Política de privacidad

1. Controller

number7even UG (haftungsbeschränkt)

Eisolzriederstrasse 12, 80999 München, Germany

E-Mail: info@number7even.com

Phone: +49 172 893 72 30

2. Hosting, database and e-mail

Vercel Inc. (USA): Hosting and delivery of the site; server logs (IP address, time, address requested, browser identifier).

Supabase Inc. — Datenbankregion Frankfurt (EU): Sign-in (e-mail, name, company, password stored as a hash) and the records of engagements, quotes, signatures and logs.

Resend (USA): Sending sign-in, confirmation and password e-mails (e-mail address, message content).

Unsplash (USA): Editorial images are loaded directly from Unsplash, which receives your IP address and browser identifier.

Transfer to third countries (USA): basis under Chapter V GDPR as set out in each provider's data processing agreement — [ TO BE COMPLETED ].

Legal basis: Art. 6(1)(f) GDPR (secure, stable operation) or (b) (contract and sign-in).

3. Sign-in and session

For signed-in use we store e-mail, name, company and the status of your access. A strictly necessary session cookie (osdc-session) keeps you signed in; it holds no advertising or tracking data.

Legal basis: Art. 6(1)(b) GDPR; § 25(2) no. 2 TDDDG for the cookie.

4. Self-assessment and results by e-mail

The self-assessment runs in your browser. If you ask for the result by e-mail, we store the address, the page and the one-line summary the page computed — nothing else.

Legal basis: Art. 6(1)(b) GDPR (your request).

5. Quotes, confirmations and signatures

When you sign a quote or confirmed figures electronically, we store name, role, company, e-mail, a hash of your IP address and the browser identifier, bound to exactly what was signed — as evidence.

Legal basis: Art. 6(1)(b) and (c) GDPR (contract; commercial and tax retention duties).

6. Error reports

If a page crashes, your browser sends an error report: message, technical trace, page path and browser family — cleaned of query strings, e-mail addresses and phone numbers. Your IP address is used briefly to limit frequency and is not stored.

Legal basis: Art. 6(1)(f) GDPR (stability of the service).

7. Dictation

The microphone feature uses your browser’s speech recognition. Depending on the browser, the audio is sent to its provider for this (in Google Chrome, to Google). It is active only while you switch the microphone on; we store no audio, only the text you keep.

8. Storage in your browser

Working copies and preferences (e.g. language, collapsed panels) live in your browser’s local storage and leave it only when you save or share them.

9. No advertising, no tracking, no automated decisions

We use no analytics or advertising trackers. No AI model processes your data unless a client explicitly connects its own. There is no automated decision-making within the meaning of Art. 22 GDPR.

10. Retention

As long as needed for the purpose; contract and invoice records for the statutory periods (up to ten years, § 147 AO). Incoming integration events are deleted 30 days after they were handled.

11. Your rights

You have the right of access, rectification, erasure, restriction, data portability and objection (Art. 15–21 GDPR), and to withdraw consent. Write to the e-mail address above.

You may complain to a supervisory authority, e.g. the Bavarian Data Protection Authority (BayLDA), Promenade 18, 91522 Ansbach, Germany.