Privacy Policy (GDPR & CCPA)
1.1 Controller. The data controller for this website is DevCoreNetwork, registered at 48159 Kristiansandstrasse 123 B Münster, Germany. You can reach our privacy team at [email protected].
1.2 Data we collect. When you submit an inquiry form, email us, or call, we process: your name, email address, phone number (optional), company name, project details, and any information you voluntarily include. We also collect technical data such as IP address, browser type, and pages visited via server logs.
1.3 Purpose and legal basis. We process personal data to respond to inquiries (Art. 6(1)(b) GDPR — pre-contractual measures), to perform contracts (Art. 6(1)(b)), to satisfy legal accounting obligations (Art. 6(1)(c)), and — only with your consent — to send project updates (Art. 6(1)(a)). Server logs are processed for security and stability under our legitimate interest (Art. 6(1)(f)).
1.4 Retention. Inquiry data is retained for 24 months after the last contact. Contractual and invoice records are retained for 10 years as required by German commercial and tax law (§147 AO, §257 HGB).
1.5 Recipients. Data is processed by DevCoreNetwork staff and, where strictly necessary, by processors under Art. 28 GDPR data-processing agreements — including our EU-hosted email provider, hosting infrastructure, and Stripe for payment processing. We do not sell or rent personal data.
1.6 International transfers. Where a processor operates outside the EEA, transfers rely on EU Standard Contractual Clauses or an adequacy decision, supplemented by technical and organizational safeguards.
1.7 Your rights. Under GDPR you have the rights of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20), and objection (Art. 21). You may withdraw consent at any time without affecting prior processing. You also have the right to lodge a complaint with a supervisory authority — for us, the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen.
1.8 CCPA notice (California residents). We do not sell or share personal information as those terms are defined under the CCPA/CPRA. You may request access to, deletion of, or a copy of personal information we have collected about you, and may designate an authorized agent to do so, by emailing [email protected]. We will not discriminate against you for exercising these rights.
1.9 Automated decisions. We do not engage in profiling or solely automated decision-making that produces legal or similarly significant effects.