Privacy

Privacy Policy

This privacy policy explains which personal data we process when operating this website, for what purposes, and what rights you have under the GDPR.

1. Data Controller

  • Regnify GmbH, Französische Str. 12, 10117 Berlin, Germany
  • Email: privacy@regnify.io

2. Hosting & Website Delivery (Vercel)

  • This website is hosted via Vercel (Vercel Inc.). To deliver and secure the website, personal data is processed (in particular connection data).
  • Processed data categories: IP address, date/time of access, requested page/URL, referrer, HTTP status, user agent (browser/OS), and potentially device/network data.
  • Purposes: technical delivery, stability, troubleshooting, and protection against abuse/attacks.
  • Legal basis: Art. 6(1)(f) GDPR (legitimate interest in operating a secure and performant website).

3. Consent Management (Cookiebot)

  • We use the consent management tool Cookiebot (provider: Usercentrics A/S, Havnegade 39, 1058 Copenhagen, Denmark) to obtain, document, and manage your consent to consent-based services.
  • Data processed: truncated IP address, date/time of consent, browser information, URL, your consent status. A cookie is set to store your selection.
  • Legal basis: Art. 6(1)(c) GDPR (proof of consent) and Art. 6(1)(f) GDPR (legally compliant operation of the website).
  • You can adjust or withdraw your consent at any time via the cookie settings in the footer.

4. Tag Management (Google Tag Manager)

  • We use Google Tag Manager (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) to integrate and manage website services (so-called tags). The Tag Manager itself does not set cookies for its own purposes; however, your IP address is transmitted to Google when it loads.
  • Tags requiring consent are only triggered after you have given consent via the consent banner.
  • Third-country note: transfers to the USA cannot be ruled out; they are based on EU Standard Contractual Clauses or the adequacy decision for the EU-U.S. Data Privacy Framework.
  • Legal basis: Art. 6(1)(f) GDPR (efficient and compliant management of website services).

5. Web Analytics (PostHog)

  • We use PostHog (PostHog, Inc.) to statistically analyze and improve the use of our website (e.g., page views, referrer, device/browser information).
  • Cookie-based analytics only take place if you have consented to statistics cookies via our consent banner; without consent, no analytics cookies are set.
  • Legal basis: your consent (Art. 6(1)(a) GDPR, Sec. 25(1) German TDDDG); you can withdraw it at any time via the cookie settings.
  • Third-country note: depending on configuration, data may be transferred to third countries (e.g., the USA), based on appropriate safeguards (e.g., EU Standard Contractual Clauses).

6. Error Diagnostics & Stability (Sentry)

  • We use Sentry (Functional Software, Inc.) to detect, report, and analyze technical errors. Technical diagnostic data is processed (e.g., error message, affected page/URL, browser/OS, timestamp).
  • Processing takes place via Sentry's EU ingest environment (data center in the EU).
  • If an error occurs, a masked recording of the affected session may be created (session replay); text input and content are masked by default.
  • Legal basis: Art. 6(1)(f) GDPR (legitimate interest in stable and error-free operation).

7. Conversion Tracking & Retargeting (LinkedIn Insight Tag)

  • If you have consented to marketing cookies, we use the LinkedIn Insight Tag (provider: LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland) to measure the effectiveness of our LinkedIn advertising (conversion tracking), to show you relevant ads on LinkedIn (retargeting) and to receive aggregated, anonymized reports on our website visitors.
  • Data processed: IP address, URL, referrer, timestamp, device/browser information and cookie identifiers. LinkedIn may link this data to your LinkedIn account if you are logged in. We receive only aggregated reports and cannot identify individual visitors.
  • The tag is only loaded after you have consented to marketing cookies via our consent banner; without consent, no data is transmitted to LinkedIn.
  • Legal basis: your consent (Art. 6(1)(a) GDPR, Sec. 25(1) German TDDDG); you can withdraw it at any time via the cookie settings in the footer.
  • Joint controllership: for the processing of data collected via the Insight Tag, we and LinkedIn are joint controllers (Art. 26 GDPR). LinkedIn's privacy policy: https://www.linkedin.com/legal/privacy-policy.
  • Third-country note: data may be transferred to LinkedIn Corporation in the USA; this is based on the adequacy decision for the EU-U.S. Data Privacy Framework and/or EU Standard Contractual Clauses.

8. Contact by Email

  • If you contact us by email, we process your details (e.g., email address and message content) to handle your request.
  • Legal basis: Art. 6(1)(b) GDPR (pre-contractual/contractual communication) or Art. 6(1)(f) GDPR (general inquiries).
  • Retention: for as long as necessary to handle the request; afterwards according to statutory retention obligations or until the purpose no longer applies.

9. Contact Form / Demo Request (HubSpot)

  • If you request contact and/or a demo via our contact form, we process the data you provide (in particular your email address) to handle your request and to take steps prior to entering into a (trial) contract relationship.
  • Technical implementation: the email address is transmitted server-side to HubSpot (Forms API); additional context data (e.g., visited page/URL) is transmitted.
  • Recipient: HubSpot (CRM platform) acting as a data processor.
  • Legal basis: Art. 6(1)(b) GDPR (pre-contractual steps / contractual communication).
  • Retention: until your request has been handled; thereafter in accordance with statutory retention obligations or until the purpose no longer applies.
  • Third-country transfers: depending on configuration, data may be transferred to third countries (e.g., the USA). Where required, we rely on appropriate safeguards (e.g., EU Standard Contractual Clauses) and/or an adequacy decision and implement additional measures where necessary.

10. Appointment Booking & Online Reviews (Google Calendar / Google Meet)

  • You can optionally book a reporting review through an external Google Calendar booking page. Google Calendar is not embedded on this website; the booking link opens Google's website only when you select it. Downloading the toolkit does not require a booking.
  • Purpose and data: we use your name, email address, selected appointment time and any information you provide to arrange, confirm and conduct the requested review. If you join through Google Meet, meeting metadata and the audio, video or screen content you choose to share are also processed to conduct the conversation.
  • Recipients: the Regnify host receives your booking details. Google (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) provides Calendar and Meet and processes booking, meeting and technical data, such as IP address and browser/device information. Google's handling of data on its services is described at https://policies.google.com/privacy.
  • Legal basis for our handling of your request: Art. 6(1)(b) GDPR where the appointment concerns pre-contractual steps or an existing contract; otherwise Art. 6(1)(f) GDPR (our legitimate interest in responding to requested business inquiries).
  • Retention: we retain booking details and related correspondence for as long as necessary to arrange the appointment and handle the inquiry, and thereafter only where required by statutory retention obligations. Google's retention and account settings are described in its privacy policy.
  • Third-country transfers: Google's services may process data outside the EEA, including in the USA. Where required, transfers must be covered by an applicable adequacy decision or appropriate safeguards, such as EU Standard Contractual Clauses. Further information: https://policies.google.com/privacy/frameworks.

11. Cookies & Local Preferences

  • We set technically necessary cookies and local preferences (e.g., language setting "NEXT_LOCALE", storage of your consent status) based on Sec. 25(2) German TDDDG and Art. 6(1)(f) GDPR.
  • Cookies requiring consent (statistics and marketing) are only set after you have consented via our consent banner; you can change or withdraw your selection there at any time.
  • Marketing cookies (LinkedIn Insight Tag, see section 7) are only set after your explicit consent.

12. Your Rights

  • You have the right of access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction (Art. 18 GDPR) and data portability (Art. 20 GDPR).
  • You may object to processing based on your particular situation (Art. 21 GDPR).
  • If processing is based on consent, you may withdraw consent at any time with effect for the future (Art. 7(3) GDPR).
  • You have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR).

13. Security

  • We implement technical and organizational measures to protect your data (e.g., TLS encryption during transmission).

14. Last Update

  • October 2026