Privacy Policy
Last updated: 18 July 2026
English draft pending legal review.
1. Controller
yawusa UG (haftungsbeschränkt)
Schliemannstraße 23, 10437 Berlin, Germany
Email: info@agentifizierung.de
2. Hosting and server logs
The public website is served via Vercel Inc. When you access it, technical logs may process in particular your IP address, timestamp, requested resource, referrer, and browser and device information. Vercel is a US provider; processing in or transfers to third countries cannot be excluded. The legal basis is Art. 6 (1) (f) GDPR together with the data protection safeguards agreed with the provider.
The protected customer portal and the tender index run on a separate VPS in Germany. Technical access and error logs are processed there for security, troubleshooting and stability. Logs are retained only as long as required for these purposes or for legal evidence.
3. Contact and pilot enquiries
When you submit a contact or pilot enquiry, we process the contact, company and service details you enter in order to handle the enquiry and prepare a contract, Art. 6 (1) (b) GDPR. Enquiries are transmitted via Resend and may additionally arrive in our Slack workspace. Resend and Slack are US providers; data may be transferred to third countries subject to appropriate safeguards, in particular EU standard contractual clauses. The public form does not create a customer account or any publicly accessible pilot link.
4. Customer accounts and magic links
For approved pilot and customer accounts we process the business email address, organisation and role, search profiles, settings, and login, session and security events. Magic links are short-lived and single-use; tokens and sessions are stored as hashes only. Service emails are sent via Resend. Processing serves contract performance and system security, Art. 6 (1) (b) and (f) GDPR.
5. Search profiles, tenders and documents
In the customer portal you can store service profiles, regions, references, prequalification details, go/no-go rules, internal notes and decisions. Uploaded GAEB files are processed for the requested analysis; permanent storage of the original file is not intended. Please do not upload personal or confidential data that is not required.
6. Email digests
Match digests are sent only to approved pilot users and configured recipients. Frequency and recipients can be changed in the customer account. Service digests are part of performing the pilot or customer contract and are not a general newsletter subscription.
7. Payments
Online checkout is currently not enabled. If activated later, payments will be processed by Stripe Payments Europe Ltd. We do not receive full card or bank details, only the references and status information required for contract, plan, payment and invoice access. These notes will be updated before activation where required.
8. Web analytics (Plausible)
The public website uses Plausible Analytics, a privacy-friendly web analytics tool, loaded from our own instance at analytics.polymarkt.de. Plausible works without cookies and without persistent identifiers; usage data (such as page views, referrer, browser and country derived from a transiently processed IP address) is stored in aggregated form only and is not used to identify individual visitors. The legal basis is our legitimate interest in reach measurement, Art. 6 (1) (f) GDPR.
9. External sources and links
The platform links to public procurement portals and other external websites. The privacy policies of those providers apply once you open such a link. Apart from the analytics script described above, the public website embeds no external fonts or third-party scripts.
10. Retention and deletion
We store personal data only as long as needed for the enquiry, pilot, contract, system security or statutory retention obligations. Deletion requests for a customer account are reviewed and then implemented in the affected production, log and backup systems within the applicable periods.
11. Your rights
Subject to the statutory conditions, you have the rights of access, rectification, erasure, restriction, data portability and objection. Consent, once given, can be withdrawn with effect for the future. You also have the right to lodge a complaint with a competent data protection supervisory authority. Please direct requests to the contact address above.