Privacy Policy

General Information

The following gives a simple overview of what happens to your personal information when you visit our website. Personal information is any data with which you could be personally identified.

Data Collection on Our Website

Who is responsible for the data collection on this website?

The data collected on this website are processed by the website operator. The operator's contact details can be found in the website's required legal notice.

How do we collect your data?

Some data are collected when you provide it to us. This could, for example, be data you enter on a contact form, newsletter signup, or when requesting a demo or consultation.

What do we use your data for?

Part of the data is collected to ensure the proper functioning of the website. Other data can be used to analyze how visitors use the site through analytics tools like PostHog.

Data Protection

The operators of this website take the protection of your personal data very seriously. We treat your personal data as confidential and in accordance with the statutory data protection regulations and this privacy policy.

Information about the Responsible Party

The responsible party for data processing on this website is:

The responsible party is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data (names, email addresses, etc.).

Cookies and Cookie Consent

Our website uses cookies. Some of these cookies are essential for the functioning of our website, while others help us to improve this website and the user experience (analytics cookies).

We implement a cookie consent mechanism that allows you to choose which types of cookies you want to accept. Your consent choices are stored locally in your browser and respected throughout your visit.

Newsletter Signup

If you would like to receive our newsletter, we require a valid email address. We store this information in our database to send you our newsletter. We do not share this information with third parties without your permission. You can unsubscribe at any time.

Legal basis: Your consent according to Art. 6 (1) (a) GDPR.

Demo and Consultation Requests

When you request a demo or consultation through our forms, we collect:

• Name
• Email address
• Company information
• Position/Role
• Source of request

This information is used to contact you regarding your request and provide you with our services.

Legal basis: Performance of a contract or pre-contractual measures according to Art. 6 (1) (b) GDPR.

Job Applications

When you apply for positions through our careers page, we collect:

• Applicant name and email
• LinkedIn profile
• Job ID and title

This data is processed for the purpose of evaluating your application.

Legal basis: Performance of a contract or pre-contractual measures according to Art. 6 (1) (b) GDPR.

PostHog Analytics

We use PostHog for website analytics. PostHog helps us understand how visitors interact with our website by collecting anonymous usage data.

Data collected by PostHog includes:

• Page views and navigation patterns
• User interactions (clicks, form submissions)
• Session recordings (with input masking for sensitive data)
• Device and browser information
• Anonymous user identifiers

Data processing: PostHog data is processed on servers in the EU (eu.posthog.com). PostHog is GDPR compliant and provides appropriate safeguards for personal data.

Legal basis: Your consent according to Art. 6 (1) (a) GDPR. You can withdraw your consent at any time through our cookie settings.

Data retention: Analytics data is retained according to PostHog's retention policies. Anonymous user sessions expire after a reasonable period of inactivity.

Under the General Data Protection Regulation (GDPR), you have the following rights:

• Right of Access (Art. 15 GDPR): You have the right to request copies of your personal data.
• Right to Rectification (Art. 16 GDPR): You have the right to request that we correct any information you believe is inaccurate or complete information you believe is incomplete.
• Right to Erasure (Art. 17 GDPR): You have the right to request that we erase your personal data, under certain conditions.
• Right to Restrict Processing (Art. 18 GDPR): You have the right to request that we restrict the processing of your personal data, under certain conditions.
• Right to Object to Processing (Art. 21 GDPR): You have the right to object to our processing of your personal data, under certain conditions.
• Right to Data Portability (Art. 20 GDPR): You have the right to request that we transfer the data that we have collected to another organization, or directly to you, under certain conditions.
• Right to Withdraw Consent: Where processing is based on consent, you can withdraw your consent at any time.

To exercise any of these rights, please contact us at hey@spreehavel.com.

Right to lodge a complaint: You have the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data violates the GDPR.

We will only retain your personal information for as long as necessary to fulfill the purposes for which we collected it, including for the purposes of satisfying any legal, accounting, or reporting requirements.

Specific retention periods:

• Newsletter subscriptions: Until you unsubscribe
• Demo and consultation requests: 2 years or until you request deletion
• Job applications: 6 months after the application process
• Analytics data: According to PostHog's retention policy

When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymize it.

Supabase

We use Supabase for data storage and processing. Supabase is GDPR compliant and provides appropriate safeguards for your personal data. Data is stored on servers within the EU. For more information, please visit Supabase's privacy policy.

PostHog

PostHog is our analytics provider. They are GDPR compliant and data is processed on EU servers. PostHog provides tools for data subject requests and privacy compliance. For more information, visit PostHog's privacy policy.

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. This includes:

• Encryption of data in transit and at rest
• Regular security assessments
• Access controls and authentication
• Staff training on data protection

Our services primarily use EU-based infrastructure. Where data is transferred outside the EU, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions by the European Commission.

If you have any questions about this privacy policy or our data processing practices, please contact us at: