Privacy Policy

This is an English summary. The legally binding version is in German at /datenschutz.

1. Data Controller

ogiX-digital UG (haftungsbeschränkt) Managing Director: Roman Schanz Alt-Griesheim 88a 65933 Frankfurt am Main Germany

Email: hello@vibeprocess.de Phone: +49 153 102 048 49

2. Data We Collect

2.1 Contact Form

Name, company, email, phone (optional), and your inquiry content. Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures) and Art. 6(1)(f) GDPR (legitimate interest). Retained 12 months without engagement, longer per German bookkeeping law if we work together.

2.2 Server Logs

Anonymized IP, timestamp, page accessed, user-agent, referrer. Legal basis: Art. 6(1)(f) GDPR (secure operation).

3. Processors and Third Parties

• Vercel (hosting, Frankfurt EU region) — SCC Art. 46 GDPR.
• Vercel Analytics — privacy-friendly, cookie-less.
• Microsoft Clarity — usage analytics (heatmaps, click/scroll behavior, aggregated session recordings), Microsoft Ireland Operations Ltd. Runs cookie-less on our site; text and form inputs are masked and never recorded. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in improving our website). Possible US transfers are covered by SCC (Art. 46 GDPR) and the EU-US Data Privacy Framework. Microsoft privacy statement.
• Google Ads — conversion measurement for our advertising, Google Ireland Ltd. Only completed consultation bookings are reported; page views are never sent. Runs under Google Consent Mode v2 with all advertising signals defaulting to "denied", so no cookies or advertising identifiers are stored without your opt-in. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in measuring our advertising). Possible US transfers are covered by SCC (Art. 46 GDPR) and the EU-US Data Privacy Framework. Google privacy policy.
• Resend — contact form email delivery, DPA in place.
• Calendly — booking provider, Calendly LLC (USA).
• Cloudflare Turnstile — anti-bot protection for the contact form, Cloudflare, Inc. (USA).

Cloudflare Turnstile

To protect our contact form against automated requests (bots), we use Cloudflare Turnstile provided by Cloudflare, Inc. (101 Townsend St, San Francisco, CA 94107, USA). When you load the contact form, your IP address is transmitted to Cloudflare and processed briefly to verify whether the request comes from a human or a bot. No cookies are set. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in protection against spam and abuse). More information: https://www.cloudflare.com/privacypolicy/.

4. Cookies

We do NOT use non-essential cookies. Vercel Analytics and Microsoft Clarity run cookie-less on our site, and Google Ads runs under Consent Mode v2 with consent denied by default, so it sets no cookies either. No third-party tracking cookies (no Google Analytics, no Meta Pixel) are set.

5. Your GDPR Rights

You have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20), objection (Art. 21), and complaint to a supervisory authority (Art. 77).

To exercise your rights, contact hello@vibeprocess.de.

6. Supervisory Authority

Bavarian State Office for Data Protection Supervision (BayLDA) Promenade 18, 91522 Ansbach, Germany https://www.lda.bayern.de

7. Data Security

We use TLS/SSL encryption (https) for all data transmission.

8. Updates

This privacy policy is current as of May 2026.