Privacy policy

This is a convenience translation. Only the German version is legally binding.

This privacy policy applies to the website kette.itdone.de and to the Die Kette waitlist.

1. Controller

Get IT Done GmbH
Preißlerstraße 7e
90429 Nürnberg, Germany
Managing directors: Alexander Friedl, Bertram Holzer
Phone: +49 157 58150846
Email: info@itdone.de

We have not appointed a data protection officer because there is no legal obligation to do so. Please send any data protection questions to info@itdone.de.

2. Summary

• kette.itdone.de uses no cookies, no tracking, no analytics services and no embedded third-party content. We serve fonts and images ourselves.
• We only process personal data if you join the waitlist or write to us.
• The waitlist uses double opt-in. Every email contains an unsubscribe link.

3. Website hosting

The website is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. When you visit the site, Vercel processes technically necessary connection data: IP address, date and time, requested address, referrer, browser and operating system. This is needed to deliver the site and serves its security and stability. Vercel keeps these logs only briefly.

The legal basis is Art. 6 (1) (f) GDPR. Our legitimate interest is the secure and reliable operation of the website. We have a data processing agreement with Vercel (Art. 28 GDPR). For transfers to the USA, see section 6.

4. Waitlist

With the "Join the waitlist" form you can sign up for a message when Die Kette goes on sale. We process:

• your email address,
• the language of the page (German or English),
• the place on the page where you signed up (for example "hero"),
• the time of sign-up and of confirmation,
• a hash of your IP address. We do not store the IP address itself.

If you arrive through a link with campaign parameters, we store them (source, medium, campaign, content) with the entry, so we know which post the sign-up came from; we do not build a profile from them and we do not share anything.

Double opt-in: After you submit the form we send you an email with a confirmation link. The link is valid for 7 days. You are only on the waitlist once you confirm it. Without confirmation we do not write to you again. We delete unconfirmed entries once the link has expired.

Storage: We store the entries in a Postgres database on our own platform itdone.cloud, which Get IT Done GmbH runs on servers of Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany, in the EU. We have a data processing agreement with Hetzner. We only store hashes of the confirmation and unsubscribe links, not the links themselves.

Notification: When you confirm your sign-up, we receive an internal email at info@itdone.de with your email address, the language, the place of sign-up and both timestamps.

Sending email: We send the confirmation email, the sales start message and our internal notifications via Mittwald CM Service GmbH & Co. KG, Königsberger Straße 4-6, 32339 Espelkamp, Germany (agenturserver). We have a data processing agreement with Mittwald.

Legal basis: your consent under Art. 6 (1) (a) GDPR, which you give by submitting the form and confirming. We use the hash of the IP address to limit mass sign-ups. The legal basis for this is Art. 6 (1) (f) GDPR, our legitimate interest is protection against abuse.

Storage period: We keep your entry until the end of the sales start communication or until you unsubscribe, whichever comes first. Then we delete it.

Unsubscribing and withdrawal: Every email contains an unsubscribe link. You can withdraw your consent at any time with effect for the future, using this link or by email to info@itdone.de. When you unsubscribe, we delete your entry completely.

Providing your email address is voluntary. Without it we cannot notify you when sales start.

5. Contact by email

If you email us, we process your email address, your name if it appears in the sender field, and the content of your message to answer your request. The legal basis is Art. 6 (1) (b) GDPR if it concerns a possible contract, otherwise Art. 6 (1) (f) GDPR (answering your request). Our mailbox runs on Mittwald (see section 4). We delete requests once they have been dealt with and no retention obligation applies.

6. Transfers to the USA

Vercel transfers personal data to the USA. The EU Commission has adopted an adequacy decision for the USA (EU-US Data Privacy Framework). Vercel Inc. is certified under it. In addition, Vercel has agreed to the EU Commission's standard contractual clauses (Art. 46 (2) (c) GDPR).

7. Your rights

You have the right to

• access your data (Art. 15 GDPR),
• rectification (Art. 16 GDPR),
• erasure (Art. 17 GDPR),
• restriction of processing (Art. 18 GDPR),
• data portability (Art. 20 GDPR),
• withdraw consent with effect for the future (Art. 7 (3) GDPR).

Right to object: If we process data on the basis of Art. 6 (1) (f) GDPR, you can object at any time on grounds relating to your particular situation (Art. 21 GDPR).

An email to info@itdone.de is enough.

8. Complaints to the supervisory authority

You can lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is:

Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 18
91522 Ansbach, Germany
www.lda.bayern.de

9. Encryption

The website and the waitlist use only TLS-encrypted connections (https).

10. Changes

We update this privacy policy when services or the law change, for example when sales start. The version with the date shown above applies.