Privacy Policy

1. Data Controller and Contact Information

Responsible for the processing of personal data on this website (viewnamic.com) and the Viewnamic publishing platform within the meaning of Art. 4 No. 7 of the EU General Data Protection Regulation (GDPR) is:

Dreher, Weiß GbR (Viewnamic)
Start-up Campus OWL, Office SC 2 207, Ausblick 1, 33100 Paderborn, Germany
Represented by the partners: Felix Dreher & Daniel Weiß
VAT ID (USt-IdNr.): DE303700917
Email: info@viewnamic.com
Website: https://viewnamic.com

A Data Protection Officer has not been designated, as the statutory prerequisites pursuant to Art. 37(1) GDPR and Section 38 of the German Federal Data Protection Act (BDSG) are not applicable. For any inquiries regarding data protection and the assertion of your data subject rights, please contact the controller directly via email.

2. Hosting, Database and File Storage (IONOS)

Our website, web application, database and our email mailboxes (for example info@viewnamic.com) are hosted on servers provided by:

IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany.

Files uploaded to Viewnamic (PDF documents and their cover images, images, videos, audio files and 3D models) are stored in private IONOS Object Storage in Frankfurt am Main, Germany. Readers' browsers load these files directly from the Object Storage through time-limited links; in doing so, IONOS processes the IP address and the technical browser information required to deliver the files.

When you access our web services, your web browser automatically transmits connection data that is recorded in the web server log files of IONOS. This data includes: your IP address, browser type and version, operating system, referrer URL, the requested resource/file, and the precise timestamp of the server request. According to IONOS, the IP addresses in these log files are anonymised. IONOS keeps the log files for about eight weeks. In addition, our security software records sign-ins and failed sign-in attempts together with the IP address in order to detect and block attacks on user accounts; these entries are deleted after 90 days.

Purpose and Legal Basis: Processing of server log files is carried out to ensure the technical operation, stability, system integrity, and cybersecurity of our platform on the basis of Art. 6(1)(f) GDPR (Legitimate Interest in the secure and efficient provision of our online services).

Data Processing Agreement: We have concluded a Data Processing Agreement (DPA / Auftragsverarbeitungsvertrag) with IONOS SE pursuant to Art. 28 GDPR as part of the IONOS terms and conditions. IONOS processes this data in data centers in Germany.

3. Backups

To ensure business continuity, data integrity, and the ability to restore our services after technical failures pursuant to Art. 32(1)(c) GDPR, backups of our servers and database are created daily within the infrastructure of our hosting provider IONOS SE in Germany (see Section 2). Backups are not transferred to any other provider.

Backups may contain the data stored on the platform at the time of the backup, including account data and customer content. They are protected against unauthorized access. Backups are kept for about 14 days (a single database backup may be up to about three weeks old) and are then overwritten. Data deleted on the platform therefore remains in the backups until they are overwritten.

Purpose and Legal Basis: Art. 6(1)(f) GDPR (Legitimate Interest in maintaining effective disaster recovery mechanisms and fulfilling statutory data security mandates under Art. 32 GDPR).

4. Bot Protection and Anti-Abuse (Cloudflare Turnstile)

To protect our forms against malicious bot scripts, automated spam attacks, and credential stuffing, we use the bot-protection technology Cloudflare Turnstile provided by Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. Turnstile protects the sign-in, the registration, the password reset and the resending of the verification email, our contact and newsletter forms, and the PDF upload without an account ("Try it with your PDF", Section 9). It is loaded only together with these forms, not while you browse our website or read publications. We do not use Cloudflare's content delivery network (CDN) or any other Cloudflare service.

During the check, Cloudflare receives your IP address and technical information about your browser and device to verify human interaction without confronting you with distorted text or image-recognition puzzles. The data processed during verification is used solely for cyber-defense and spam prevention.

Legal Basis: Art. 6(1)(f) GDPR (Legitimate Interest in the protection of our web platform against abusive automated attacks) and Section 25(2) No. 2 TDDDG (strictly necessary for system security).

Data Transfer Safeguards: Data transfers to Cloudflare facilities in the USA are governed by the EU-U.S. Data Privacy Framework (DPF) as well as Cloudflare's standardized Data Processing Addendum incorporating EU Standard Contractual Clauses (SCCs).

5. Fonts, Scripts, Website Statistics and Help Center Videos (YouTube)

(1) No External Fonts or Third-Party Analytics: The fonts and scripts of our website and of the Viewnamic viewer are hosted on our own servers; the only exceptions are Cloudflare Turnstile, which is loaded together with the forms named in Section 4, and the YouTube player of the videos in our help center, which is loaded only after you click on a video (paragraph (3)). We do not use Google Fonts, Google Analytics or any other third-party analytics, advertising or tracking service.

(2) Website Statistics on Our Own Server: To understand which pages of our website are used, our server counts page views itself, without cookies, without scripts in your browser, and without storing your IP address or any identifier of your device. Only daily totals are kept: the address and language of the page, where the visit came from (the host name of the referring website, a known search engine or social network, or "direct"), campaign labels contained in the page address (utm_source, utm_campaign) and the device class (desktop, tablet or mobile) derived from the browser's user agent. In addition, we count how often previews are started and registrations, newsletter sign-ups and contact requests are submitted, without any personal data. Page views of our staff, of bots, and of visitors whose browser sends a Global Privacy Control or Do Not Track signal are not counted. The daily totals are deleted after 25 months.

Legal Basis: Art. 6(1)(f) GDPR (Legitimate Interest in improving our website). No information is stored on or read from your device.

(3) Videos in Our Help Center (YouTube): Some articles of our help center (viewnamic.com/help) contain tutorial videos that we have published on YouTube, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). The videos are embedded in two steps: until you click on a video, the article shows only a preview image that is stored on our own server, and your browser does not connect to YouTube or Google. A note below each video tells you this before you click.

Only when you click on a video is the YouTube player loaded, in YouTube's privacy-enhanced mode (www.youtube-nocookie.com). Your browser then connects to Google's servers, and Google receives your IP address, technical information about your browser and device, the address of the help article from which you started the video, and the time of access. When you play the video, Google may store information on your device or read it from your device (for example cookies or local storage in the player) and use the data for its own purposes, such as statistics, advertising and improving its services; if you are signed in to a Google account, Google can associate the video with your account. We have no influence on this processing; Google is responsible for it. Further information is available in Google's Privacy Policy at https://policies.google.com/privacy. After the start, our page only switches off YouTube's own subtitles in the player; we do not receive any data from the player.

Legal Basis: Art. 6(1)(a) GDPR (your consent, given by clicking on the video) and, for storing information on your device and reading it from your device, Section 25(1) TDDDG. You can withdraw your consent at any time with effect for the future by not starting any further videos and by deleting the data stored by YouTube in your browser; the player is loaded again only after a new click.

Data Transfer Safeguards: Google may also process the data in the USA. Google LLC is certified under the EU-U.S. Data Privacy Framework (DPF), on which such transfers are based (Art. 45 GDPR).

6. Inquiries, Appointment Scheduling (Calendly), and Newsletter

(1) Contact and Demonstration Inquiries: If you contact us via email or our contact form, we collect the submitted personal data (name, business email, company, and message content) strictly to process and reply to your inquiry. Messages sent through the contact form are delivered to our mailbox (info@viewnamic.com) via Brevo (Section 7(5)). We delete your inquiry and our correspondence about it once it has been dealt with, unless statutory retention obligations apply (for example to business letters under German commercial and tax law). Legal Basis: Art. 6(1)(a) GDPR (your consent given in the contact form), Art. 6(1)(b) GDPR (Pre-contractual measures) or Art. 6(1)(f) GDPR (Legitimate interest in responsive communication).

(2) Appointment Booking via Calendly Link: Our website contains external buttons/links leading to our scheduling portal on Calendly (Calendly LLC, 271 17th St NW, Atlanta, GA 30363, USA). When clicking this link, you leave our website and are redirected to Calendly's service. Calendly handles your booking data (name, email address, preferred meeting slot) under its own data privacy responsibility.

(3) Newsletter and Product Updates: If you subscribe to our newsletter, we process your email address, your first name if you provide it, and the page on which you subscribed. Our newsletter is sent via Brevo (Section 7(5)), which stores this data for us; the subscription becomes active only after you confirm it via a verified Double Opt-In procedure. You can unsubscribe at any time using the one-click unsubscribe link provided in every newsletter; your data is then no longer used for the newsletter. The newsletter is independent of a Viewnamic account: deleting an account does not end a newsletter subscription. Legal Basis: Art. 6(1)(a) GDPR.

7. Platform Account, Social Login, Team Members, Emails (Brevo), and Payments (Stripe)

(1) Platform Registration & Administration: To access Viewnamic, Customers register an administrative account. We process your contact details (name, email address, for business use the name of your company or organisation, and hashed password credentials) to administer the account and fulfill contractual services. At registration you state whether you use Viewnamic for your business or privately; we store this customer type together with the time you stated it, because prices, contract terms and your rights (for example the right of withdrawal of private customers) depend on it. We record which version of our Terms of Service and of this Privacy Policy you accepted and how your email address was verified. We also store the language (English or German) in which you last used Viewnamic, so that our emails reach you in that language. Login sessions are kept without storing your IP address or browser details. Registrations that are not confirmed via the verification email are deleted after 14 days. How an account ends and is deleted is described in Section 8. Legal Basis: Art. 6(1)(b) GDPR.

(2) Social Login / Single Sign-On (Google & Microsoft): Where offered, users may register or authenticate via third-party OAuth Single Sign-On providers ("Sign in with Google" by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, or "Sign in with Microsoft" by Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland). When utilizing social login, your browser connects directly to the authentication servers of the respective identity provider. The provider authenticates your identity and transmits your verified email address, name, and unique user identifier to Viewnamic to create or link your account; we store this link with your account. No passwords are exchanged. Google LLC and Microsoft Corporation are certified under the EU-U.S. Data Privacy Framework. Legal Basis: Art. 6(1)(b) GDPR (Contract execution) or Art. 6(1)(f) GDPR (Convenient and secure user authentication).

(3) Team Members and Invitations: Account owners can invite team members by email. We then process the invited person's email address, which we receive from the inviting account (Art. 14 GDPR), send the invitation, and process the data of the team member's own account as described in paragraph (1). Invitations are deleted 30 days after they expire or are withdrawn. When a team member is removed from an account, their login is deleted 30 days after the removal, together with their entries in the activity log, unless they belong to another Viewnamic account. Legal Basis: Art. 6(1)(b) GDPR and Art. 6(1)(f) GDPR (Legitimate interest of the account owner in working together).

(4) Activity Log: To support account owners and to keep the platform secure, important actions in an account (for example uploads, changes to publications and settings, and team changes) are recorded together with the acting user and the time. These entries are deleted after 12 months; the entries of a login that we delete together with an account or after its removal from a team are deleted with it (Section 8). Legal Basis: Art. 6(1)(f) GDPR.

(5) Emails (Brevo): Our emails are delivered via the email infrastructure of Brevo (Sendinblue GmbH, Köpenicker Str. 126, 10179 Berlin, Germany): email verification, password resets, one-time codes for securely shared documents (Section 11), notifications about securely shared documents to the team member who shared them or to the account owner, team invitations, the notices before an account is deleted and the confirmation of its deletion (Section 8), invoices for customers who pay by bank transfer, the contract confirmations of private customers and the confirmations of cancellations and withdrawals (Section 7(8)), the delivery of contact form messages (Section 6(1)) and our newsletter (Section 6(3)). We send our emails in English or German. We have concluded a Data Processing Agreement with Brevo pursuant to Art. 28 GDPR. Legal Basis: Art. 6(1)(b) GDPR and, for the newsletter, Art. 6(1)(a) GDPR.

(6) Payment Processing (Stripe): For electronic card and SEPA transactions, billing information is handled directly through the certified payment service provider Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Dublin 2, Ireland. When you subscribe to a plan, we transmit your email address, the name of your account, your billing address and, where provided, your VAT ID to Stripe, and for private customers that the order is a private customer’s order; payment details are entered directly at Stripe. Refunds after a withdrawal or a cancellation (Section 7(8)) are paid back through Stripe to the means of payment used. Stripe processes payment data as an independent controller; data may be transferred to Stripe, Inc. in the USA, which is certified under the EU-U.S. Data Privacy Framework. Viewnamic does not store complete credit card numbers. What happens to the customer record at Stripe when an account is deleted is described in Section 8(5). Legal Basis: Art. 6(1)(b) GDPR (Payment execution) and Art. 6(1)(c) GDPR (Statutory fiscal and accounting duties).

(7) Invoices and Accounting: Invoices and credit notes, with the billing address shown on them and their PDF document, are kept for eight (8) years after the end of the calendar year in which they were issued; payment and order records are kept for ten (10) years after the end of their calendar year (Section 147 of the German Fiscal Code (AO), Section 257 of the German Commercial Code (HGB) and Section 14b of the German VAT Act (UStG)). They are then deleted automatically. This also applies after an account has been deleted (Section 8). Legal Basis: Art. 6(1)(c) GDPR.

(8) Orders of Private Customers, Cancellations and Withdrawals: When a private customer orders the plan Single or High Five, we store the order with the plan, the price and the VAT it includes, the country of residence stated on the order page, the versions of the Terms of Service and of the withdrawal instructions that applied, the time of the order and of the conclusion of the contract and the end of the withdrawal period, and we send the contract confirmation with these documents as a PDF by email (Section 7(5)). Anyone can cancel a contract with the button "Cancel contracts here" or withdraw from it with the button "Withdraw contract" at the bottom of every page of our website, also without signing in. We then process the details entered – name, email address for the confirmation, the contract named or chosen and, for a cancellation, its kind, the reason for an extraordinary cancellation and the requested end – together with the time of receipt, the language of the page and, if you are signed in, your login and account. We send you the confirmation of receipt by email, carry out the declaration (end of the subscription at Stripe and, where due, a refund through Stripe to the means of payment used) and inform you of the outcome by email. Declarations that cannot be assigned to a contract automatically, for example those sent without signing in, are checked by us by hand; we may contact you by email for this. To protect the forms against abuse, the number of declarations per connection is limited; for this purpose we keep a keyed one-way hash of the IP address (not the IP address itself) for one hour. Cancellations and withdrawals belong to the order records and are kept for ten (10) years after the end of their calendar year (Section 7(7)). Legal Basis: Art. 6(1)(b) GDPR (performance and end of the contract), Art. 6(1)(c) GDPR (statutory duties: confirmation of cancellations and withdrawals under Sections 312k and 356a of the German Civil Code (BGB), retention obligations) and Art. 6(1)(f) GDPR (Legitimate interest in preventing abuse).

8. End of a Plan and Deletion of Your Account

(1) When a Plan Ends: When a paid plan ends (for example at the end of the paid period after a cancellation, or when the paid-through date of a plan paid by bank transfer passes), your publications remain available to readers for 14 more days while your account is read-only; afterwards, access to your account is paused. Access is paused at once when the free trial ends without a paid plan, when a renewal payment remains unpaid after the payment recovery period, when a registration for a paid plan is not paid, and when we pause access under our Terms of Service. While access is paused, your publications are not available to readers. You can still sign in, download your original files (PDF documents and media) and delete content, and the account owner can renew the plan or choose another.

(2) Automatic Deletion: If no paid plan is chosen, we delete the account completely 30 days after access was paused; after a paid plan, this is 44 days after its end. The account owner receives an email 14 days and 3 days before the deletion and a confirmation afterwards. We do not delete an account before the account owner has been notified of its date; if the notice could not be sent, the deletion date moves 14 days later. Renewing the plan, choosing a new one or settling an open payment before the date keeps the account. On request, we can agree on a later date with you.

(3) Deletion on Request: The account owner can delete the account in "Subscription & billing" ("Delete account") once no paid subscription is running (a cancelled subscription runs until the end of the paid period) and no plan managed by us (for example paid by bank transfer) is active; unpaid subscriptions are cancelled together with the account. The account owner can also ask us by email to delete the account. The deletion is carried out at once and cannot be undone; the account owner receives a confirmation by email.

(4) What Is Deleted: all profiles of the account with their publications, uploaded files and media, Reading Mode texts and accessibility texts, the reader statistics of its publications and of its public page, its public page with its design and collections, secure links and the data of their recipients, team invitations, the account's settings, plans, subscriptions and invoice address, and the logins of the account owner and of its team members, unless they belong to another Viewnamic account, together with their entries in the activity log.

(5) What Is Kept:

• Invoices and payment records: invoices, credit notes, payment and order records for their statutory retention periods (Section 7(7)); they continue to show the former account number.
• Customer record at Stripe: subscriptions that are still running or open are cancelled at Stripe. The customer record at Stripe (name, email address, payment method and the payments made) belongs to the payment records we have to keep; it is therefore kept and marked at Stripe as belonging to a deleted account. We delete it at Stripe once the retention period of the account's last payment has ended, i.e. ten (10) years after the end of the calendar year of that payment (Art. 17(3)(b) GDPR). Until then, we keep only the Stripe customer ID, the former account number, the date of the deletion and the date of the last payment. Stripe keeps its own records of the payments as an independent controller (Section 7(6)).
• Address of the public page: the web address of your public page stays reserved without any content, so that nobody else can take it over and old links cannot lead to other content. We keep only the address itself, without time limit.
• Record of the deletion: the former account number, when and how the account was deleted (with the user number of the person who triggered it), the number of logins deleted and what happened to the customer record at Stripe – without names or email addresses – so that we can prove the deletion. We keep the records of the last 100 deletions.
• Backups: deleted data remains in our backups until they are overwritten, i.e. for about 14 days and in a single database backup for up to about three weeks (Section 3).

Legal Basis: Art. 6(1)(b) GDPR (performance and end of the contract), Art. 6(1)(c) GDPR (statutory retention obligations) and Art. 6(1)(f) GDPR (Legitimate interest in proving deletions and in protecting former addresses against misuse).

9. Trying Viewnamic Without an Account ("Try it with your PDF")

On our website you can try Viewnamic with your own PDF without creating an account. For this purpose, we create a temporary preview access: a login cookie ensures that only your browser can open your preview. The PDF you upload is stored in our Object Storage (Section 2) and processed in the editor and viewer like any other publication. The preview, its temporary access and the uploaded PDF are deleted automatically 24 hours after you started it. If you decide to publish your preview, you register an account (Section 7), and the preview becomes part of your account; while your email address is being verified for this purpose, the deletion is postponed.

To prevent abuse, the number of previews per connection is limited. For this purpose, we store a keyed one-way hash of your IP address (not the IP address itself) for at most 24 hours. The upload is protected by Cloudflare Turnstile (Section 4).

Legal Basis: Art. 6(1)(b) GDPR (measures taken at your request before entering into a contract) and Art. 6(1)(f) GDPR (Legitimate interest in preventing abuse).

10. Processing of Customer Content (Data Processing on Behalf / Art. 28 GDPR)

Viewnamic allows commercial Customers to upload PDF files, images, videos, audio files, 3D models, click dummies and links, together with accessibility texts such as descriptions and transcripts. These materials may contain personal data, for example names, portraits or voices. To the extent Viewnamic hosts, converts, and delivers such content on behalf of our Customers, Viewnamic acts as a Data Processor pursuant to Art. 28 GDPR.

The respective Customer remains the sole Data Controller responsible for ensuring lawful processing grounds and copyright compliance. We conclude a standardized Data Processing Agreement (DPA / AVV) with our Customers. Customers can download their original files and delete publications and media in every state of their account until it is deleted (Section 8), so that they can meet the requests of the persons concerned.

11. Viewnamic Document Viewer, Reader Statistics and Secure Sharing

When readers access a published document via its individual project URL, a public overview page or a website embed, our web viewer displays the document and records reading statistics for the publisher:

• No Third-Party Advertising Trackers: The Viewnamic viewer does not contain commercial ad-network cookies, marketing tracking pixels, or cross-site profiling beacons. Readers are not tracked across unrelated websites.
• No Cookies for Statistics: The viewer stores nothing on the reader's device for its statistics. A random session identifier exists only in the browser's memory for the duration of the visit and groups the events of one reading session.
• Recorded per Reading Session: pages viewed and the active reading time on each page, the view modes and zoom used, interactions with videos, audio files, 3D models, click dummies and slideshows, link clicks including the link target, downloads, and clicks on the publisher's badges ("More from …", "powered by Viewnamic"). Browser family, operating system, device type and language are derived on our server from the request headers; no screen sizes or exact browser versions are recorded.
• Public Overview Pages: page views, the publications shown and opened, and the referring website reduced to its host name and path.
• No Recording: No statistics are recorded when the reader's browser sends a Global Privacy Control or Do Not Track signal, for previews without an account (Section 9), and for the example documents embedded on our own website.
• No Permanent IP Storage: IP addresses are processed in volatile memory solely for network transmission and server defense. Complete IP addresses are not stored in the statistics database.
• Secure Sharing: When a publisher shares a document securely with individual recipients, we process the recipient's email address, send one-time access codes by email (Section 7(5)), store these codes only as hashes and delete them one day after they expire, may show the recipient's email address as a watermark on the pages, and record each recipient's accesses for the publisher. The team member who shared the document, or otherwise the account owner, can be notified by email when a recipient requests a code or opens the document.
• Retention Period: Reading statistics are deleted automatically after twelve (12) months, and earlier together with the publication or the account (Section 8).

Legal Basis: Where Viewnamic provides these statistics and secure sharing for a B2B publisher, processing is carried out on the publisher's behalf under the DPA. Access to the reader's device is limited to technically necessary storage (for example access cookies for password-protected or securely shared documents) and to display settings of the Reading Mode that the reader chooses (Section 12), pursuant to Section 25(2) No. 2 TDDDG.

12. Cookies and Browser Storage

We use only cookies and browser storage that are necessary for the services you use or that store settings you choose. None of them is used for tracking. Videos in our help center do not set any cookies of ours; once you start a video, YouTube (Google) may store its own data in your browser (Section 5(3)).

Name	Purpose	Lifetime
wordpress_logged_in_*, wordpress_sec_*	Keeps you signed in, including the temporary access of a preview (Section 9)	Until the browser is closed (ended by the server after 2 days); 14 days after "Remember me", email verification, social login, an invitation or a password change
wordpress_test_cookie	Checks that cookies work when signing in	Session
wp-postpass_*	Access to password-protected blog posts (only if used)	10 days
wp-settings-*, wp-settings-time-*	Settings of the administration area (staff only)	1 year
vnm_auth_verify_browser	Continues the registration after the email verification	1 day
vnm_auth_selected_price	The plan chosen before registering	30 minutes
vnm_auth_social_bind	Security of the social login (Section 7(2))	15 minutes
vnm_pending_invite	Accepting a team invitation while signing in	1 hour
pvl_access_*	Access to a password-protected document	30 minutes
pvl_sec_*	Access to a securely shared document after the code check	Up to 1 hour
Local storage vnr-display, vnr-scale; session storage vnr-reading	Width, font, color theme and text size of the Reading Mode (only after you change them), and whether it is open	Until deleted / until the tab is closed
Session storage pvlNewPdfVersionReload	The time the viewer last reloaded a document because the publisher replaced its PDF, so that it reloads at most once a minute	Until the tab is closed
Local storage vnm-fx-motion	"Pause animations" on our website (only after you choose it)	Until deleted
Local storage imdeEditorTourSeen	The editor's introduction opens by itself only once	Until deleted
Local storage puaEmbedPreviewContainer	The example container entered for the preview in the embed window of the Workspace (signed-in users only)	Until deleted

13. Retention Periods

We store personal data only as long as necessary for the respective purpose. In particular:

• Reading statistics, public overview statistics and the activity log: 12 months.
• Website statistics (anonymous daily totals): 25 months.
• Registrations that are not confirmed: 14 days.
• Previews without an account: 24 hours after they were started (Section 9).
• Account data, publications and uploaded files: as long as the account exists; we delete them when you delete them, when you delete your account or ask us to delete it, and otherwise 30 days after access to the account was paused (Section 8).
• Deleted profiles: 30 days after deletion.
• Logins of removed team members: 30 days after the removal, unless they belong to another Viewnamic account.
• Team invitations: 30 days after they expire or are withdrawn.
• One-time access codes: 1 day after they expire.
• Records of the rate limits (keyed hashes, no IP addresses): 15 minutes to 24 hours (cancellation and withdrawal forms: 1 hour).
• Inquiries by email or contact form: until they have been dealt with, unless statutory retention obligations apply (Section 6(1)).
• Newsletter: until you unsubscribe.
• Invoices and credit notes: 8 years after the end of the calendar year in which they were issued; payment and order records, including orders of private customers and cancellations and withdrawals: 10 years after the end of their calendar year (Sections 7(7) and 7(8)).
• Customer record at Stripe after an account has been deleted: until the retention period of the account's last payment has ended (Section 8(5)).
• Records of deletions (without names or email addresses): the last 100 deletions; reserved addresses of public pages: without time limit (Section 8(5)).
• Web server log files at IONOS: about 8 weeks; sign-in records of our security software: 90 days (Section 2).
• Backups: about 14 days; a single database backup up to about three weeks (Section 3).

14. Recipients and Transfers to Third Countries

Besides IONOS SE (hosting, database, file storage and backups in Germany, Sections 2 and 3) and Brevo (emails, EU, Section 7(5)), the following recipients receive personal data as described above: Cloudflare, Inc. (bot protection, Section 4), Stripe (payments, Sections 7(6) and 8(5)) and, only if you use them, Google (social login, Section 7(2), and the videos in our help center after you start one, Section 5(3)), Microsoft (social login, Section 7(2)) and Calendly (Section 6(2)). Where data is transferred to the USA, the transfer is based on the EU-U.S. Data Privacy Framework (Art. 45 GDPR) and, where stated, on EU Standard Contractual Clauses (Art. 46(2)(c) GDPR).

15. Your Rights as a Data Subject

Under statutory provisions of the GDPR, you have the right to access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR), data portability (Art. 20 GDPR), and withdrawal of consent with effect for the future (Art. 7(3) GDPR). Account owners can also delete their account themselves (Section 8(3)).

Right to Object (Art. 21 GDPR): Where we process your personal data on the basis of legitimate interests (Art. 6(1)(f) GDPR), you have the right to object to this processing at any time on grounds relating to your particular situation. You may object to the use of your data for direct marketing at any time without giving reasons.

Provision of Data: The data marked as required in our forms is necessary to conclude and perform the contract or to answer your inquiry; without it, we cannot provide the respective service. You are not otherwise obliged to provide personal data.

No Automated Decision-Making: We do not use automated decision-making, including profiling, within the meaning of Art. 22 GDPR.

To exercise any of your rights, please submit an informal notification via email to: info@viewnamic.com.

16. Competent Supervisory Authority

You have the right to lodge a formal complaint with a data protection supervisory authority pursuant to Art. 77 GDPR if you consider that the processing of personal data relating to you infringes the GDPR. The supervisory authority with primary jurisdiction over Viewnamic is:

Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW)
Kavalleriestraße 2–4, 40213 Düsseldorf, Germany
Website: https://www.ldi.nrw.de

17. Data Security and Updates

(1) SSL/TLS Encryption: For security reasons and to protect the transmission of confidential information, our platform utilizes end-to-end TLS encryption (HTTPS). You can identify an encrypted connection by the "https://" protocol and the lock icon in your browser URL bar.

(2) Updates: We reserve the right to modify this Privacy Policy to ensure continuous alignment with statutory requirements and platform enhancements. The current version is always accessible at viewnamic.com/privacy.