Privacy Policy

For affiliate-demo-b.test (Germany). Last updated: 4 March 2026.

1. Controller

Affiliate Demo B UG (haftungsbeschränkt)

c/o Design Offices Berlin Humboldthafen, Alexanderufer 3-7, 10117 Berlin, Germany

VAT ID: DE319847526 · Commercial register: HRB 243517 B

We have not appointed a data protection officer (DPO) as we are not legally required to do so. Please use the contact details above for privacy requests.

2. Data we process and why

a) Website access & server logs

When you visit the site, we process technical data (e.g., IP address, date/time, requested page, referrer, user agent, error codes). Purpose: security, troubleshooting, and ensuring service stability. Legal basis: Art. 6(1)(f) GDPR (legitimate interests).

b) Contact / demo requests

If you contact us, we process the data you provide (e.g., name, email, message, company, request details). Purpose: responding and handling your request. Legal basis: Art. 6(1)(b) GDPR (pre-contractual steps) and/or Art. 6(1)(f) GDPR.

c) “Fit Score” or similar inputs

If you enter information to calculate a score or recommendation, we process the input values and the resulting output. Purpose: providing the feature and improving it. Legal basis: Art. 6(1)(b) GDPR (to provide the requested functionality) and, where applicable, Art. 6(1)(f) GDPR (product improvement). Please avoid entering special category data (Art. 9 GDPR).

d) Marketing communications

If you opt in to receive marketing emails, we process your contact data and consent record. Purpose: sending updates/marketing. Legal basis: Art. 6(1)(a) GDPR (consent). You can withdraw consent at any time with effect for the future.

e) Cookies and similar technologies

We may use essential cookies for core site functions. Non-essential cookies (e.g., analytics) are used only if you provide consent (where required). Legal basis: Art. 6(1)(c) GDPR in conjunction with applicable ePrivacy rules for necessary storage, and Art. 6(1)(a) GDPR for consent-based technologies.

3. Recipients, processors, and transfers

We use carefully selected service providers as processors (Art. 28 GDPR) for hosting, email delivery, form handling, and IT/security support. They may receive personal data only as needed and under contractual safeguards.

If data is transferred outside the EEA, we use appropriate safeguards such as EU Standard Contractual Clauses (Art. 46 GDPR) and assess additional measures where required.

4. Retention

Server logs: typically up to 30 days (unless needed longer for security incidents).
Contact/demo requests: for the duration of handling and then as required for documentation and statutory limitation periods.
Fit Score inputs: as long as necessary to provide the feature; if stored for improvement, we minimize and delete or anonymize when no longer needed.
Marketing consent data: until you withdraw consent or we no longer send marketing, plus necessary documentation.

5. Your rights

Subject to the conditions of the GDPR, you have rights of access, rectification, erasure, restriction, data portability, and to object (Art. 15–21 GDPR). Where processing is based on consent, you may withdraw it at any time (Art. 7(3) GDPR).

You also have the right to lodge a complaint with a supervisory authority. For Berlin, you may contact: Berliner Beauftragte für Datenschutz und Informationsfreiheit, Alt-Moabit 59-61, 10555 Berlin, Germany.

6. Security and automated decisions

We implement appropriate technical and organizational measures to protect data. We do not use automated decision-making with legal or similarly significant effects (Art. 22 GDPR).

7. Changes

We may update this policy to reflect changes in our processing or legal requirements. The “Last updated” date indicates the latest revision.