Legal
Privacy Policy
1. Controller
DeineStadt GmbH
DigiCrew Automation
Philippstraße 27
52349 Düren
Germany
Telephone: +49 800 955 66 77
Email: hello@digicrewautomation.com
2. General Information on Data Processing
We process personal data only where necessary to provide this website, communicate with you, handle enquiries, or take steps prior to entering into and performing a contract.
Depending on the processing activity, we rely in particular on Article 6(1)(b) GDPR (pre-contractual measures and performance of a contract), Article 6(1)(c) GDPR (legal obligations), Article 6(1)(f) GDPR (legitimate interests), or – where expressly requested – Article 6(1)(a) GDPR (consent).
3. Website Delivery and Hosting
This website is delivered using Cloudflare services. The provider is Cloudflare, Inc., 101 Townsend Street, San Francisco, California 94107, USA. When you access the website, data processed may include your IP address, date and time of access, requested page or file, referrer URL, browser type, operating system, and other connection and security data required for technical operation.
The processing serves the secure, fast and stable delivery of the website, protection against attacks, and error analysis. The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is the secure and reliable operation of our website.
Cloudflare may also process data outside the European Economic Area. Where required, transfers are made in accordance with the legal requirements for international data transfers, in particular an adequacy decision or appropriate safeguards such as Standard Contractual Clauses. Further information is available in Cloudflare’s Privacy Policy.
Log and security data are retained only for as long as necessary for the stated purposes. Longer retention may be required where a security incident must be investigated or a legal obligation fulfilled.
4. Cookies and Similar Technologies
We do not use our own analytics, advertising or marketing cookies on this website. Technically necessary storage or access may occur where required for the secure delivery of the website or for a service you expressly request. External services such as Calendly are loaded only after you select the relevant function.
5. Contact by Email
If you contact us by email, we process in particular your email address, the content of your message, any attachments, and other information you provide voluntarily. We use this information to handle your enquiry and any follow-up questions.
The legal basis is Article 6(1)(b) GDPR where your enquiry relates to entering into or performing a contract. In other cases, processing is based on Article 6(1)(f) GDPR. Our legitimate interest is the proper handling of business enquiries.
We use Fastmail for email communications. The provider is Fastmail Pty Ltd, Australia. Message and connection data may therefore be processed outside the European Economic Area. Further information is available in Fastmail’s Privacy Policy.
We generally delete enquiries once they have been fully handled and no statutory retention obligations or legitimate interests require further storage. Communications relevant to contracts, tax, or accounting may be retained for the applicable statutory periods.
6. Enquiry Form and WhatsApp
You may enter information about your project in an enquiry window on the website. This information is initially processed only in your browser. Only when you select “Send enquiry via WhatsApp” are your details used to compose a WhatsApp message and WhatsApp opened. No information is automatically transmitted to us before that step.
When you open a WhatsApp link or send a message, data is transmitted to WhatsApp. This may include your telephone number, profile and connection data, communication time, and message content. The provider for users in the European Economic Area is WhatsApp Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland. Processing by affiliated companies and service providers in third countries cannot be excluded.
Our processing is carried out to handle your enquiry on the basis of Article 6(1)(b) GDPR or, for general business enquiries, Article 6(1)(f) GDPR. Use of WhatsApp is voluntary. You may alternatively contact us by email or telephone. Further information about WhatsApp’s processing is available in the WhatsApp Privacy Policy.
We delete WhatsApp communications once the enquiry has been fully handled and no statutory retention obligations or legitimate reasons require further storage.
7. Appointment Scheduling via Calendly
We use Calendly to schedule free initial consultations. The provider is Calendly, LLC, 271 17th Street NW, 10th Floor, Atlanta, Georgia 30363, USA.
The Calendly booking window is loaded only after you select a button for a free initial consultation. At that point, technically necessary data such as your IP address, device and browser information, language, time, and requested page may be transmitted to Calendly. If you then book an appointment, Calendly also processes the contact and appointment information you enter.
The processing enables the appointment scheduling you request and preparation for a possible contractual relationship. The legal basis is Article 6(1)(b) GDPR. Where the technical integration is additionally required for efficient appointment management, processing is based on Article 6(1)(f) GDPR. Our legitimate interest is user-friendly and reliable appointment scheduling.
Calendly may process personal data in the United States and other third countries. Where required, transfers are based on the legal requirements for international data transfers, in particular an adequacy decision or appropriate safeguards such as Standard Contractual Clauses. Further information about the categories of data, retention periods, and data subject rights is available in Calendly’s Privacy Notice.
Appointment information stored by us is deleted once it is no longer required for managing the appointment and any related communication, unless statutory retention obligations apply.
8. Recipients of Data
Within our company, personal data is accessible only to persons who need it to handle your enquiry or perform their duties. Service providers acting for us may also receive data, in particular hosting, email, communications, and appointment-scheduling providers. Where required, these providers are engaged under data protection agreements. Data is disclosed to other third parties only where legally permitted or required, or where you have consented.
9. International Data Transfers
Some service providers named above are established outside the European Economic Area or use subcontractors in third countries. In these cases, we observe the requirements of Articles 44 et seq. GDPR. Depending on the provider, relevant safeguards may include adequacy decisions, certification under the EU-US Data Privacy Framework, or Standard Contractual Clauses approved by the European Commission together with any necessary supplementary measures.
10. Retention
Unless a specific period is stated in this policy, we retain personal data only for as long as necessary for the relevant purpose. Data is then deleted or anonymised unless statutory retention requirements, the establishment or defence of legal claims, or other legitimate reasons require further storage.
11. Your Rights
Subject to the applicable legal requirements, you have in particular the right to:
- access your personal data under Article 15 GDPR,
- rectification under Article 16 GDPR,
- erasure under Article 17 GDPR,
- restriction of processing under Article 18 GDPR,
- data portability under Article 20 GDPR, and
- object to certain processing under Article 21 GDPR.
You may withdraw consent at any time with effect for the future. This does not affect the lawfulness of processing carried out before the withdrawal.
To exercise your rights, contact hello@digicrewautomation.com.
12. Right to Lodge a Complaint
You have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for our registered office is in particular:
State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia
Kavalleriestraße 2–4
40213 Düsseldorf
Germany
www.ldi.nrw.de
13. Requirement to Provide Data
You are generally under no statutory or contractual obligation to provide personal data. Without certain contact or appointment information, however, we may be unable to answer your enquiry or schedule an appointment.
14. Automated Decision-Making
We do not carry out solely automated decision-making, including profiling, within the meaning of Article 22 GDPR in connection with this website.
15. Data Security
We use appropriate technical and organisational measures to protect personal data against loss, misuse, and unauthorised access. Data transmitted through this website is encrypted using TLS.
16. Updates to this Privacy Policy
We may update this Privacy Policy when the website, the services used, or legal requirements change.
Last updated: September 2026.
