Privacy Notice
1. Controller
[LEGAL ENTITY NAME], [STREET AND NUMBER], [POSTCODE CITY], Germany. Email: info@endoxa.tech. Represented by [MANAGING DIRECTOR NAME(S)].
2. What this website processes
This website does not use cookies, tracking pixels, embedded third-party content or analytics scripts. Fonts are served from our own hosting. Personal data is processed in two situations only:
- Server logs. When you open a page, our hosting provider records the IP address, date and time, requested page, referring page, browser type and operating system. This is necessary to deliver the page and to protect the site against misuse. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure operation). Logs are deleted after [RETENTION, e.g. 14 days]. Hosting provider: [HOSTING PROVIDER NAME, LOCATION]; a data processing agreement under Art. 28 GDPR is in place.
- Contact form and email. When you request a discovery call, we process the data you enter: name, work email, company, role, a short description of your system and the Claim you care about, together with the time of submission. We use it solely to respond to your request and to prepare the conversation you asked for. Legal basis: Art. 6(1)(b) GDPR (steps prior to entering into a contract at your request) and, for follow-up, Art. 6(1)(f) GDPR. Please do not enter confidential technical details in the form.
3. Form processing provider
Form submissions are transmitted and stored by [FORM PROVIDER NAME, LEGAL ENTITY, COUNTRY], which acts as our processor under Art. 28 GDPR. [IF THE PROVIDER IS OUTSIDE THE EEA: Transfers are based on the EU Standard Contractual Clauses / the EU-US Data Privacy Framework, as applicable.] Submissions are deleted from the provider's systems within [PERIOD] and kept in our own correspondence records as described below.
4. Retention
Correspondence about a request is kept for as long as needed to handle it and for [PERIOD, e.g. 12 months] afterwards, unless an engagement follows, in which case the retention terms of that engagement apply, or unless a statutory retention obligation requires longer storage.
5. Recipients
Your data is seen only by the persons at [LEGAL ENTITY NAME] responsible for handling requests and by the processors named above. We do not sell, rent or share personal data with third parties for their own purposes.
6. Your rights
Under the GDPR you have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and the right to object to processing based on legitimate interests (Art. 21). To exercise any of these rights, write to info@endoxa.tech. You also have the right to lodge a complaint with a supervisory authority, in particular the Berlin Commissioner for Data Protection and Freedom of Information (Berliner Beauftragte für Datenschutz und Informationsfreiheit) or the authority at your place of residence.
7. Confidential engagement documents
This notice covers the website only. Technical documents shared in the course of an engagement are handled under the non-disclosure agreement and the written data-handling terms agreed for that engagement, which take precedence for those documents.
8. Changes
We update this notice when the website or our processing changes. The version and date at the top identify the current text.