Privacy policy and data handling.

Introduction

Vertikal Software GmbH (“we”, “our”, or “us”) is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, process, store, and protect personal data when you visit our website or contact us.

Data Controller

Vertikal Software GmbH
Pollinger Str. 14
82205 Gilching
Germany

Managing Director: Sorin Stan
Email: contact@vertikal.software

Personal Data We Process

Depending on how you interact with our website, we may process the following categories of personal data.

Information You Provide

When you contact us by email or through our contact form, we may process:

• Name
• Company name
• Email address
• Telephone number, if provided
• Subject
• Message content

We process this information solely to respond to your enquiry and maintain communication with you.

Technical Information

When you access our website, certain technical information is processed automatically by our web server, including:

• IP address
• Browser type and version
• Operating system
• Date and time of access
• Requested pages
• Referring website, where available

This information is required to ensure the secure operation, stability, and availability of our website.

Purposes and Legal Bases

We process personal data for the following purposes:

• Responding to enquiries — Article 6(1)(b) GDPR or Article 6(1)(f) GDPR
• Operating and securing the website — Article 6(1)(f) GDPR
• Complying with legal obligations — Article 6(1)(c) GDPR
• Website analytics, subject to consent — Article 6(1)(a) GDPR

Where processing is based on our legitimate interests under Article 6(1)(f) GDPR, those interests consist in operating a secure and reliable website, defending against misuse, maintaining business communications, and documenting and handling incoming project enquiries efficiently.

Contact Requests

If you contact us, we process the information you provide exclusively for handling your enquiry, communicating with you, and, where applicable, preparing or performing contractual services.

Fields marked as mandatory in our contact form are required so that we can understand your request, contact you, and respond appropriately. If mandatory information is not provided, we may be unable to process your enquiry.

We will not use your contact information for marketing purposes unless you have explicitly requested or consented to such communication.

Website Analytics

Subject to your consent, we may use analytics services to better understand how visitors interact with our website and to improve its performance and usability.

We currently use Google Analytics 4. We may additionally enable Microsoft Clarity in the future, also subject to your prior consent, to better understand website usage and improve user experience.

The use of analytics technologies is entirely optional and is based on your consent in accordance with Article 6(1)(a) GDPR.

Further information about the analytics services we use, the cookies involved, and how you can manage your consent is available in our Cookie Policy.

Cookies

Our website uses cookies and similar technologies.

Necessary cookies are required for the operation of the website, while optional analytics cookies are only used after your consent.

We also store your consent preferences in browser local storage so that your selection can be remembered when you revisit our website.

Detailed information about the cookies we use, their purpose, retention periods, and how you can change your preferences is available in our Cookie Policy.

Recipients of Personal Data

We do not sell or rent your personal data.

Where necessary, personal data may be processed by carefully selected service providers acting on our behalf, such as:

• Website hosting providers
• IT service providers
• Google Ireland Limited for Google Analytics 4, subject to your consent
• Microsoft Corporation for Microsoft Clarity, if enabled and subject to your consent

Where required by law, we conclude appropriate data processing agreements with such providers.

International Data Transfers

Some service providers may process personal data outside the European Economic Area (EEA) or permit remote access from outside the EEA.

In particular, analytics providers such as Google and, if enabled, Microsoft may process personal data in the United States or make it accessible from there. Where this occurs, we rely on appropriate safeguards such as the EU-U.S. Data Privacy Framework where applicable, Standard Contractual Clauses approved by the European Commission, or other lawful transfer mechanisms required under the GDPR.

Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected or to comply with applicable legal obligations.

In particular:

• Contact form enquiries are generally retained for up to 24 months after the last relevant communication.
• Email correspondence related to business enquiries may be retained for up to 24 months, unless longer retention is required for legal or contractual reasons.
• Technical server logs are generally retained for up to 30 days unless a longer retention period is required for security incident investigation.
• Cookie consent preferences stored in local storage are retained until you change them, clear your browser storage, or for up to 6 months before renewal is requested.
• Analytics data and analytics cookies are retained in accordance with the settings of the respective provider and our configured retention controls.

Retention periods may be extended where necessary to establish, exercise, or defend legal claims or to comply with statutory retention obligations.

Your Rights

Under the General Data Protection Regulation (GDPR), you have the right to:

• Access your personal data.
• Request correction of inaccurate or incomplete data.
• Request deletion of your personal data where applicable.
• Request restriction of processing.
• Object to processing based on legitimate interests.
• Withdraw your consent at any time where processing is based on consent.
• Receive your personal data in a portable format where applicable.
• Lodge a complaint with a competent supervisory authority.

To exercise any of these rights, please contact us using the contact details provided above.

You also have the right to lodge a complaint with the supervisory authority responsible for your habitual residence, place of work, or the place of the alleged infringement. For Vertikal Software GmbH, the competent supervisory authority in Bavaria is the Bayerisches Landesamt fuer Datenschutzaufsicht (BayLDA).

Data Security

We implement appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access.

Our website uses encrypted HTTPS connections to protect data transmitted between your browser and our servers.

External Links

Our website may contain links to third-party websites.

We are not responsible for the privacy practices or content of external websites. We encourage you to review the privacy policies of those websites before providing personal information.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in legal requirements, our services, or our data processing activities.

The latest version will always be published on this page together with the revision date.

Contact

If you have any questions regarding this Privacy Policy or the processing of your personal data, please contact:

Vertikal Software GmbH
Pollinger Str. 14
82205 Gilching
Germany
Email: contact@vertikal.software