Privacy

1. Controller

The controller responsible for data processing on this website is:

GipfelLabs - Sameer Kamran, Hildegardisstraße 7, 55413 Weiler bei Bingen, Germany, email: info@gipfellabs.de.

2. Hosting

This website is hosted by Vercel Inc. (440 N Barranca Ave #4133, Covina, CA 91723, USA) and served from Vercel's European data centre in Frankfurt am Main (Germany) (EU data residency). When you visit the website, information is automatically collected in server log files: IP address, date and time of access, page accessed, browser type and version, and operating system.

Processing is based on Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in the secure and uninterrupted operation of this website.

Vercel processes the data as a data processor under a Data Processing Agreement (DPA). Where data is transferred to the USA, this is based on the EU-US Data Privacy Framework or the EU Standard Contractual Clauses. Further information: https://vercel.com/legal/privacy-policy.

3. Contact form

When you send us a message via the contact form, we process the data you provide (name, email address, optionally company, message) in order to handle your request.

The legal basis is Art. 6 para. 1 lit. b GDPR (pre-contractual measures) or Art. 6 para. 1 lit. f GDPR (legitimate interest in answering your request).

Form data is transmitted via the service SplitForms (splitforms.com), which acts as a data processor. SplitForms stores the transmitted data temporarily in order to deliver it by email and display it in its dashboard; on the free plan submissions are retained for 30 days. SplitForms is GDPR-compliant; a Data Processing Agreement (DPA) is available at https://splitforms.com/dpa. Further information about SplitForms privacy: https://splitforms.com/gdpr.

The data is deleted after your request has been finally processed, unless statutory retention obligations apply.

4. Cookies

This website does not use tracking cookies. Technically necessary cookies (if used) serve exclusively to operate the website.

5. Your rights

You have the right to access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR), data portability (Art. 20 GDPR) and to object to processing (Art. 21 GDPR).

Consent granted can be withdrawn at any time with effect for the future (Art. 7 para. 3 GDPR).

6. Right to complain

You have the right to lodge a complaint with a data protection supervisory authority. The competent authority is the one of your place of residence, your workplace or the place of the alleged infringement. The authority responsible for Hesse is: Der Hessische Beauftragte für Datenschutz und Informationsfreiheit, Postfach 3163, 65021 Wiesbaden.

7. Currency

This privacy policy is current as of August 2026. It will be updated as soon as the website or the processing changes.