Privacy Policy
Datenschutzerklärung
1. Data controller
Komma Systems UG (haftungsbeschränkt) i.G.
Eichenweg 34
79183 Waldkirch
Germany
Email: contact@komma.systems
2. Data we collect
Site hosting
When you visit this site, our hosting platform (Vercel, Inc., United States) processes technical data needed to deliver the site, including IP addresses and standard request metadata in server and edge logs. This processing is for operating, securing, and troubleshooting the service only. We do not use marketing tracking on this site. Further detail on how Vercel handles data is available in Vercel's privacy policy.
Web analytics
We use Cloudflare Web Analytics (Cloudflare, Inc., United States) to understand, in aggregate, how this site is used. This tool is designed to be privacy-preserving: it sets no cookies, uses no localStorage, and does not fingerprint or track visitors across sites. It processes technical information in the browser, such as the page visited, referrer, browser and device type, country, and page performance timings, and provides us only aggregate statistics. IP addresses are used transiently to deliver the measurement and are not stored or made available to us. Cloudflare acts as a processor on our instructions and does not use this data for its own purposes. Details are available in Cloudflare's privacy policy.
Contact form
When you use the contact form, we collect your email address and the message you send. Messages are delivered using Resend (Resend, Inc., United States), which acts as a processor on our instructions. We use this information only to read and respond to your enquiry.
3. Legal basis
Applicable law is the EU General Data Protection Regulation (GDPR) together with the German Federal Data Protection Act (Bundesdatenschutzgesetz, BDSG).
Processing of contact form data is based on Art. 6(1)(b) GDPR (steps prior to entering into a contract or handling your request) and, where applicable, Art. 6(1)(f) GDPR (our legitimate interest in responding to enquiries). Processing of hosting and log data is based on Art. 6(1)(f) GDPR (legitimate interest in providing a secure, available website). Processing of aggregate web analytics data is based on Art. 6(1)(f) GDPR (legitimate interest in understanding how the site is used and improving it), using a tool chosen specifically because it operates without cookies or cross-site tracking.
4. Data retention
Hosting and infrastructure logs are retained for the periods described by Vercel and only as long as necessary for the purposes above. Contact submissions are kept for as long as needed to handle your enquiry and for a reasonable follow-up period, and in any case typically no longer than 24 months, unless a longer retention is required by law.
5. Your rights
Under the GDPR you have the right of access, rectification, erasure, restriction of processing, data portability, and the right to object where applicable. To exercise these rights, contact us at contact@komma.systems. We will respond within one calendar month. If a request is complex or numerous, we may extend that period by up to two further months where permitted by law; we will inform you within the first month if an extension applies. You also have the right to lodge a complaint with a supervisory authority:
Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg
Lautenschlagerstraße 20
70173 Stuttgart, Germany
6. International transfers
Vercel, Cloudflare and Resend are US companies. Using their services can involve transfers of personal data to the United States and other countries. Where data is transferred to countries not covered by an adequacy decision, the GDPR requires appropriate safeguards.
For these processors, safeguards are typically set out in their customer agreements and, where offered, in a data processing agreement (DPA). Those instruments often incorporate the EU Commission's standard contractual clauses (SCCs) or another approved transfer mechanism for processor processing. The exact tool that governs your relationship depends on the terms and DPA (if any) accepted between Komma Systems UG (haftungsbeschränkt) i.G. and each provider. We recommend reviewing Vercel's and Resend's current DPA and privacy materials and confirming that you have accepted the processing terms that apply to your account.
7. Third-party processors
We do not sell your personal data and do not share it with third parties for their marketing purposes. We use the processors described in this policy only to operate this website and the contact channel.
8. Cookies
This site does not use tracking or marketing cookies. Our web analytics tool is cookieless and stores nothing on your device. Only technically necessary mechanisms required for basic site function may apply (for example session or security-related cookies from the hosting platform).