Datenschutzerklärung
Datenschutzerklärung
How we handle your data, in plain language. We collect only what an interaction needs, and we don't sell it.
Effective date: [date] · Version: [v]
Draft — pending legal review and not yet binding. Bracketed items are placeholders to be completed before launch.
1. Who we are
[Legal entity name] ("Cladens", "we", "us") operates this website. Contact: hello@cladens.com. Data-controller details and address are in the Impressum.
If we appoint a Data Protection Officer, their contact is: [DPO contact — or "We have not appointed a DPO; for any data-protection question, contact [email]."]
2. What we collect, why, and on what basis
We practice data minimization — we collect only what a given interaction needs.
| When | What we collect | Why | Legal basis (GDPR) |
|---|---|---|---|
| You take the readiness check | Email, company; optionally name, role; your answers and chosen objective | To generate and email your readiness results and (if you opt in) follow up about them | Consent — Art. 6(1)(a) |
| You submit the contact / booking form | Name, email, company, your message | To respond to your enquiry | Consent / pre-contractual steps — Art. 6(1)(a)/(b) |
| You opt in to insights | To send occasional insights you can unsubscribe from anytime | Consent — Art. 6(1)(a) | |
| You visit the site | Aggregate, cookieless analytics (see §5) | To understand site usage without tracking individuals | Legitimate interest — Art. 6(1)(f) |
| Server logs | IP address, timestamp, request data (held briefly) | Security and operation | Legitimate interest — Art. 6(1)(f) |
We do not sell your data, and we do not use it for advertising or share it with ad networks.
3. Who processes your data (sub-processors)
We use a small set of service providers, bound by data-processing agreements:
- Hosting: Netlify (static hosting on a global CDN).
- Transactional email: Resend.
- Analytics: Plausible (cookieless, aggregate).
Where a provider processes data outside the EU/EEA, transfers are covered by [Standard Contractual Clauses / adequacy decision — confirm per provider]. We keep assessment and lead data in an [EU region / specify].
4. How long we keep it
We keep enquiry and assessment data until you ask us to delete it, or until it is no longer needed for the purpose collected, whichever comes first. [Specify a concrete retention period with counsel, e.g., "lead data is reviewed and deleted after 24 months of inactivity."] Server logs are kept [X days].
5. Cookies and analytics
We aim to run this site without tracking cookies. Our analytics (Plausible) is cookieless and does not build profiles of individual visitors, so no cookie-consent banner should be required. We set only strictly necessary cookies if any are needed for site function. If this ever changes (e.g., we add marketing trackers), we will add a compliant consent mechanism first. See the Cookie & Tracking Notice.
6. Your rights
Under the GDPR you have the right to access, rectification, erasure, restriction, data portability, and objection, and the right to withdraw consent at any time without affecting prior processing. You may lodge a complaint with a supervisory authority — for [state], that is [competent Aufsichtsbehörde].
To exercise any right, email privacy@cladens.com. We respond within one month.
7. Data security
We use appropriate technical and organizational measures (encryption in transit, access controls, EU-region storage where applicable) to protect your data. No method is perfectly secure, but we take it seriously.
8. Children
This is a business website not directed at children; we do not knowingly collect data from anyone under 16.
9. Changes
We may update this policy; the effective date below changes when we do. Material changes will be highlighted.
Questions about this page? Email hello@cladens.com .