Privacy Policy

1. Controller

The controller responsible for data processing on this website within the meaning of the GDPR is:
MJM Hephaistos Solutions UG (haftungsbeschränkt)
Karl-Liebknecht-Str. 14, 10178 Berlin, Germany
Email: info@velentis.eu

For any privacy-related matters, you can reach us at: info@velentis.eu

2. Data collected when visiting the website (server logs / hosting)

When you visit our website, your browser automatically sends information to the server of our hosting provider, where it is temporarily stored in log files (including IP address, date and time of access, page accessed, browser type and operating system). The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in secure, stable operation).

3. Inquiries via the contact/matching form

When you use our inquiry or matching form, we process the data you provide: name, email address, phone number (optional), company (optional), your details on needs, solution type, budget and timeframe, as well as the provider you selected.

The purpose of processing is to match you with the AI provider you selected and to contact you. The legal basis is your consent pursuant to Art. 6 (1) (a) GDPR (which you explicitly grant in the form) and Art. 6 (1) (b) GDPR (pre-contractual measures). The data is stored in our database at Supabase (Postgres) with servers located in the EU (Frankfurt).

4. AI project analysis & document upload

As part of the AI project analysis, you can optionally upload documents (PDF, Word, text or images; max. 5 files, max. 10 MB each). These files are stored in a private storage bucket at Supabase with servers located in the EU (Frankfurt) and are not publicly accessible.

The purpose is to create a non-binding, AI-assisted initial assessment (e.g. price range, duration and complexity) and, where applicable, to match you with suitable providers. The legal basis is your consent pursuant to Art. 6 (1) (a) GDPR. Note: Please do not upload special categories of personal data (Art. 9 GDPR) or otherwise sensitive information that is not required for the assessment.

5. Disclosure to selected providers

Note: When you submit an inquiry, we transmit the contact and project details required for making contact (and, where relevant, contents of your inquiry) to the provider you selected so that they can contact you and process your request. This disclosure takes place exclusively on the basis of your consent (Art. 6 (1) (a) GDPR). No further disclosure to third parties takes place.

6. Email delivery (processor)

To send confirmation and notification emails (to you, to the selected provider and as an internal copy), we use the service Resend (Resend, Inc.). Resend processes the data required for this purpose (in particular email address and message content) exclusively on our behalf as a processor on the basis of a data processing agreement (Art. 28 GDPR).

7. Hosting

The frontend of this website is hosted by Vercel Inc. Our database and file storage are operated at Supabase with servers located in the EU (Frankfurt). A data processing agreement (Art. 28 GDPR) is in place with both providers.

7a. Newsletter signup & waitlist

If you sign up for our AI briefing or join the network waitlist, we process your email address, your language preference and, optionally, the topic interests you select. The legal basis is your consent (Art. 6(1)(a) GDPR). The data is stored in our Supabase database (EU/Frankfurt). Emails are only sent after you confirm your signup (double opt-in). You may withdraw your consent at any time with effect for the future — via the unsubscribe link in every email or informally to the address stated in the legal notice; your data will then be deleted.

7b. AI research chat (Radar)

To answer questions in the Radar research chat we use the Claude API provided by Anthropic PBC (USA). Only your entered question and editorial content from our radar are transmitted — no names, contact or account data, unless you include such data in your question yourself. The transfer to the USA is based on standard contractual clauses (Art. 46(2)(c) GDPR). Please do not enter personal data of third parties into the chat field. The legal basis is our legitimate interest in answering your query (Art. 6(1)(f) GDPR).

7c. Academy: exam & certificates

If you take and pass the final exam of an academy course, we store your name, email address, the course, the exam result and the issue date in order to issue and later verify the certificate. The legal basis is your consent (Art. 6(1)(a) GDPR), given before submission. The data is stored in our Supabase database (EU/Frankfurt); the verification page is only reachable via the complete link (certificate ID and verification code) and is blocked for search engines. You may request deletion or revocation of the certificate at any time informally via the address stated in the legal notice.

8. Cookies & web analytics

This website does not use tracking cookies and no services that follow your behaviour across different websites. To measure reach and technical quality we use Vercel Web Analytics and Vercel Speed Insights — services of our hosting provider Vercel Inc., with whom a data processing agreement is in place (see section 7).

According to the provider, both services work without cookies: visits are counted server-side via a hash derived from the incoming request that is discarded after 24 hours at the latest; the data is not tied to an individual or to your IP address. Recorded are the timestamp, the page visited and its route pattern, the referrer, filtered query parameters, approximate origin (country or region), device type, operating system and browser as well as technical loading-performance metrics (Web Vitals). No information used for re-identification is stored on or read from your device; consent under § 25 TDDDG — and therefore a consent banner — is not required for this. The legal basis is our legitimate interest in reliable reach measurement and in the technical optimisation of this website (Art. 6(1)(f) GDPR). Insofar as data is transferred to the USA, this is based on standard contractual clauses (Art. 46(2)(c) GDPR).

Apart from that, only technically necessary data is processed (see the section “server logs / hosting”).

9. Storage period

We store personal data only for as long as is necessary for the stated purposes – at most until your inquiry has been fully processed or until you withdraw your consent. The data is then deleted, unless statutory retention periods require otherwise. Uploaded documents are deleted as soon as they are no longer needed for the assessment and any matching.

10. Your rights

You have the right at any time to access, rectification, erasure, restriction of processing, data portability and objection. You may withdraw any consent you have given at any time with effect for the future. You also have the right to lodge a complaint with a data protection supervisory authority. For this, please contact info@velentis.eu.