Privacy policy

This English version is provided for convenience. Only the German version (Datenschutzerklärung, https://cassida.io/datenschutz) is legally binding.

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

cassida.io GmbH Lindenufer 39 13597 Berlin Germany E-mail: kontakt@cassida.io Represented by the managing director Nicolas Tichy

We have not appointed a data protection officer, as there is no legal obligation to do so (Section 38 BDSG). For questions about data protection, you can reach us at the e-mail address above.

We only process personal data to the extent necessary to provide a functional website and to handle your enquiries. We do not use analytics or tracking tools, do not embed advertising networks and do not load content from third parties.

This website is operated by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany, on servers in Germany. IONOS processes the data exclusively on our behalf and according to our instructions; a data processing agreement pursuant to Art. 28 GDPR is in place with IONOS. When the website is accessed, the server automatically records the following information:

• IP address of the requesting device
• Date and time of access
• Page or file requested and amount of data transferred
• HTTP status code
• Referrer URL (previously visited page), if transmitted
• Browser type and operating system

Processing is based on Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure and stable provision of the website and in defending against attacks. Log data is deleted after 14 days at the latest, unless it is needed to investigate a specific security incident.

For security reasons, this website uses TLS encryption. You can recognise an encrypted connection by “https://” in your browser's address bar.

We do not use cookies. If you change the colour scheme (light/dark) using the corresponding switch, your choice is stored in your browser's local storage (localStorage) so that it is kept for your next visit. This information does not leave your device and is not transmitted to us.

Storage is strictly necessary for the function you have expressly requested (Section 25(2) No. 2 TDDDG). You can delete the entry at any time via your browser settings.

The fonts used on this website are served locally from our server. No connection is made to servers of Google or other third parties.

If you contact us via the contact form or by e-mail, we process the data you provide (name, company, e-mail address, project description and – if provided – budget range) in order to handle your enquiry.

Mandatory fields in the contact form are name, company, e-mail address and project description; without this information we cannot process and answer your enquiry. The budget range is optional. There is no legal or contractual obligation to provide the data.

The information from the contact form is sent to us by e-mail. For sending, we use the e-mail service of IONOS SE (address see section 3). Our mailbox is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (Google Workspace); e-mails you send us directly are also received there. Both providers process the data as processors pursuant to Art. 28 GDPR.

In the case of Google, a transfer of data to Google LLC in the USA cannot be ruled out. Google LLC is certified under the EU-US Data Privacy Framework; the transfer is therefore based on the European Commission's adequacy decision (Art. 45 GDPR). In addition, Google has agreed to EU standard contractual clauses (Art. 46(2)(c) GDPR).

The legal basis is Art. 6(1)(b) GDPR if your enquiry is aimed at concluding or performing a contract, otherwise Art. 6(1)(f) GDPR; our legitimate interest lies in answering your enquiry.

To protect against misuse, your IP address is briefly processed in the server's memory when the form is submitted in order to limit the number of requests per period. It is not stored permanently (Art. 6(1)(f) GDPR).

Retention period: enquiries that do not lead to an assignment are deleted as soon as they have been fully processed, but no later than twelve months after the last contact. If a contract is concluded, we keep the correspondence for the statutory retention periods (Section 257 HGB, Section 147 AO – six to ten years depending on the document) and delete it afterwards.

On this website we link to our profiles on LinkedIn and, in articles, to external sources. These are simple links; no data is transmitted to these providers when our website is loaded. Only when you click a link do you leave our website; the target provider then receives in particular your IP address and the information about which page you came from.

LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland, is responsible for data processing at LinkedIn. Data may be transferred to LinkedIn Corporation in the USA; LinkedIn is certified under the EU-US Data Privacy Framework. For details, please refer to LinkedIn's privacy policy.

In the footer of this website we display a seal from valimatic, a service of cassida.io GmbH for automated data protection checks of websites. The seal is served from our own server; no data is transmitted to third parties when the website is loaded. Our server retrieves the current seal from valimatic at most once a day without transmitting any visitor data.

The seal links to the corresponding check report on valimatic.eu. Only when you click the link is the valimatic website accessed; valimatic's privacy notice then applies.

With regard to your personal data, you have the following rights vis-à-vis us:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object to processing based on Art. 6(1)(f) GDPR (Art. 21 GDPR)
• Right to withdraw consent with effect for the future (Art. 7(3) GDPR)

An informal message to kontakt@cassida.io is sufficient to exercise your rights.

You have the right to lodge a complaint with a data protection supervisory authority about the processing of your personal data. The supervisory authority responsible for us is:

Berlin Commissioner for Data Protection and Freedom of Information (Berliner Beauftragte für Datenschutz und Informationsfreiheit) Alt-Moabit 59–61 10555 Berlin, Germany

We update this privacy policy when the website or the legal requirements change. The version published here applies.