Privacy Policy

1. Controller

The controller responsible for the processing of personal data on this platform under the General Data Protection Regulation (GDPR) is:

Verlinkt, Owner: Babu Marie
c/o brigk
Schloßlände 26
85049 Ingolstadt
Email: [email protected]

2. Collection and Processing of Personal Data

2.1 When Visiting the Platform

When you access our platform, technical information is automatically transmitted to our server and temporarily stored in server log files. The following data is collected:

• IP address of the requesting device
• Date and time of access
• Page accessed and referrer URL
• Browser type and operating system

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in the secure and stable operation of the platform).

Retention period: Server log files are deleted after a maximum of 30 days.

2.2 When Contacting Us (Form or Email)

When you contact us via our contact forms or by email, we collect the information you provide, typically name, email address, phone number (optional), and your message. When using our forms, we also record your IP address to prevent abuse.

Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures or contract fulfilment) and Art. 6(1)(f) GDPR (legitimate interest in preventing abuse).

Retention period: Enquiries are stored for as long as necessary to process them, up to a maximum of 3 years after the last contact.

2.3 When Submitting a Business Listing

When you submit a business via our "Submit Business" form, we collect:

• Business information (name, category, address, contact details)
• Your email address (if submitting as the business owner)
• IP address for abuse prevention

Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures) and Art. 6(1)(f) GDPR (legitimate interest).

Retention period: Business data is retained for as long as the business remains listed in the directory. Rejected submissions are deleted after 6 months.

2.4 Page View Tracking

To measure the use of business pages, we record page views and clicks on contact elements (e.g. call, book appointment). Your IP address and browser type are stored to prevent duplicate counts. No third-party analytics services are used.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in statistical analysis).

Retention period: IP address and browser information are automatically erased after 30 days; only anonymous, non-personal count data remains.

2.5 Listings Created from Publicly Available Sources

Some of the business listings in our directory are created by us from publicly available sources, for example publicly accessible company websites, trade and online directories, and public registers. These listings were not submitted by the business itself.

In doing so, we process only business-related data that is already publicly accessible. For sole proprietors and freelancers, this information may constitute personal data.

Categories of personal data (Art. 14(1)(d) GDPR): name (for sole proprietors/freelancers), industry/category, business address, and public business contact details (phone, email, website).

Source of the data (Art. 14(2)(f) GDPR): publicly available sources (see above).

Legal basis: Art. 6(1)(f) GDPR (legitimate interest). Our legitimate interest lies in providing a complete and useful regional directory of professional service providers; we process only data that is already public and business-related, so the impact on the data subject is minimal.

Retention period: until you object or request deletion, at the latest for as long as the listing remains in the directory.

This privacy policy also serves as the information notice for data subjects under Art. 14 GDPR. You may object to the processing at any time under Art. 21 GDPR and request erasure under Art. 17 GDPR (see Section 5). Upon receiving your objection or erasure request, we will take the listing offline without undue delay and delete the data. A short message to [email protected] is sufficient.

3. Cookies and Technical Storage

Our platform uses only technically necessary cookies. We do not use tracking cookies, analytics cookies, or cookies for advertising or social media purposes.

The technical cookies we use serve platform security and session management. They are deleted automatically at the end of your browser session or after a short time.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in the technical functionality of the platform).

4. Sharing Data with Third Parties

We do not share your personal data with third parties for advertising or marketing purposes. Data is transferred to processors only in the following cases:

• Hosting provider: Our platform is hosted on servers in Germany; data processing agreement under Art. 28 GDPR.
• Email service provider: For sending system emails, we use an EU-based provider; data processing agreement under Art. 28 GDPR.
• Cloudflare Inc. (USA): network infrastructure and data storage; certified under the EU–U.S. Data Privacy Framework (DPF), Standard Contractual Clauses under Art. 46(2)(c) GDPR. Legal basis for the third-country transfer: Art. 46(2)(c) GDPR.
• Zoho Corporation (India): handles incoming customer emails. Zoho has executed Standard Contractual Clauses under Art. 46(2)(c) GDPR. Legal basis for the third-country transfer: Art. 46(2)(c) GDPR.
• Map display (OpenStreetMap): To show location maps, map content is loaded from OpenStreetMap (OpenStreetMap Foundation, UK) when the page is accessed. For technical reasons your IP address is transmitted to the provider. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in a functional map display). OpenStreetMap sets no tracking cookies.
• Payment service provider (Stripe): When you take out a paid plan, your payment data is processed by Stripe Payments Europe, Ltd. (Ireland) to execute the payment. A transfer to Stripe, Inc. (USA) may occur; Stripe is certified under the EU–U.S. Data Privacy Framework (DPF) and has executed Standard Contractual Clauses. Legal basis: Art. 6(1)(b) GDPR (performance of the contract) and Art. 46(2)(c) GDPR for the third-country transfer.
• Legal obligation: Where we are legally required to disclose data (e.g. by court order or regulatory authority).

Data processing agreements under Art. 28 GDPR are in place with all processors. Transfers to third countries occur solely via Cloudflare Inc. (USA) and Zoho Corporation (India), on the basis of Standard Contractual Clauses under Art. 46(2)(c) GDPR.

5. Your Rights

Under the GDPR, you have the following rights regarding your personal data:

• Right of access (Art. 15 GDPR): You can request information about the data we process about you.
• Right to rectification (Art. 16 GDPR): You can request correction of inaccurate data.
• Right to erasure (Art. 17 GDPR): You can request deletion of your data, unless legal retention obligations apply.
• Right to restriction (Art. 18 GDPR): You can request restriction of processing.
• Right to data portability (Art. 20 GDPR): You can receive your data in a structured, machine-readable format.
• Right to object (Art. 21 GDPR): You can object to processing based on legitimate interests.

To exercise your rights, please contact [email protected].

You also have the right to lodge a complaint with a data protection supervisory authority. The competent authority in Germany is the Bayerisches Landesamt für Datenschutzaufsicht (BayLDA) or the authority in your place of residence.

6. Data Security

We implement appropriate technical and organisational measures in accordance with Art. 32 GDPR to protect your personal data against unauthorised access, loss, or misuse.

7. Changes to This Privacy Policy

We reserve the right to update this Privacy Policy as needed to comply with legal requirements or to reflect changes to our platform. The date of the last update is always shown at the top of this page.

8. Contact

For questions about the collection, processing, or use of your personal data, or to exercise your rights, please contact:

Verlinkt, Owner: Babu Marie
c/o brigk
Schloßlände 26
85049 Ingolstadt
Email: [email protected]