Privacy notice

The controller responsible for data processing on this site is the service provider named in the imprint. Contact details are given there and repeated below.

This site is hosted by Vercel Inc. in the United States. When you access a page, your browser transmits data that is stored temporarily in server log files: IP address, date and time of the request, the page requested, referrer URL, browser and operating system. This is technically necessary to deliver the site and to maintain its security and stability.

Legal basis: Art. 6 (1) (f) GDPR — our legitimate interest in operating a secure and functional website.

Because our hosting provider is based in the United States, personal data may be transferred there. The transfer is safeguarded by the EU-US Data Privacy Framework and, in addition, by the European Commission’s standard contractual clauses. US authorities may in principle be able to access data, and you should be aware of this residual risk.

The assessments on this site run entirely in your browser. Your answers are never transmitted to us or to anyone else: they are held in your browser’s session storage so that reloading the page does not lose your progress, and they are discarded when you close the tab. There is no account, no submission, and no third-party form provider involved. Because nothing is sent, we cannot see your answers or recover them for you.

There is no contact form. If you email us, we process what you choose to write — typically your name, email address, company, and what you tell us about your product — for the sole purpose of answering you. Please keep a first message free of confidential technical detail and trade secrets; once we reply we can agree an encrypted channel for anything sensitive.

Legal basis: Art. 6 (1) (b) GDPR where your enquiry is pre-contractual, otherwise Art. 6 (1) (f) GDPR — our legitimate interest in responding to enquiries addressed to us. Email correspondence is retained only as long as needed to deal with your enquiry and to meet any statutory retention period.

The following providers process personal data on our behalf. Each is bound by a data processing agreement.

• Vercel

  Company

  Vercel Inc., United States

  Purpose

  Website hosting and content delivery

  Location

  Third country — safeguarded by DPF and standard contractual clauses

  Privacy policy

  vercel.com/legal/privacy-policy

This site sets no cookies at all — no analytics, no advertising, and no third-party embeds that could set them. That is why you are not asked to dismiss a consent banner. The one thing written to your device is the assessment progress described above, kept in session storage so a reload does not lose your answers. It is strictly necessary for a function you actively started, it is confined to your browser, and it is cleared when you close the tab, so § 25 (2) TDDDG applies and no consent is required. No cross-site tracking or profiling takes place.

Server log files are retained only as long as needed for security analysis. Assessment answers are not retained by us at all, because they never leave your browser. Email correspondence is kept for as long as needed to handle your enquiry and any resulting engagement, after which it is deleted unless statutory retention periods under commercial or tax law require otherwise.

Under the GDPR you have the following rights in respect of your personal data. To exercise any of them, contact us using the details in the imprint.

• Access (Art. 15)

  To be told whether we process data about you, and to receive a copy of it.

• Rectification (Art. 16)

  To have inaccurate data corrected and incomplete data completed.

• Erasure (Art. 17)

  To have your data deleted where there is no lawful ground to keep it.

• Restriction (Art. 18)

  To have processing restricted while a dispute about accuracy or lawfulness is resolved.

• Data portability (Art. 20)

  To receive data you provided in a structured, machine-readable format.

• Objection (Art. 21)

  To object to processing based on legitimate interests, including at any time and without giving reasons where direct marketing is concerned.

• Withdraw consent (Art. 7 (3))

  To withdraw consent at any time, without affecting the lawfulness of processing carried out beforehand.

• Lodge a complaint (Art. 77)

  To complain to a supervisory authority, in particular in the member state of your residence or workplace.

You may lodge a complaint with the data protection authority of the federal state in which the controller is established, or with the authority in your own place of residence.

No data protection officer is appointed. The statutory thresholds in § 38 BDSG — in particular twenty or more persons permanently engaged in automated processing — are not met.