Privacy Policy | Verdicord

This privacy policy applies to the website verdicord.com. The website works without cookies, without tracking, and without analytics tools. We process personal data only to the extent necessary for the technical operation of the site and for voluntary features such as the waitlist and account confirmation. A separate privacy policy applies to the Verdicord app.

1. Controller

The controller responsible for data processing on this website is:
Georgios Minassidis
Welserstraße 3
87463 Dietmannsried, Germany
Email: info@verdicord.com

2. Hosting

This website is hosted on Vercel (Vercel Inc., USA). When you visit the pages, Vercel processes on our behalf the technical data your browser automatically transmits (see server log files). The legal basis is our legitimate interest in a secure and stable operation of the website (Art. 6(1)(f) GDPR). We have a data processing agreement with Vercel (Art. 28 GDPR). Since Vercel is a US provider, data may be transferred to the USA; this is based on the EU Standard Contractual Clauses (Art. 46 GDPR) and, where Vercel is certified, on the EU-US Data Privacy Framework. Further details in Vercel's privacy policy: vercel.com/legal/privacy-policy.

3. Server log files

When you visit the pages, information that your browser automatically transmits is collected: IP address, date and time of the request, page requested, amount of data transferred, referrer, and details of your browser and operating system. This data is used exclusively for the technical operation and security of the website and is not merged with other data sources. The legal basis is Art. 6(1)(f) GDPR. The logs are stored only briefly and then automatically deleted.

4. Fonts

Fonts (Fraunces, Bricolage Grotesque, Hanken Grotesk, Newsreader) are served locally from our own server. There is no connection to third-party providers such as Google Fonts; no personal data is transmitted to third parties as a result.

5. Cookies and analytics

This website uses no cookies, no tracking, and no analytics tools. No usage profiles are created.

6. Interactive features and service providers

In a few places you can actively submit data to us. We only process what you enter, and only for the respective purpose:

Waitlist: If you sign up on /app with your email address, we use it exclusively to notify you once about the app launch. The legal basis is your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time, informally, at info@verdicord.com. The list is not public.
Account and email features: Confirmation of your email address and password resets are handled via /auth/callback. The legal basis is the performance of the usage agreement (Art. 6(1)(b) GDPR).

These features run through our service provider Supabase (Supabase Inc., USA); the data resides on servers within the European Union (Ireland region). We have a data processing agreement with Supabase (Art. 28 GDPR); the EU Standard Contractual Clauses (Art. 46 GDPR) and, where applicable, the EU-US Data Privacy Framework apply to any transfers to the USA. Details on the use of the app are governed by the app's privacy policy.

7. Contacting us

If you contact us by email, we process your details to handle the request and any follow-up questions (Art. 6(1)(b) or (f) GDPR). We delete this data as soon as it is no longer required and no statutory retention obligations apply.

8. Your rights

Under the GDPR, you have the right at any time to:

Access your stored data (Art. 15)
Rectification of inaccurate data (Art. 16)
Erasure (Art. 17) and restriction of processing (Art. 18)
Data portability (Art. 20)
Object to processing (Art. 21)

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). An informal message to the address given in section 1 is sufficient to exercise your rights.