Legal

Privacy policy

This English version is provided for information. The German Datenschutzerklärung is authoritative.

In short: This site sets no cookies, stores nothing on your device, embeds no third-party services and counts no visits. It is delivered through Cloudflare (section 3); we keep no access log ourselves. Requests from the contact and demo forms are forwarded to us by email and kept in a database at our hosting provider for processing until they have been dealt with (sections 5 and 8).

1. Controller

Kai Wendt, Libellenring 18a, 24235 Laboe, Germany
Email: info@warpbeam.de
Phone: +49 1515 7548430

2. Visiting the site

When you open a page, your browser sends technically necessary data to the delivery service named in section 3: your IP address, date and time, the requested address and the browser identifier. We store none of it ourselves and do not analyse visits.

The purpose is to deliver the site and protect it against attacks. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is operating the site securely and reliably.

3. Hosting

The site is delivered through Cloudflare: Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA, from the data centre closest to you. Cloudflare processes the data from section 2 on our behalf under a data processing agreement pursuant to Art. 28 GDPR. Transfers to the USA rely on the adequacy decision for the EU-US Data Privacy Framework (Art. 45 GDPR), under which Cloudflare is certified, and additionally on the standard contractual clauses in the data processing agreement.

4. No cookies, no tracking, nothing stored on your device

We set no cookies and use no similar techniques. No information is stored on or read from your device (§ 25 TDDDG). Fonts, graphics and scripts come only from our own address warpbeam.de. There are no analytics, advertising or map services and no embedded third-party content.

5. Contact form

You can use the contact form to ask us a question, request a live session or register for an event. We process your request type, your name, your email address and your message, for a live session also the preferred time frame and, if you provide them, your organisation and the approximate number of participants, and for a registration the event you chose. The sole purpose is to answer your request, where applicable to arrange the live session with you, and to send you the join link when you register. We don't send advertising.

The legal basis is Art. 6(1)(b) GDPR where you request a live session (steps taken at your request before an agreement) or register for an event (your participation), and otherwise Art. 6(1)(f) GDPR; our legitimate interest is answering your question. We need the required fields to be able to reply; everything else is optional.

Route and storage: Our web server receives your details, checks them and immediately forwards them as an email via Microsoft 365 (Exchange Online) to our mailbox info@warpbeam.de. At the same time, the server files your request in our request register so that we can process and answer it. The register is a database at Cloudflare (section 3) that we have restricted to storage in the EU. It holds the details from the form, the date and time of receipt, the processing status, our internal notes and the email history with you. We don't store your IP address there. Only the controller has access, through a protected administration area with a password and a second factor; only there does the site set a cookie, and only for him. The server log only records the request as described in section 2, never the content of your message. We don't send an automatic confirmation to your address; we send our reply from info@warpbeam.de to the address you gave.

Recipients: the hosting provider (section 3) and Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland, as the provider of our mailbox and of sending (Microsoft 365, Exchange Online), each as a processor under Art. 28 GDPR; the Microsoft Products and Services Data Protection Addendum governs this. Transmission is encrypted. Microsoft stores the contents of our mailbox in data centres in the EU. A transfer to countries outside the EU, for example to Microsoft Corporation in the USA, cannot be ruled out; it is safeguarded by the EU Standard Contractual Clauses and the EU-US Data Privacy Framework (Art. 45 and 46 GDPR).

Deletion: We delete your request with its history and the related emails once your request has been dealt with, six months after our last contact at the latest, unless a statutory retention obligation applies. In the request register this happens automatically at the latest by then; messages identified as spam are deleted there after 30 days. Cloudflare keeps the ability to restore the database to an earlier state for at most 30 days; after that, deleted details no longer exist there either. Exports we make as backups are deleted no later than 30 days after they were made. At your request we delete immediately.

Abuse protection: Against automated spam, the form contains a field that humans don't see, and on sending your browser solves a small computational puzzle set by our server. No cookies are involved, nothing is stored on your device, no third party takes part. The server also counts how many messages arrive from an IP address. These counters exist only in memory, hold the IP address only as a keyed hash whose key changes daily, and expire after 24 hours at most. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is a form free of spam.

6. Events and calendar files

Calendar entries (.ics) and the calendar feed are static files. Fetching them creates only the server log from section 2. Live events run as a video conference on our own server (section 7). To take part, you register through the contact form (section 5); we email you the join link beforehand. If a join link exceptionally leads to an external site, that provider's privacy policy applies once you click it; the event says so.

7. Video conferences (La Suite Meet)

Personal conversations about your request and our live events take place as video conferences with La Suite Meet, an open-source software. We run it ourselves on our own server; no third party is involved. We email you the link to a call or event. You need no account and no installation; the conference runs in your browser.

What is processed: the name you enter yourself when joining (a first name or initials is enough), your device's IP address, which the connection technically requires, and your picture and sound while your camera or microphone is switched on. Picture and sound are only transmitted live to the other participants and are not stored. We don't record unless we have announced a recording beforehand and you agree to it. You can switch off your camera and microphone at any time.

Legal basis: Art. 6(1)(b) GDPR where the call or your participation goes back to your request or registration, and otherwise Art. 6(1)(f) GDPR; our legitimate interest is showing Warpbeam in direct conversation and answering your questions.

8. Request a demo

With the “Request a demo” form you can request time-limited, read-only access to a demo environment with synthetic data. We process your name, your company or organisation, your work email address, your role, your phone number if you provide it, and whether you consented to being contacted. The sole purpose is to set up your demo access and send you the credentials.

The legal basis is Art. 6(1)(b) GDPR (steps taken at your request). We contact you about your demo by email or phone only if you tick the second box; the legal basis for that is your consent under Art. 6(1)(a) GDPR. You can withdraw it at any time with effect for the future; an email to info@warpbeam.de is enough.

Route and recipients: as for the contact form (section 5). Our web server checks your details, forwards them as an email to our Microsoft 365 mailbox and files them in our request register as described there. The form sends no email to your address; we send you the credentials ourselves. Spam protection as for the contact form.

Deletion: We delete the request and the related email once your demo has been dealt with; without consent to be contacted, 90 days after receipt at the latest (automatically in the request register); with consent, when you withdraw it, six months after our last contact at the latest.

9. Links to external sites

The site contains plain links, for example to our profile on LinkedIn (external site) to our community on Discord (external site) and to our community on WhatsApp (external site). You only leave this site when you click one; no data is sent to that provider before you do.

Community links: The community on Discord and the WhatsApp community “warpbeam - Identity Fabric Community” are offered by third parties. This site does not embed them, loads nothing from them and shows no preview. If you follow a link and join, Discord or WhatsApp (Meta) process your data under their own privacy terms; we are not responsible for that. In the WhatsApp community, your phone number may be visible to other members. Other members read what you write there, so please don't share confidential details there.

10. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object (Art. 21). Because IP addresses are shortened, we usually can't link log entries to a person.

You may lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Unabhängiges Landeszentrum für Datenschutz Schleswig-Holstein (ULD), Holstenstraße 98, 24103 Kiel, Germany.

11. Last updated

[open: publication date]

[open: legal review of sections 5 and 8 after introducing the request register at Cloudflare, confirm EU storage location]