Privacy
This notice explains how Corvendor processes personal data when you visit this website or contact us.
Your inquiry
Your details are sent to Corvendor by email so we can handle your inquiry. Please do not send confidential business information or sensitive personal information through this form.
Controller and contact
The controller for this website is Corvendor GmbH, Emilienstr. 44, 04107 Leipzig, Germany, represented by Managing Director Reiner Rübel. For privacy questions or to exercise your rights, email vercel@corvendor.com. Further company information is available in our legal notice.
Providing and protecting the website
We use Vercel to provide the website and protect it against technical attacks and automated abuse. This involves necessary connection and usage data, including IP address, time, requested address, browser and device information, and response and error data. An IP-based limit protects the contact form against many requests in a short period. The basis is Article 6(1)(f) GDPR: our legitimate interest in a secure, reliable website.
Contacting us and using the form
When you write to us, we process your contact details and message to handle your request and communicate with you. The form requires your name, email address and message; the company field is optional. It also includes language and a technical source label, such as the offer page used. You can alternatively contact us directly by email.
We handle general business inquiries under Article 6(1)(f) GDPR, based on our interest in answering and maintaining business contacts. Where you personally request steps toward a contract or performance of a contract, Article 6(1)(b) GDPR applies. Statutory retention obligations are based on Article 6(1)(c) GDPR. We do not use inquiries for automated individual decisions or to subscribe you to advertising.
Service providers and international processing
Vercel Inc. provides hosting and technical protection. When the contact form is available, it sends messages through Resend to our Google Workspace mailbox. The website does not maintain an additional inquiry database for this. Our application diagnostics contain technical identifiers and status information, not message text. We use Google Workspace to handle incoming emails and our replies.
These services may process data outside the European Economic Area. Selecting Ireland as Resend's sending region does not mean messages are stored only in the EU: Resend stores customer data in the United States. The providers describe safeguards for international transfers, including EU Standard Contractual Clauses, in their data-processing agreements. Their documents below explain processing and protection measures; you can ask us for copies of applicable safeguards.
Retention
For inquiries that do not lead to a project, we normally review and delete the correspondence six months after the conversation ends. We retain necessary information longer if an issue remains open or a statutory retention duty applies. Project and contract records are handled according to their purposes and applicable retention requirements. This review includes our related correspondence.
Vercel runtime logs under the Observability Plus configuration used here are retained for 30 days. Resend states a 30-day retention period for email and log data on the plan used. Other technical operational and security records and backups follow the providers' respective retention and deletion procedures. There is therefore no single deletion deadline covering all processing.
Analytics, external links and browser storage
The current configuration does not activate web analytics, advertising tracking or automatic matching of visits to CRM contacts. Images and fonts are provided as website files. The LinkedIn reference is an ordinary link; following it opens another provider's service, where that provider's information applies.
If we introduce functions that require consent, we will update this notice and provide the necessary choices before those functions are used.
Your rights
Subject to the applicable legal conditions, you have rights of access, correction, deletion, restriction of processing and data portability. You may object to processing based on legitimate interests for reasons related to your particular situation. Where processing relies on consent, you may withdraw it for the future. You may also complain to a data protection authority, particularly where you live, work or believe an infringement occurred. The Saxon data protection authority is one contact point for Corvendor in Leipzig.