Privacy Policy

Controller

The controller responsible for data processing on Pagedrop (pagedrop.eu) is CovaSyn GmbH, Naunhofer Straße 67, 04299 Leipzig, Deutschland, represented by Dr. Oliver Kraft, Dr. Immo Serbian.

Contact for all data protection matters: kontakt@pagedrop.eu. No data protection officer has been appointed because this is not legally required.

Hosting and server log files

This website is hosted by Vercel Inc. (USA). When you visit it, the host processes technically necessary data: IP address, date and time, the page requested, referrer, browser and operating system. This is required to deliver the website and keep it secure (Art. 6(1)(f) GDPR). The data is stored only as long as necessary for these purposes.

A data processing agreement is in place with Vercel. Transfers to the USA rely on the adequacy decision for the EU-US Data Privacy Framework or, alternatively, on Standard Contractual Clauses.

Database

We store enquiries, orders and the related details in a Supabase database (data center in Frankfurt am Main, Germany). A data processing agreement is in place with the provider.

Contact by email

If you write to us at kontakt@pagedrop.eu, we process your message and your sender data to answer your enquiry (Art. 6(1)(b) or (f) GDPR). Our mailbox is hosted by a provider in Germany (ALL-INKL.COM, Neue Medien Münnich). We delete correspondence as soon as it is no longer needed and no retention obligation applies.

Enquiry form and product information

If you enter your email address (and optionally your company) on the site, we store these details together with marketing parameters (UTM) and the referrer in order to process your enquiry (Art. 6(1)(b) and (f) GDPR). We send product information by email only if you have ticked the corresponding box (Art. 6(1)(a) GDPR). You can withdraw this consent at any time with effect for the future, for example by email to kontakt@pagedrop.eu.

The “Request a conversation” form

When you submit the “Request a conversation” form, we store your name, company and phone number as well as the optional details (email address, website, message) in order to get back to you and answer your request (Art. 6(1)(b) GDPR, or point (f) for a mere expression of interest). If you arrived through a personal report, we also store its identifier. To protect against abuse, we store a shortened, irreversible identifier of your IP address.

The request is kept in our database at Supabase (Frankfurt am Main). We are notified internally through Slack (Slack Technologies, a Salesforce, Inc. company, USA, standard contractual clauses). If no contract is concluded, we delete the request after twelve months at the latest.

Orders and contract processing

If you place an order, we process the details from the checkout and the order form (for example name, company, address, email address, VAT ID, booked services) in order to perform the contract (Art. 6(1)(b) GDPR). We keep invoicing and payment data because of commercial and tax-law retention periods (Art. 6(1)(c) GDPR, currently up to ten years).

Orders are processed by a self-operated automation (n8n) on a server of Hetzner Online GmbH in Germany. We receive internal order notifications via Slack (Slack Technologies, USA; transfer based on Standard Contractual Clauses or the Data Privacy Framework). We send order confirmations by email from our mailbox in Germany.

At your request, we publish the details you provide for your website at the address set up for you. Please enter only data there that is meant to be public.

Payment processing

Payments are processed by Stripe Payments Europe Ltd. (Ireland), a subsidiary of Stripe, Inc. (USA). You enter your payment details directly with Stripe; we only receive the payment status, name, email address and billing details (Art. 6(1)(b) GDPR). Stripe partly processes data as an independent controller, for example for fraud prevention and to meet legal obligations. For details, see Stripe’s privacy policy.

Processing on behalf of our customers

Where we process personal data on behalf of a customer, the customer is the controller and we are the processor. We provide a data processing agreement (Art. 28 GDPR) on request at kontakt@pagedrop.eu.

If we have contacted you as a business

We contact businesses selectively when we have found a specific reason for our offer on their publicly accessible website or in public directories. In doing so, we process the company name, contact person (if published), business email address, website and the information found there. The only source is publicly available information. The legal basis is our legitimate interest in acquiring new business customers (Art. 6(1)(f) GDPR).

The personal page your message links to can be reached only through an individual link and shows you the finding and a preview. Every message explains how you can object to further messages. Your objection takes effect immediately and your address is added to a suppression list so that you receive no further messages.

Cookies and tracking

We do not use tracking or marketing cookies on this website and do not load analytics or advertising services. We serve images and fonts from our own hosting.

Retention period

We store personal data only as long as necessary for the respective purpose or as long as a statutory retention period applies. We delete enquiries that do not lead to a contract as soon as they are dealt with and no retention obligation applies.

Your rights

You have the following rights. Please contact kontakt@pagedrop.eu to exercise them:

• Access to your stored data (Art. 15 GDPR)
• Rectification of inaccurate data (Art. 16 GDPR)
• Erasure (Art. 17 GDPR) and restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Withdrawal of consent you have given, with effect for the future (Art. 7(3) GDPR)
• Lodging a complaint with a data protection supervisory authority (Art. 77 GDPR), for example the Saxon Data Protection and Transparency Commissioner (Sächsische Datenschutz- und Transparenzbeauftragte)

Right to object

Where we process data on the basis of legitimate interests (Art. 6(1)(f) GDPR), you may object to this processing at any time on grounds relating to your particular situation (Art. 21 GDPR). You may object to direct marketing at any time without giving reasons. An informal message to kontakt@pagedrop.eu is sufficient.

Obligation to provide data, automated decisions

The details marked as mandatory in the forms are required for the enquiry and for concluding a contract; without them we cannot provide the service. No automated decision-making with legal effect within the meaning of Art. 22 GDPR takes place.

Last updated

This policy was last updated on 2026-10-30. We adjust it when services or the legal situation change.