Privacy policy

This privacy policy informs you, in accordance with Articles 13 and 14 of the General Data Protection Regulation (GDPR), about the nature, scope and purposes of the processing of personal data when you visit our website and contact us, and about the rights you have in this respect.

1. Controller

The controller within the meaning of Art. 4(7) GDPR is:

Devlance UG (haftungsbeschränkt)
Friedrichstraße 155
10117 Berlin
Germany

Represented by the managing director: Mohamed Al Kainai
Email: …

Further company details can be found in our Legal Notice (Impressum).

We have not appointed a data protection officer, as we are not legally required to do so. For all questions concerning data protection, please contact us at the email address above.

2. Scope

This privacy policy applies to our website at https://devlance.dev. Requests to devlance.de are automatically redirected to devlance.dev; this policy applies equally to them.

3. Overview

Our website is a purely informational website. In particular:

• we do not use cookies;
• we do not use analytics, tracking or advertising tools;
• we do not embed third-party content (such as fonts, maps or videos from external providers);
• we do not use social media plugins.

For this reason, our website does not display a cookie consent banner.

Personal data is processed only to the extent described below.

4. Hosting

Our website runs on a virtual server (VPS) that we rent from an infrastructure provider (hosting provider) based in Germany. The server is located in Germany.

We install, configure and administer the server and all software running on it ourselves. The hosting provider provides the underlying infrastructure (data centre, hardware and network connection) on which the data described in this privacy policy, in particular the server log files (Section 6), is stored. To the extent that the hosting provider processes personal data in this context, it does so exclusively on our behalf and in accordance with our instructions. We have concluded a data processing agreement with the hosting provider pursuant to Art. 28 GDPR.

5. Content delivery and protection against attacks (Cloudflare)

To protect our website against attacks (in particular distributed denial-of-service (DDoS) attacks) and to deliver it securely and reliably, we use the services of:

Cloudflare, Inc.
101 Townsend Street
San Francisco, CA 94107
USA

Cloudflare operates as a so-called reverse proxy: all requests to our website are first routed through Cloudflare's network before they reach our server. In the process, Cloudflare processes the data described in Section 6 (in particular your IP address and the details of the request) in order to deliver the website, encrypt the connection and detect and block malicious traffic.

Legal basis: Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure, stable and efficient provision of our website and in protecting it against attacks.

Data processing agreement: We have concluded a data processing agreement with Cloudflare pursuant to Art. 28 GDPR.

Transfer to third countries: Cloudflare operates a global network of data centres, so data may also be processed in the USA or other countries outside the European Union. Cloudflare, Inc. is certified under the EU-U.S. Data Privacy Framework. Transfers to the USA are therefore based on the European Commission's adequacy decision of 10 July 2023 (Art. 45 GDPR). In addition, Cloudflare's data processing agreement incorporates the EU Standard Contractual Clauses (Art. 46(2)(c) GDPR).

Cloudflare's bot management features, which would set cookies, are disabled on our website.

Further information can be found in Cloudflare's privacy policy: https://www.cloudflare.com/privacypolicy/

6. Server log files

Each time you access our website, the following data is automatically collected and stored in server log files:

• IP address of the requesting device;
• date and time of the request;
• name and URL of the requested page or file;
• website from which the access was made (referrer URL);
• HTTP status code and amount of data transferred;
• browser type and version, and operating system (user agent).

Purpose: This data is technically necessary to display our website to you and to ensure its stability and security, in particular to detect, analyse and defend against attacks and errors.

Legal basis: Art. 6(1)(f) GDPR. Our legitimate interest lies in the purposes stated above. The data is not combined with other data sources and is not used to identify you personally.

Storage period: The log files are automatically deleted after 14 days. Data whose further retention is required to investigate a specific security incident is exempt from deletion until the incident has been finally resolved.

7. Contact by email and via the contact form

You can contact us by email or by using the contact form on our website.

How the contact form works: The contact form does not transmit any data to our website or our server. When you click "Send", your own email program opens with a pre-filled message. The message is only sent once you send it yourself from your email program. No data entered in the form is stored on our website.

Data processed: When you contact us, we process your email address, your name (if provided), the content of your message and any further information you provide, such as your company name.

Purpose: We process this data solely to handle and respond to your enquiry.

Legal basis: Where your enquiry relates to the performance of a contract or to taking steps prior to entering into a contract, the legal basis is Art. 6(1)(b) GDPR. In all other cases, the legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in responding effectively to enquiries addressed to us.

Email provider: We use Google Workspace to receive and manage emails. The provider is:

Google Cloud EMEA Limited
70 Sir John Rogerson's Quay
Dublin 2
Ireland

Google processes your emails on our behalf as a processor on the basis of a data processing agreement pursuant to Art. 28 GDPR. It cannot be ruled out that data is also transferred to Google LLC in the USA. Google LLC is certified under the EU-U.S. Data Privacy Framework; transfers to the USA are therefore based on the European Commission's adequacy decision (Art. 45 GDPR). In addition, Google's data processing terms incorporate the EU Standard Contractual Clauses (Art. 46(2)(c) GDPR).

Storage period: We delete your enquiry as soon as it has been finally dealt with and its storage is no longer necessary, unless statutory retention obligations prevent deletion. Messages that qualify as commercial or business letters are retained in accordance with Section 257 of the German Commercial Code (HGB) and Section 147 of the German Fiscal Code (AO) for up to six or ten years.

8. Local storage of your colour scheme setting

If you select a colour scheme (System, Dark or Light) on our website, your browser stores this choice in its local storage under the name devlance-theme. The setting remains stored on your device only and is not transmitted to us. It is not used to recognise you or to create a profile.

Legal basis: Storing this setting is strictly necessary to provide the function you have expressly requested (§ 25(2) no. 2 of the German Telecommunications Digital Services Data Protection Act, TDDDG). No personal data is processed by us in this context.

You can delete the stored setting at any time via your browser settings.

9. Fonts

The fonts used on our website are hosted on our own server. No connection to servers of third-party font providers (such as Google Fonts) is established when you visit our website.

10. Links to external websites

Our website contains links to external websites, for example to our product Replance. Data is only transmitted to the operator of the linked website once you click on such a link. We have no influence on the data processing carried out by the operators of external websites; their respective privacy policies apply.

11. Recipients of personal data

Personal data is only disclosed to the following recipients, to the extent described in this privacy policy:

• our hosting provider based in Germany (hosting, Section 4);
• Cloudflare, Inc. (content delivery and attack protection, Section 5);
• Google Cloud EMEA Limited (email, Section 7).

All of these service providers act as our processors and are contractually bound to process personal data only in accordance with our instructions. We do not sell personal data and do not disclose it to third parties for advertising purposes.

12. Transfers to third countries

Data may be transferred to the USA in connection with the use of Cloudflare (Section 5) and Google Workspace (Section 7). These transfers are based on the European Commission's adequacy decision for the EU-U.S. Data Privacy Framework (Art. 45 GDPR) and, in addition, on the EU Standard Contractual Clauses (Art. 46(2)(c) GDPR).

13. Obligation to provide data

You are neither legally nor contractually obliged to provide us with personal data. The processing of server log data described in Sections 5 and 6 is, however, technically necessary to display the website. If you do not provide the data necessary to process an enquiry, we will not be able to respond to it.

14. No automated decision-making

We do not use automated decision-making, including profiling, within the meaning of Art. 22 GDPR.

15. Data security

We use TLS encryption to protect the transmission of data between your browser and our website. You can recognise an encrypted connection by "https://" in your browser's address bar and the lock symbol. We also take appropriate technical and organisational measures to protect your data against loss, misuse and unauthorised access.

16. Your rights

Under the GDPR, you have the following rights with regard to your personal data:

• Right of access (Art. 15 GDPR): You can request information about whether and which personal data we process about you.
• Right to rectification (Art. 16 GDPR): You can request the correction of inaccurate or incomplete data.
• Right to erasure (Art. 17 GDPR): You can request the deletion of your data, unless statutory retention obligations or other legal grounds prevent this.
• Right to restriction of processing (Art. 18 GDPR): You can request that the processing of your data be restricted.
• Right to data portability (Art. 20 GDPR): You can request to receive data you have provided to us in a structured, commonly used and machine-readable format, or to have it transmitted to another controller.

To exercise your rights, please contact us at ….

Right to object (Art. 21 GDPR)

Where we process your personal data on the basis of Art. 6(1)(f) GDPR (legitimate interests), you have the right to object to this processing at any time on grounds relating to your particular situation. In that case, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

To exercise your right to object, an informal message to … is sufficient.

17. Right to lodge a complaint with a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), in particular in the EU Member State of your habitual residence, place of work or place of the alleged infringement. The supervisory authority responsible for us is:

Berliner Beauftragte für Datenschutz und Informationsfreiheit
(Berlin Commissioner for Data Protection and Freedom of Information)
Alt-Moabit 59–61
10555 Berlin
Germany
Email: …

18. Changes to this privacy policy

We will update this privacy policy whenever changes to our website, our services or the legal situation make this necessary. The version published on this website at the time of your visit applies.