Privacy Policy

Controller

Daniel Deuscher, Landstraße 17/1, 72141 Walddorfhäslach, Germany. For privacy requests, contact [email protected].

Scope

This notice covers the Cardicus website and early-access waitlist. The application is not open for registration or payment. This website does not collect study material or process a Pro subscription.

Website delivery and security

When you visit, our hosting and delivery providers process technical connection data, including your IP address, request time, requested address and browser information, to deliver and protect the website. Our legitimate interest is a reliable, secure website (Article 6(1)(f) GDPR).

When you submit the waitlist form, your IP address is also forwarded to our API for temporary abuse prevention. The application uses an in-memory hash for rate limiting; it does not add the IP to your waitlist record. Hosting-provider processing is separate from that limited application record.

Waitlist

We store your email address, registration time, registration source and the version of the permission text shown to you. We also record the signup receipt’s sending status. When you later confirm your address, we record that confirmation. We use these details to manage your request, send the signup receipt, establish permission and send one opening email after confirmation. The legal basis is your consent (Article 6(1)(a) GDPR). We do not use this permission for a newsletter.

You choose whether to provide your address. Without it, you can still browse the website but cannot join the waitlist. Withdraw your consent at any time by emailing [email protected]. Withdrawal does not affect the lawfulness of processing before withdrawal.

Retention and deletion

Unconfirmed registrations are kept until the early-access invitation or withdrawal of consent, for no more than 12 months from registration. We remove entries earlier if you withdraw consent or we abandon the waitlist. Confirmed registrations are removed within 30 days after the opening email.

Technical connection and security records follow the hosting providers’ retention terms. Backup copies follow their separate rotation. Removal requests also apply when data is restored from a backup.

Contact

If you email us, we process your address, message and the details you choose to include to respond. The basis is our legitimate interest in handling inquiries (Article 6(1)(f) GDPR), or Article 6(1)(b) where your request concerns a contract or steps you ask us to take before a contract. Contact mail is handled through mailbox.org.

We keep correspondence while handling your inquiry. It may be retained afterwards where required by law or necessary for the establishment, exercise or defence of legal claims.

Service providers and transfers

Hosting and delivery can involve processing outside the European Economic Area. The providers’ data-processing terms describe processing locations and transfer safeguards, including EU Standard Contractual Clauses where applicable. Contact us if you want further information or a copy of relevant safeguards.

Browser storage

We do not use the waitlist to track your browsing or build advertising profiles. Joining the waitlist does not create a learner account.

Your rights

Subject to the legal conditions, you can request access, correction, erasure, restriction and portability, and object to processing based on legitimate interests. You can also withdraw your consent. Contact [email protected]. You may complain to a supervisory authority, including the LfDI Baden-Württemberg, or the authority where you live or work. We do not use the waitlist for automated decisions with legal or similarly significant effects.

Back to Cardicus