Privacy Policy

DIGITALDECK, Philipp Refeld, Harderweg 46, 22549 Hamburg, Germany.

Phone: +49 (0) 151 / 275 28 304

Email: hallo@digitaldeck.de

We operate the platform: accounts, system emails, hosting, logs. For this, we are the controller.

What appears on a business card – name, photo, phone, address – is decided by the respective company. That company is the controller for this information. We only process it to deliver the card at the chosen address.

During registration we collect the company name, URL slug, first and last name, and email address. We need this data to set up and operate access (Art. 6(1)(b) GDPR). You set your password only after confirmation; it is stored only as a hash.

Until confirmed via the link in the email, we store the details separately from the actual account and delete them if registration is not completed within seven days.

In the account you can change your name, email address, and password. A new email address only takes effect once you have clicked the confirmation link.

Administrators can invite colleagues by email. For this we store the entered address and a time-limited link. Expired invitations are deleted after seven days.

Information you enter on a business card is publicly accessible at its address – that is the purpose of the service. You decide which fields to fill in: name, title, company, contacts, location, photo, social profiles.

Visitors can save the data as a vCard to their device. The file then resides with them, not additionally with us.

Drafts are not public. A withdrawn card is no longer reachable at its previous address.

We store logos, backgrounds, and profile pictures on the server so cards and the portal can display them. The files belong to the respective company and are deleted when removed there or when the account is closed.

Anyone visiting a business card, the homepage, or the portal leaves technically necessary data: IP address, timestamp, requested address, browser type. This serves the operation and security of the servers (Art. 6(1)(f) GDPR). No tracking and no analytics take place.

For confirmation, welcome, invitation, password, and notice emails we use Brevo (Sendinblue GmbH, Köpenicker Straße 126, 10179 Berlin, Germany) as a processor. The recipient address and the content of the respective email are transmitted. Brevo is based in the EU.

The application, files, and database are hosted on servers in Germany. Operations are GDPR-compliant and ISO-certified. The technical data listed above is generated on each visit. No transfer to third countries takes place.

We use only strictly necessary cookies: one for signing in to the portal, one for the most recently selected client (`payload-tenant`). There are no tracking, analytics, or advertising cookies. A consent banner is therefore not required.

We store account data and cards for as long as the respective company uses the service. Incomplete registrations and expired invitations are deleted after seven days. Server logs only for as long as necessary for operation and security. Tax-relevant information may be retained longer where required by law.

You have the right to access, rectification, erasure, restriction of processing, data portability, and objection, as well as to withdraw any consent given. Please contact hallo@digitaldeck.de.

You may also lodge a complaint with a supervisory authority. The competent authority is the Hamburg Commissioner for Data Protection and Freedom of Information, Ludwig-Erhard-Straße 22, 20459 Hamburg, Germany, https://datenschutz-hamburg.de.

We do not use automated decision-making or profiling.