correction of inaccurate data
- • Right to erasure (Art. 17 GDPR): Request deletion of your personal data
- • Right to restrict processing (Art. 18 GDPR): Limit how we use your data
- • Right to data portability (Art. 20 GDPR): Receive your data in a structured, machine-readable format
- • Right to object (Art. 21 GDPR): Object to processing based on legitimate interests
1.7 International Data Transfers
Where personal data is transferred outside the European Economic Area (EEA), we ensure adequate protection through EU Standard Contractual Clauses (SCCs), adequacy decisions, or other legally recognized transfer mechanisms as required by Chapter V of the GDPR.
1.8 Data Security
We implement technical and organizational measures including TLS 1.3 encryption in transit, AES-256 encryption at rest, access-controlled infrastructure, and regular penetration testing to protect your personal data against unauthorized access, alteration, disclosure, or destruction.
1.9 Supervisory Authority
You have the right to lodge a complaint with the Berlin Commissioner for Data Protection and Freedom of Information (BlnBDI) if you believe your data protection rights have been violated.