IController and principles
As little data as possible.
This website works without cookies, without tracking and without analytics services.
Controller within the meaning of the General Data Protection Regulation (GDPR): Tom Ludwig, An der Alche 5, 57072 Siegen, Germany, [email protected].
This website is hosted on servers operated by us in Germany (netcup data centre, Nuremberg). No tracking or analytics services are used and no advertising cookies are set. Fonts are served locally from our own server. For delivery and protection we use the Cloudflare network (see section II).
IIServer logs and Cloudflare
Technically necessary logs — short-lived.
When you visit this website, our web server and our delivery network process technically necessary connection data.
Our web server (nginx) writes access logs to the container standard output (Docker stdout): IP address, time of access, requested URL, HTTP status code and user agent. These logs serve solely the technical operation of the site and error analysis, are not combined with other data and are short-lived — they are discarded automatically by the container log rotation.
Cloudflare: This website is delivered through the network of Cloudflare, Inc. (101 Townsend St, San Francisco, CA 94107, USA). Cloudflare provides DNS, content delivery and protection against attacks (DDoS mitigation, web application firewall) and processes connection data such as your IP address for this purpose. Technically necessary cookies may be set as part of the security features. Transfers to the USA are based on the EU-US Data Privacy Framework and the EU standard contractual clauses; Cloudflare acts as a processor on our behalf.
The legal basis is Art. 6 (1) (f) GDPR in each case: our legitimate interest in the secure and stable operation of this website.
IIIDemo request
What happens with your demo request.
The form on the demo page is the only place where this website collects personal data.
Via the "Request a demo" form we collect: type of organisation, name of the organisation, your name, your e-mail address and, optionally, a preferred subdomain and a description of your intended use. The purpose of the processing is to provide a test instance and to communicate with you about it.
The legal basis is Art. 6 (1) (b) GDPR (pre-contractual steps taken at your request). For the optional checkbox "Keep me posted about Grantifex", Art. 6 (1) (a) GDPR applies — your consent, which you may withdraw at any time with effect for the future.
Your details are stored in our system and processed through our self-hosted workflow automation (n8n): you receive a confirmation e-mail with double opt-in, followed by a manual approval step and then the provisioning of your test instance. E-mails are sent via our mailbox at IONOS SE, Elgendorfer Strasse 57, 56410 Montabaur, Germany (processor, processing in Germany).
Retention: demo instances run for 14 days; without a subsequent contract they are locked and permanently deleted after a grace period of 30 days. We delete the associated request records no later than six months after the last communication if no contract is concluded.
IVYour rights
Your rights as a data subject.
The GDPR grants you a number of rights vis-à-vis the controller.
You have the right to:
- access the data stored about you (Art. 15 GDPR),
- rectification of inaccurate data (Art. 16 GDPR),
- erasure (Art. 17 GDPR) and restriction of processing (Art. 18 GDPR),
- data portability (Art. 20 GDPR),
- object to processing based on Art. 6 (1) (f) GDPR (Art. 21 GDPR).
You may withdraw any consent you have given at any time with effect for the future. You also have the right to lodge a complaint with a data protection supervisory authority.
For all privacy matters, you can reach us at [email protected].