Privacy policy

1. Controller

Loyal Loop [[PLATZHALTER: LEGAL FORM]], [[PLATZHALTER: ADDRESS]], e-mail: [[PLATZHALTER: value]]. Data protection is part of our architecture: we process as little data as possible, and strictly for its purpose.

2. Hosting at Vercel

This website is hosted by Vercel Inc. (USA). Delivery uses Vercel's global network; server functions (e.g. the contact form) run in the Frankfurt (EU) region. On access, Vercel processes server logs (IP address, time, requested resource, browser type) to deliver and secure the site (Art. 6 (1) (f) GDPR). Transfers to third countries are safeguarded by EU standard contractual clauses. Log retention: [[PLATZHALTER: period per Vercel contract]].

3. Contact and request form

Details from the form (name/institution, e-mail, specification of your request) are processed solely to handle your request and prepare a possible collaboration (Art. 6 (1) (b) GDPR). They are not passed on to third parties and are deleted once the purpose ceases and no statutory retention obligations apply.

4. E-mail delivery via Ionos

Requests from the contact form are delivered by e-mail via a mailbox of IONOS SE (Germany) to the founders. Form data (name/institution, e-mail, message, language, timestamp) is not stored in a database and is only logged on errors, without the message content. Legal basis: Art. 6 (1) (b) and (f) GDPR. Retention in the mailbox: [[PLATZHALTER: period]].

5. Cookies

This website sets no tracking or analytics cookies. A purely functional cookie (NEXT_LOCALE, SameSite=Lax) is set only when you switch the language manually, to remember your choice. Accessibility settings are stored solely in your browser (localStorage).

6. Fonts and external services

Fonts are loaded for display. [[PLATZHALTER: SELF-HOSTED / PROVIDER]]. No social media plugins or tracking pixels are used.

7. Your rights

You have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21 GDPR), as well as the right to lodge a complaint with the competent supervisory authority: [[PLATZHALTER: AUTHORITY]].

8. Security

Transmission is TLS-encrypted. Only the founders have access to request data. Last updated: [[PLATZHALTER: DATE]].

DRAFT · PLACEHOLDERS WILL BE REPLACED BEFORE PUBLICATION