Pre-launch privacy notice

2. Website delivery and security logs

When you visit the website, technically necessary data such as IP address, date and time, requested page, referrer, browser information and error or security events may be processed to deliver and protect the website. The legal basis is Article 6(1)(f) GDPR (secure and reliable operation). Hosting is provided through Vercel. Technical logs are retained only for the period configured for the hosting project and must not be used to store complete form submissions.

3. Consent settings

Your privacy choices are stored locally in your browser. This is technically necessary to remember your selection. Optional analytics and external media are disabled by default in this pre-launch configuration.

4. Waitlist, contact and live chat

These functions remain disabled until the controller has approved their configuration. If enabled, we process the information you submit to answer your request or manage the waitlist. Depending on the request, the legal basis is Article 6(1)(b) GDPR (steps before entering a contract), Article 6(1)(f) GDPR (responding to business enquiries), or Article 6(1)(a) GDPR (consent for optional waitlist or marketing contact). Consent can be withdrawn at any time with effect for the future.

Waitlist records may be stored in an isolated Supabase database. For prompt internal follow-up, the submitted lead details may also be sent through the configured Telegram bot to the authorised internal recipient. Telegram may process data outside the European Economic Area; the applicable transfer safeguards and Telegram's privacy information apply. Complete personal form data are not written to fallback runtime logs.

5. Analytics and external services

To understand which waitlist entry points are useful, we count aggregate funnel events such as a CTA click, form view, form start and successful submission. These records contain the source page, CTA, selected plan, language and device category, but no visitor identifier, name, email address, free text, IP address or user agent. They are stored in the isolated Supabase project and deleted automatically after 90 days.

Vercel Web Analytics and Speed Insights are disabled by default and may be activated only after the applicable consent and privacy requirements have been confirmed. Google Maps or other external media must not load before the required consent. Merely following an external link is governed by the privacy information of the destination provider.

6. Recipients and international transfers

Depending on the enabled configuration, recipients can include hosting, database and support providers acting under contract. Some providers may process data outside the European Economic Area. Such processing will be enabled only where a lawful transfer mechanism and appropriate safeguards have been documented. We do not sell personal data.

7. Retention

Waitlist and enquiry data are deleted or anonymised no later than 12 months after the last individual contact. Consent can be withdrawn at any time, and valid erasure requests are processed earlier unless a legal obligation requires specific data to be retained for longer.

8. Your rights

You may request access, rectification, erasure, restriction, data portability where applicable, and object to processing based on legitimate interests. You may withdraw consent at any time. You also have the right to lodge a complaint with a data-protection supervisory authority, in particular the authority responsible for Rhineland-Palatinate or the authority at your habitual residence.

9. Contact

Send privacy requests to info@yourpolishaddress.com. Please do not send identity documents or sensitive mail contents by ordinary email.

10. Changes

This notice will be updated before customer activation, identity verification, payments or mail processing begin. The version and date above identify the current text.