Privacy Notice

1. Controller

The controller responsible for processing personal data on this website is:

Further operator information is available in our Legal Notice.

2. Website hosting and delivery

This website is delivered using services provided by Netlify and Cloudflare. When you access it, technical information may be processed automatically, including:

• Your IP address
• Date and time of the request
• Requested page or resource and referring page
• Browser type and version and operating system
• HTTP response status
• Information relevant to detecting abuse or security incidents

This processing is necessary to deliver the website, maintain its stability, prevent abuse and protect it against attacks. The legal basis is our legitimate interest in providing a secure and reliable website under Article 6(1)(f) GDPR.

Netlify

The website is hosted using Netlify, Inc. Netlify may process technical request and device information while providing the hosting service. Netlify is based in the United States and states that it uses the EU–U.S. Data Privacy Framework and, where applicable, the European Commission's Standard Contractual Clauses for international transfers.

Basicrum uses Netlify's Pro plan. Netlify Observability and Function log history are available for up to seven days. The request-level fields available in Observability include status code and group, HTTP method, content type, cache status, user-agent category, function name, Edge Function name and block reason.

The website currently uses Netlify's system-generated Next.js Server Handler. No Edge Functions, Web Analytics, Real User Monitoring or external Log Drains are enabled.

More information is available in the Netlify Privacy Statement.

Cloudflare

Cloudflare is used for content delivery, network security, protection against malicious traffic and improving the availability of the website. Cloudflare may process IP addresses, request metadata and security information through its global network.

More information is available in the Cloudflare Privacy Policy.

Basicrum uses Cloudflare's Free plan. Its standard zone analytics dashboard provides aggregate statistics for the previous 24 hours, including request and bandwidth totals, cached and uncached traffic, top traffic countries or regions, SSL usage and blocked attacks. These statistics are generated as part of Cloudflare's proxy, content-delivery and security services.

Cloudflare's HTTP Logpull and Logs/Logpush services are not available for this Free-plan zone. Basicrum therefore does not retrieve or export request logs through those services, and no HTTP Logpull retention setting applies. Cloudflare may nevertheless retain operational and security information in its own systems in accordance with its privacy policy and contractual terms.

3. Contact form and email

You can contact us through the contact form. It currently collects:

• Full name
• Work email address
• Company website, if provided
• Message
• Technical submission information, such as IP address and time

We process this information to respond to your inquiry. Where your inquiry concerns a possible contract or service, the legal basis is Article 6(1)(b) GDPR. For general inquiries, the legal basis is our legitimate interest in receiving and responding to communications under Article 6(1)(f) GDPR.

Providing this information is voluntary. However, we may be unable to respond if you do not provide a valid contact method.

Web3Forms

The contact form is transmitted through Web3Forms and forwarded to our email account. Web3Forms states that its servers are in the US-East region and that it does not store form-submission content as part of its standard forwarding service. It may retain server logs containing personal information for up to two months.

More information is available in the Web3Forms FAQ.

Google Workspace

Form messages and direct emails are received and stored in the Google Workspace mailbox for tsto@basicrum.com. Replies are sent through Google Workspace. We intend to delete messages when an inquiry has been resolved and the information is no longer required, unless continued retention is required by law or is necessary to establish, exercise or defend legal claims.

More information is available in the Google Privacy Policy.

Basicrum uses Google Workspace Business Starter. Google's Cloud Data Processing Addendum has been accepted, and Google provides international-transfer safeguards through its EU–U.S. Data Privacy Framework certification and the Standard Contractual Clauses incorporated into the Addendum.

Google Vault is not licensed or enabled, and Gmail is configured not to delete inbox or archived messages automatically. Messages are deleted manually in accordance with the policy described above. Messages placed in Trash are permanently deleted by Gmail after 30 days.

4. Beta notification

You may provide your email address to request one update when the Basicrum beta is available. The request is transmitted through Web3Forms and forwarded to our Google Workspace mailbox. The one-time update will be sent manually from tsto@basicrum.com through Google Workspace. We will not use the address for a recurring newsletter or unrelated marketing.

We process the email address to provide the requested beta update. The legal basis is your consent under Article 6(1)(a) GDPR. You may withdraw that consent before the update is sent by contacting tsto@basicrum.com. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

After the beta update has been sent, the notification request and email address will be deleted manually. If you reply with a question, we will process and retain that correspondence as a contact inquiry as described above.

5. Cookies and similar technologies

We do not currently load advertising cookies, analytics cookies or the Basicrum RUM beacon on the marketing website. Cloudflare may use strictly necessary security technologies to distinguish legitimate traffic from malicious or automated traffic.

Where information is stored on or accessed from a visitor's device solely because it is strictly necessary to provide the requested website, the processing is based on § 25(2) TDDDG. Any related processing of personal data is based on Article 6(1)(f) GDPR.

Cloudflare Web Analytics is disabled, so Cloudflare does not inject its Web Analytics JavaScript snippet. Netlify Web Analytics and Real User Monitoring are also disabled. No other optional visitor analytics are currently configured.

If analytics, advertising or other non-essential technologies are introduced, this notice will be updated and any legally required consent will be obtained before those technologies are activated.

6. External links

The website contains links to external services such as GitHub, LinkedIn, X and the Basicrum demonstration and documentation websites. When you follow an external link, the operator of that service may process information about your visit. Its privacy notice applies. A normal external link does not transmit information to that service until you follow it, unless external content is embedded directly in the page.

7. Recipients of personal data

Personal data may be disclosed to service providers where necessary to operate the website and respond to communications. Current service providers include:

• Netlify, for website hosting
• Cloudflare, for content delivery and network security
• Web3Forms, for transmitting form submissions
• Google Workspace, for receiving, storing and sending email

Service providers acting on our behalf may process personal data only for the agreed purposes and subject to applicable data-protection requirements. Personal data may also be disclosed where required by law or necessary to establish, exercise or defend legal claims.

8. International data transfers

Some service providers are based outside the European Economic Area or operate infrastructure outside it. Where personal data is transferred to a country for which the European Commission has not issued an adequacy decision, the transfer must be protected through an applicable safeguard, such as the EU–U.S. Data Privacy Framework where the recipient is certified, the European Commission's Standard Contractual Clauses or another safeguard permitted under Chapter V GDPR.

Information about relevant safeguards may be requested using the contact details above.

Netlify, Cloudflare and Google may process personal data in the United States and other countries outside the European Economic Area. For transfers to participating US entities, Basicrum relies on the EU–U.S. Data Privacy Framework. Where that framework does not apply, the providers' applicable data processing agreements incorporate the European Commission's Standard Contractual Clauses. Information about these safeguards may be requested using the contact details above.

Form submissions transmitted through Web3Forms are processed on servers in the US-East region. Web3Forms is operated by Web3Creative, a business registered in India. Web3Forms has not provided or publicly documented a Data Processing Agreement or an international-transfer safeguard applicable to this processing. Visitors who do not wish to use Web3Forms may contact Basicrum directly at tsto@basicrum.com and should not submit sensitive information through the website forms.

9. Retention

We retain personal data only for as long as necessary for the purpose for which it was collected. The applicable period depends on the type of data:

• Technical information: Netlify Observability and Function logs are available to Basicrum for up to seven days. Basicrum does not retrieve or export Cloudflare request logs
• Contact inquiries: until the inquiry is resolved, subject to legal retention requirements and possible legal claims
• Beta-notification requests: until consent is withdrawn or the one-time beta update has been sent
• Security-incident information: until the incident has been investigated and related claims or obligations have expired

10. Your rights

Subject to the conditions of the GDPR, you may have the right to:

• Request access to your personal data
• Request correction of inaccurate or incomplete data
• Request deletion of your personal data
• Request restriction of processing
• Receive data you provided in a portable format
• Object to processing based on legitimate interests
• Withdraw consent at any time
• Lodge a complaint with a supervisory authority

To exercise your rights, contact tsto@basicrum.com.

11. Right to object

Where personal data is processed on the basis of Article 6(1)(f) GDPR, you have the right to object to that processing on grounds relating to your particular situation. We will stop processing the affected data unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing is necessary to establish, exercise or defend legal claims.

12. Right to complain

You have the right to lodge a complaint with a data-protection supervisory authority. The supervisory authority responsible for private-sector organisations in Bavaria is:

Website: www.lda.bayern.de

You may also contact the supervisory authority in the EU or EEA country where you live or work.

13. Automated decision-making

We do not use personal data collected through this website for automated decision-making or profiling that produces legal or similarly significant effects.

14. Changes to this Privacy Notice

We may update this Privacy Notice when the website, its providers or its data-processing activities change. The current version will always be available on this page.