Privacy Policy

Data controller

The controller responsible for data processing under the General Data Protection Regulation (GDPR) is:

Veviad®
Karl-Theodor-Straße 74
D-80803 Munich, Germany
represented by: Shawn Maholick (Managing Director)
Email: hello@veviad.com
Phone: +49 (0)89 24581980

Privacy contact

If you have questions about the processing of your personal data, contact us at privacy@veviad.com.

Static delivery through Cloudflare

The website is delivered as a static website through Cloudflare Workers Static Assets and the global network of Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. When you connect, Cloudflare processes technically necessary traffic and access data. This may include your IP address, date and time, requested address, referrer address, browser and device information, transferred data volume, HTTP status, and information used for traffic routing and abuse prevention.

Processing serves the secure, fast, and stable delivery of the website, troubleshooting, and protection against attacks. The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is the secure, error-free, and economical operation of the website. We have not enabled additional web analytics or persistent application-level visitor logging for this website.

Local language preference

When you select a language, that preference may be stored locally in your browser so the website can be shown in your chosen language on a later visit. The preference remains on your device and is not sent to Veviad. You can delete it in your browser settings or replace it by selecting another language.

This local storage is necessary to provide the language feature you expressly request (section 25(2)(2) TDDDG). To the extent personal data is processed, the legal basis is Art. 6(1)(f) GDPR; our legitimate interest is a consistent, user-friendly presentation.

Attribution data during the browser session

Referrer and UTM parameters from the requested address may be kept temporarily in your browser's session storage so that request context is preserved while you navigate the website. The currently inactive form interface does not transmit this information to Veviad. The local session copy is discarded no later than the end of the browser session.

Prepared contact and trial request forms

The website contains a prepared interface for contact and trial requests. Online submission is not currently active. Entries are processed only for display and validation in your browser and are not transmitted to Veviad or to a CRM or provisioning system. The submit button remains disabled and the website clearly indicates this state.

Alternatively, you can contact us by email. In that case, the information you provide is processed by your email provider and our email service so that we can answer your request. The legal basis is Art. 6(1)(b) GDPR for pre-contractual steps and, additionally, Art. 6(1)(f) GDPR for traceable handling.

Before online submission, abuse prevention, CRM processing, or automatic provisioning is enabled, this privacy policy will be updated to describe the services, recipients, retention periods, and legal bases actually used at that time.

Local storage, cookies and analytics

The website does not use analytics or marketing cookies and does not employ tracking, profiling, or advertising services. Apart from the local language and session storage described above, the website currently uses no browser-side storage technologies. Cloudflare Turnstile is not enabled for the inactive form interface.

Recipients of personal data

When you visit the website, Cloudflare receives the data required to deliver and protect it. If you contact us by email, the email service providers involved may receive access to the transmitted content. Neither CRM nor provisioning services receive data through the inactive form interface. Personal data is not disclosed to third parties for advertising purposes.

Storage and deletion

Personal data is deleted or blocked as soon as the relevant processing purpose ceases to apply and no statutory retention obligation or overriding legitimate reason prevents deletion. You can delete data held in local or session browser storage at any time through your browser settings.

Your rights

Subject to the applicable statutory requirements, you have rights of access, rectification, erasure, restriction of processing and data portability, as well as the right to object to processing. You may withdraw consent at any time with effect for the future.

Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data violates the GDPR.

No automated decision-making

No automated decision-making, including profiling, takes place on this website.

Transfers to third countries

Cloudflare may process data in the United States and other countries outside the EU or European Economic Area. Cloudflare states that transfers from the EEA to the United States rely on its certification under the EU-U.S. Data Privacy Framework and, where required, on the EU Standard Contractual Clauses and supplementary safeguards. Details are provided in Cloudflare's Data Processing Addendum and privacy policy.

Updates to this privacy policy

We update this privacy policy when the website, the services used, or legal requirements change. The version stated on this page is authoritative.