Privacy policy

Janike Arent, Lavendelweg 7, 30880 Laatzen, Germany

Contact: hallo@notamsign.com

This website is hosted by Vercel Inc. (USA). When you open a page, the host processes technically necessary data such as IP address, time of access, requested address and browser identifier in order to deliver the page and protect it against abuse. The legal basis is our legitimate interest in delivering the website securely (Art. 6(1)(f) GDPR). Transfers to the USA are based on the EU Standard Contractual Clauses.

To measure how this website is used, we use our own tool, notamsign. When you open a page, the following data is sent to our measurement service: the page opened without parameters, page title, language, origin of the visit (domain only), campaign parameters (utm), device type, country, and interactions such as submitting the request form.

No cookies are set, no IP addresses are stored, and no identifier is created that could recognize you across several visits. The legal basis is our legitimate interest in analyzing and improving our offering (Art. 6(1)(f) GDPR).

The technical service provider for storage is Convex, Inc. (USA), with data stored in the EU (Ireland). Any transfer to the USA is based on the EU Standard Contractual Clauses. Raw data is deleted after 13 months; aggregated daily figures without personal reference are kept.

When you submit the form, we process your name, work email address, company, website, your answers on ad budget and CRM or store, your optional message, and the campaign parameters and page through which you arrived. The purpose is to handle your request and prepare a possible contract. The legal basis is Art. 6(1)(b) GDPR.

The request is stored in our database at Convex, Inc. (stored in Ireland) and forwarded by email through the sending service Resend, Inc. (USA) to our Google (Gmail) mailbox. The same mailbox receives email sent to hallo@notamsign.com; forwarding is handled by Cloudflare, Inc. (USA). Transfers to the USA are based on the EU Standard Contractual Clauses.

If no contract is concluded, we delete the request and the forwarded email after 6 months. To measure the success of requests, we also store the request with campaign and landing page, without your email address in plain text. Instead of the address, two hash values are stored: an HMAC created with a secret key, which links several requests from the same person, and a SHA-256 hash of the address. We pass the SHA-256 hash to advertising platforms only with your consent; this form does not ask for it. We delete the measurement data relating to you 24 months after your last activity; after that, the request remains only as a count without an identifier.

To prevent abuse, we limit the number of requests per sender. For this we count requests under a hash of the IP address created with a secret key. We do not store the IP address itself.

The application itself runs at app.notamsign.com. This website sets no cookies for it. Anyone who signs in to the application receives a technically necessary cookie, “ns_app”, there. It contains only the value 1 or 0, remembers whether the start address leads directly into the application, and expires after one year. The legal basis is Section 25(2) No. 2 of the German Telecommunications Digital Services Data Protection Act (TDDDG). The privacy information in the data processing agreement applies to the use of the application.

You have the right of access, rectification, erasure, restriction of processing and data portability, and the right to object to processing based on Art. 6(1)(f) GDPR. To exercise them, contact us at the address above. You can also lodge a complaint with a data protection supervisory authority.