Privacy notice

Draft — to be completed and reviewed by a legal advisor.

What this platform stores

This is an internal team platform. It processes personal data of employees/collaborators (name, work e-mail, timezone, login history, activity log) and of business contacts entered by the teams (influencers, stakeholders, investors, community members — names, contact details, cooperation notes).

Legal basis & purpose

Data is processed for the operation of internal collaboration (legitimate interest / contract performance) and for managing business relationships (legitimate interest). No data is sold or shared with third parties beyond the hosting infrastructure.

Your rights

You can export your own data as JSON from your profile at any time. Correction happens directly in your profile. For deletion of your account and associated data, contact an administrator — deleting a user removes their personal records (cascading delete). Business contacts can request deletion via the responsible department, which removes the CRM entry and its snapshots.

Security

Passwords are stored as bcrypt hashes, secrets encrypted (AES-256-GCM), access is role-based and enforced server-side, security-relevant actions are audit-logged, and daily database backups are kept for 14 days.

Controller

[Company name, address and contact of the data protection contact — fill in before go-live.]