Draft. Review and complete legally before launch.

This privacy policy explains how we process personal data when you visit this website or contact us through the contact form.

Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

FINARIS GmbH

[Full postal address: to be completed]

Email: info@sqace.io

[Data protection officer, if appointed: to be completed]

Data collected when you visit the website

When you access this website, your browser transmits technically necessary data to the server so that the page can be delivered. This typically includes the IP address, the date and time of access, the page requested, the browser used and the operating system.

• Purpose: delivering the website and ensuring its stability and security.
• Legal basis: Article 6 (1) (f) GDPR (legitimate interest in the secure operation of the website).
• Retention period: [Retention period for server logs: to be completed].

Contact form and email

When you use the contact form or write to us by email, we process the data you provide, such as your name, business email address, company, role and your message, in order to handle and respond to your request.

• Purpose: handling and responding to your request.
• Legal basis: Article 6 (1) (b) GDPR (steps prior to entering into a contract, or performance of a contract) and Article 6 (1) (f) GDPR (legitimate interest in communicating with prospective customers).
• Retention period: we store the data for as long as it is needed to handle your request and then delete it, unless statutory retention obligations require otherwise.

Providing this data is voluntary. Without the required details, we may not be able to process your request.

Hosting

This website is provided through a service provider. Processing takes place within the European Union.

[Hosting provider and location, and the data processing agreement pursuant to Article 28 GDPR: to be completed]

Tracking and telemetry

[As things currently stand, this website does not use any analytics or tracking services and no telemetry. If cookies or analytics services are introduced, this section must be completed accordingly before launch, including consent under Article 6 (1) (a) GDPR where required.]

Disclosure to third parties

We disclose your data to third parties only where this is necessary to handle your request, where you have given your consent or where we are legally obliged to do so. Any processors we engage (for example for hosting) process data exclusively on our instructions on the basis of an agreement pursuant to Article 28 GDPR.

Your rights

Subject to the statutory conditions, you have the following rights:

• Access to the data we process about you (Article 15 GDPR).
• Rectification of inaccurate data (Article 16 GDPR).
• Erasure of your data (Article 17 GDPR).
• Restriction of processing (Article 18 GDPR).
• Data portability (Article 20 GDPR).
• Objection to processing based on a legitimate interest (Article 21 GDPR).
• Withdrawal of any consent given, with effect for the future (Article 7 (3) GDPR).

To exercise your rights, a message to info@sqace.io is sufficient.

Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority about how we process your personal data.

[Competent supervisory authority: to be completed]