PrivacyPolicy

The controller for personal data processed through this website is Feinwerk Software, with offices in Islamabad, Pakistan and Fellbach, Germany. Full contact details are in the imprint.

Questions about this policy or your data can be sent to hello@feinwerk.software.

We keep data collection to what the site needs to work and to answer you.

• Contact enquiries. Name, email address, company (optional), the service and budget range you select, and your message. We also record the IP address the enquiry came from, to protect the form from abuse.
• Server logs. Our hosting provider records standard request data (IP address, user agent, requested URL, timestamp) for security and reliability. Logs are retained for a short period and then deleted.
• Analytics, only with consent. If you accept analytics cookies, we use PostHog to understand which pages are useful. We do not use advertising trackers or sell data.
• Preferences. Your theme choice and cookie decision are stored in your browser only and never sent to us.

• Responding to enquiries and preparing proposals: Art. 6(1)(b) GDPR (steps prior to a contract) and Art. 6(1)(f) (our legitimate interest in answering you).
• Running the website securely, including rate limiting and log retention: Art. 6(1)(f) GDPR.
• Analytics: Art. 6(1)(a) GDPR, your consent, which you can withdraw at any time by clearing site data in your browser.
• Legal obligations, such as tax record keeping for invoices: Art. 6(1)(c) GDPR.

We use a small number of service providers who process data on our behalf under data processing agreements:

• Vercel Inc. (USA / EU regions) for hosting and content delivery.
• Resend for delivering contact form notifications by email.
• Supabase (EU region) for storing contact submissions, where enabled.
• PostHog (EU cloud) for analytics, only after consent.
• Cal.com if you book a call through a link we provide; their privacy policy applies to the booking.

Where a provider is outside the EU or EEA, transfers are covered by the EU Standard Contractual Clauses or an adequacy decision. We never sell personal data.

• Contact enquiries: up to 24 months after our last exchange, unless a contract follows.
• Contract and invoicing records: as long as commercial and tax law requires (typically 10 years in Germany).
• Server logs: up to 30 days.
• Analytics data: up to 12 months, in aggregated form.

Under the GDPR you can ask us to:

• confirm whether we hold data about you and provide a copy (access);
• correct inaccurate data (rectification);
• delete your data where there is no longer a reason to keep it (erasure);
• restrict or object to processing based on legitimate interest;
• receive your data in a portable format;
• withdraw consent at any time, without affecting earlier processing.

Write to hello@feinwerk.software. We respond within one month. You also have the right to lodge a complaint with a supervisory authority; for our German office that is the Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg.

All traffic to this site is encrypted in transit (TLS). Contact submissions are stored with access restricted to the people who handle them, protected by row-level security at the database and by server-only credentials. We review access and providers regularly.

When we build or operate software for a client, we act as a processor for any personal data in that system and the client remains the controller. This is governed by a separate data processing agreement that we provide for every project involving personal data. This policy covers only this website.

We update this policy when our practices or the law change. The date at the top shows the current version. Material changes are announced on this page.