Privacy policy

1. Controller

EppLab Studio, owner Karahan Osman
Marie-Kurz-Hof 15, 72762 Reutlingen, Germany
Email: hello@epplab-studio.de

2. The key points

• This website does not set any analytics or advertising cookies and does not use any statistics service.
• We serve fonts ourselves. There is no connection to Google Fonts or any other font service.
• The website is hosted by Vercel, a provider from the USA. The contact form is delivered by Resend, also from the USA.
• We use Calendly from the USA for booking appointments. Calendly is only linked or loaded after your consent.
• The statement “servers in Germany” on this website refers to the Klarto application, not to the website.

3. Hosting and server log files

Provider: Vercel Inc., Covina, California, USA. When you visit the website, Vercel processes technically necessary data: IP address, date and time, requested address, amount of data transferred, referrer, browser and operating system. The purpose is delivering and securing the website, for example detecting and defending against attacks. The legal basis is our legitimate interest in a secure and stable website (Art. 6 (1) (f) GDPR).

Pages are delivered via Vercel’s global network. The server-side function for the contact form and the waiting list runs in the Frankfurt region. A transfer to the USA is nevertheless possible. Vercel is certified under the EU-U.S. Data Privacy Framework; these transfers are covered by the European Commission’s adequacy decision (Art. 45 GDPR).

[OFFEN] Confirm the data processing agreement with Vercel and the retention period of log files.

4. Contact form and email

If you write to us via the form or by email, we process your name, your company (optional), your email address and your message in order to answer your enquiry. The legal basis is Art. 6 (1) (b) GDPR where your enquiry aims at a contract, otherwise our legitimate interest in answering enquiries (Art. 6 (1) (f) GDPR).

The form is delivered as an email to hello@epplab-studio.de via Resend (Resend, Inc., San Francisco, USA). Resend sends from the Ireland region but stores account data and metadata in the USA. Resend is certified under the EU-U.S. Data Privacy Framework (Art. 45 GDPR).

We delete your enquiry once it has been dealt with, unless statutory retention obligations apply.

[OFFEN] Add the email provider for hello@epplab-studio.de.

5. Waiting list

If you join the waiting list for the free account, we process your email address and, optionally, your company in order to notify you once as soon as sign-up and the free account are available. The legal basis is your consent (Art. 6 (1) (a) GDPR), which you can withdraw at any time by emailing hello@epplab-studio.de. We delete the data after the notification. Delivery is via Resend as described in section 4.

6. Appointment booking via Calendly

We use Calendly (Calendly LLC, Buford, Georgia, USA) for demo appointments. We only embed the calendar once you choose “Load Calendly” in the dialog. Before that, no connection to Calendly is established. Alternatively, you can open Calendly in a new tab via a link.

Calendly processes the information you enter there (such as name, email address and preferred time) as well as technical data such as your IP address, and sets its own cookies. The legal basis is your consent (Art. 6 (1) (a) GDPR, § 25 (1) TDDDG), which you can withdraw via “Cookie settings” in the footer. Calendly is certified under the EU-U.S. Data Privacy Framework (Art. 45 GDPR).

[OFFEN] Calendly is not yet integrated. Until then, “Book a demo” leads to the contact form.

7. Consent and local storage

We store your choice in the “Cookie settings” dialog in your browser’s local storage so that we do not ask again. This is strictly necessary for the service you requested (§ 25 (2) no. 2 TDDDG). We do not use any other cookies or similar technologies.

8. Links to other websites

The website links to LinkedIn and microsoft.com. Only when you follow such a link does the respective provider process data according to its own policy. We do not embed social media plugins.

9. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). You can object to processing based on Art. 6 (1) (f) GDPR (Art. 21). You can withdraw consent at any time with effect for the future (Art. 7 (3)).

You can lodge a complaint with a supervisory authority (Art. 77 GDPR), for example the State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg. An email to hello@epplab-studio.de is sufficient for all requests.

10. No obligation to provide data, no automated decisions

You do not have to give us any data. Without an email address, however, we cannot answer your enquiry. We do not make automated decisions under Art. 22 GDPR and do not create profiles.

11. Security and changes

The connection to the website is encrypted via TLS. We update this policy when the website or the legal situation changes.