Privacy Policy
Pursuant to the GDPR (Regulation (EU) 2016/679) · As of: [Date]
Notice: This English version is a translation of the German original. It is provided for convenience and does not replace individual legal review. In the event of discrepancies, the German version prevails.
1. Controller
The controller for data processing on this website is:
Valicense UG (haftungsbeschränkt)
Rosenhag 2
14532 Kleinmachnow
Germany
Email: info@valicense.com
Data Protection Officer (where required): [Name or "not appointed — threshold not reached"]
2. Purposes and Legal Bases of Processing
We process personal data on the following legal bases:
- Art. 6(1)(a) GDPR (consent) — e.g. for cookie banner opt-in, newsletter registration
- Art. 6(1)(b) GDPR (contract initiation/performance) — e.g. for demo requests, conclusion of contract
- Art. 6(1)(c) GDPR (legal obligation) — e.g. commercial and tax law retention obligations
- Art. 6(1)(f) GDPR (legitimate interest) — e.g. server logs for IT security, spam protection
3. Categories of Data Processed
- Master data: name, company, email address, phone (when contacting us)
- Contract data: tariff, contract term, billing address, payment data
- Usage data: login times, modules used, number of tags
- Server logs: IP address (anonymised after 7 days), user agent, referrer, timestamp
- Content data: product information you enter into your DPP
4. Recipients and Data Disclosure
We disclose personal data only to the following categories of recipients:
- Processors (Art. 28 GDPR): hosting providers in Germany, email service providers, payment service providers
- Public authorities: where legally required
We provide a complete list of the processors used on request. It also forms part of the data processing agreement pursuant to Art. 28 GDPR that we conclude with our customers. Please direct enquiries to info@valicense.com.
5. Third-Country Transfers
Our primary hosting takes place in Germany (EU). As a matter of principle, no transfer to third countries takes place. Should sub-processors outside the EU be used in individual cases, this is done on the basis of EU Standard Contractual Clauses (SCC) pursuant to Art. 46 GDPR.
6. Retention Period
- Server logs: 7 days, then automatic anonymisation
- Contact/demo requests: until answered + 6 months
- Contract data: 10 years (commercial law retention obligation)
- DPP product data: DPP Mandatory Data — the product data which, under the ESPR (Regulation (EU) 2024/1781), must be accessible via the data carrier — is only retained after the end of the contract if the customer commissions the continuation service under the contract. Otherwise provision ends upon expiry of the contractually agreed export period of 30 calendar days; the customer takes over the data via the export. The legal basis is performance of the contract (Art. 6(1)(b) GDPR) or, where continuation is commissioned, compliance with a legal obligation of the customer in which we assist (Art. 6(1)(c) GDPR). All other customer data — in particular marketing, analytics and module data — is deleted 30 calendar days after the end of the contract.
7. Your Rights as a Data Subject
You have the following rights vis-à-vis us at any time:
- Access (Art. 15 GDPR)
- Rectification (Art. 16 GDPR)
- Erasure (Art. 17 GDPR)
- Restriction of processing (Art. 18 GDPR)
- Data portability (Art. 20 GDPR)
- Objection (Art. 21 GDPR)
- Withdrawal of consent given (Art. 7(3) GDPR)
- Complaint to the supervisory authority (Art. 77 GDPR)
To exercise your rights, contact us at info@valicense.com.
8. Cookies and Tracking
We use technically necessary cookies (e.g. login session, theme selection) as well as — provided you have consented — analytics cookies for reach measurement. Details and settings can be found in our Cookie Overview.
[List actually set cookies and trackers here — audit required]
If you use a contact or demo form on our website, the data you enter (name, email, company, message) is stored to process your enquiry and for any follow-up questions. Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures) or Art. 6(1)(f) GDPR (legitimate interest in effective handling of enquiries).
10. Hosting and Technical Provision
Our website is hosted on servers in Germany. No systematic data transfer to third countries takes place. On each access, technically necessary server logs are recorded (IP, user agent, timestamp, URL accessed) and anonymised or deleted after 7 days. Legal basis: Art. 6(1)(f) GDPR (IT security, stability).
This privacy policy may be updated in the event of changes to the legal situation or our processing activities. Last updated: [Date].