Privacy policy

1. Controller

The controller responsible for data processing on this website is PI Probaligence GmbH, Am Schammacher Feld 37, 85567 Grafing bei München, Germany. Contact: info@probaligence.com.

2. Data we process

When you contact us or request a demo, we process the data you provide (such as name, email, company, position, and your message) to respond to your enquiry.

This website is hosted by STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany, acting as a processor under Art. 28 GDPR. When you open a page, your browser automatically transmits data that the hosting provider records in server log files: your IP address, the date and time of the request, the page requested, the page you came from, your browser and operating system, and the volume of data transferred. We process this under Art. 6(1)(f) GDPR for the legitimate interest of operating the site securely and reliably. Log data is not combined with other sources and is not used to identify individual visitors.

3. Legal basis

Processing is based on Art. 6(1)(b) GDPR (steps prior to entering a contract) and Art. 6(1)(f) GDPR (legitimate interest in operating the site and responding to enquiries). The newsletter is based on your consent, Art. 6(1)(a) GDPR; section 8 has the details.

4. Your rights

You have the right to access, rectification, erasure, restriction, data portability, and objection, and the right to lodge a complaint with a supervisory authority. To exercise these rights, contact us at the address above.

5. Retention

We retain personal data only as long as necessary for the purposes described or as required by law. Server log files are deleted by our hosting provider once they are no longer needed to operate and secure the site. Demo requests and other enquiries are kept for up to 24 months after our last contact with you. An address you send us through the unsubscribe form is kept for as long as we hold a mailing list, because that record is what keeps the address off it. Where statutory commercial or tax retention periods apply, for example once a contract is concluded, those longer periods apply instead. You can ask us to delete your data at any time under section 4. Newsletter data is kept as described in section 8.

6. Cookies and analytics

This site sets no cookies and uses no analytics, so no cookie consent is requested and no consent banner is shown. This is a deliberate design rule for this website, not a temporary state. Strictly necessary browser storage is used only for functions you choose yourself, such as a reduced-motion preference or your progress in the interactive demonstrator, and it stays on your device. All pages are transmitted over an encrypted TLS connection.

7. Demo requests and processors

When you submit the demo request form, the data you enter is transmitted to a form endpoint operated on our behalf by Cloudflare, Inc. and filed as an internal, non-public request record hosted by GitHub, Inc. Both act as processors under Art. 28 GDPR. Bot protection on the form may process your IP address for the sole purpose of distinguishing automated from human submissions. Transfers to these providers are covered by the EU-U.S. Data Privacy Framework and standard contractual clauses.

8. Newsletter

You can subscribe to our newsletter on this website. We use the double opt-in procedure: after you enter your email address, we send you a confirmation email. Until you click the link in it, your address is stored as unconfirmed and receives nothing but that email. We start sending the newsletter only after the click, so nobody can subscribe an address without access to its inbox.

Your email address is the only entry we ask for; without it we cannot send you the newsletter. To send the confirmation email and to be able to prove your consent, our newsletter service also receives the time of your sign-up, the IP address and browser identification of the device you sign up with, and the address of the sign-up page. When you click the confirmation link, our newsletter service records the time and the technical data your browser sends with the click, such as the IP address, browser identification and language settings, and derives an approximate location from the IP address.

We send the newsletter on the basis of your consent, Art. 6(1)(a) GDPR. We keep the record of your consent because we must be able to prove it (Art. 7(1) GDPR); the legal basis for this is Art. 6(1)(c) GDPR. After you unsubscribe, we keep that record on the basis of Art. 6(1)(f) GDPR: our legitimate interest is being able to show that we had your consent if a claim is raised.

The sign-up form sends your entry to a form endpoint operated on our behalf by Cloudflare, Inc., the processor named in section 7, under the safeguards described there. The endpoint passes your entry on and keeps no copy of it; to run the endpoint and to limit repeated submissions, Cloudflare also processes your IP address. The newsletter is sent with CleverReach GmbH & Co. KG, Schafjückenweg 2, 26180 Rastede, Germany, which processes your data on our behalf under a data processing agreement pursuant to Art. 28 GDPR. CleverReach stores and processes the data in Germany and Ireland. Where its subprocessor Amazon Web Services, Inc. transfers data to the USA, the transfer is covered by the EU-U.S. Data Privacy Framework.

We do not measure whether our newsletters are opened or which links in them are clicked.

You can withdraw your consent at any time with effect for the future. Every newsletter contains an unsubscribe link, and you can also write to us at the address in section 1. Withdrawal does not affect the lawfulness of the processing before it. When you unsubscribe, we stop sending to your address. We keep the address, marked as unsubscribed, together with the record of your consent and of your withdrawal for three years after the end of the year in which you unsubscribe, then delete it. If you never confirm your sign-up, we delete the unconfirmed entry from our list after 30 days. Our newsletter service keeps its own record of the sign-up and confirmation requests separately from the list, as proof of the double opt-in.

The newsletter system we used previously was retired together with our previous website, so the unsubscribe link in newsletters sent before then can no longer identify you automatically. Our unsubscribe page asks for one thing, the email address you want removed, and we use it only to record that request and carry it out. The legal basis is Art. 6(1)(c) GDPR, because acting on an objection under Art. 21 GDPR is an obligation, together with Art. 6(1)(f) GDPR for keeping the record that shows we acted. The address reaches us through the same processors named in section 7. You can also ask to be removed by writing to info@probaligence.com from the address concerned, and you do not have to give a reason.

9. Data protection officer and supervisory authority

We are not required to appoint a data protection officer and have not appointed one: fewer than twenty people at PI Probaligence are constantly engaged in the automated processing of personal data, which is the threshold in section 38(1) BDSG. For any data protection question, write to us at the address in section 1. The supervisory authority responsible for us is the Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Promenade 18, 91522 Ansbach, Germany.