Privacy Policy

This is an English translation for convenience. The German version (“Datenschutzerklärung”) is the legally binding version.

1. Overview

Protecting your personal data is important to us. This policy explains what data we process when you visit this website (apzura.com), for what purpose and on what legal basis.

We process personal data in particular when you write to us via the contact form or by email, and in the form of technically necessary server log files. Fonts are loaded locally from our server; no external CDNs or font services are used.

2. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

Email: support@apzura.com

3. Hosting and Server Log Files

This website is hosted by Vercel Inc., 440 N Barranca Avenue #4133, Covina, CA 91723, USA. When you visit the website, Vercel, as our processor, processes technically necessary access data (server log files), in particular:

• IP address of the requesting device
• date and time of access
• page or file accessed and amount of data transferred
• referrer URL (the previously visited page)
• browser type and operating system used

This data is necessary to deliver the website, to ensure security and stability and to defend against attacks. The legal basis is our legitimate interest in secure and functional operation (Art. 6(1)(f) GDPR). For transfers to the USA, see the section “Transfer to Third Countries”.

4. Contacting Us (Contact Form and Email)

If you contact us via the contact form or by email, we process the data you provide in order to handle your inquiry. For the contact form, this includes in particular:

• name
• email address
• phone number, if you provide it
• content of your message
• what your inquiry is about: a new project, improving something existing or something else

Your name, email address, message and what your inquiry is about are required. Without this information, we cannot handle your inquiry. The phone number is optional; we only use it to call you to discuss your inquiry.

The legal basis is the performance of pre-contractual measures or of a contract (Art. 6(1)(b) GDPR), insofar as your inquiry is aimed at concluding or preparing a contract; otherwise, it is our legitimate interest in responding to inquiries (Art. 6(1)(f) GDPR).

Messages sent via the form are delivered to us through the service provider Resend (Plus Five Five, Inc., USA). Form messages and emails are received and stored in our Microsoft 365 mailbox, which we obtain through GoDaddy; see the sections “Recipients and Third-Party Providers” and “Transfer to Third Countries”. We store the inquiry data until your request has been fully dealt with, unless statutory retention obligations require us to keep it longer.

5. Cookies and Consent

We store your cookie choice in your browser’s local storage (localStorage) so that the banner does not reappear on every visit. This is technically necessary (Section 25(2) no. 2 TDDDG). We only set statistics cookies if you have consented in the cookie banner.

On your first visit, we ask for your consent. You can allow or reject individual categories and change or withdraw your choice at any time with effect for the future via the “Cookie settings” link at the bottom of every page. The legal basis for consent-requiring technologies is your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG).

For Google services, we use Google Consent Mode v2. No Google tags are loaded and no statistics cookies are set until you give your consent.

6. Google Analytics 4

Once you have given your consent, we use Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics uses cookies and similar identifiers to analyze website usage statistically (e.g. pages visited, time spent on the site, approximate location, device used).

Google Analytics 4 does not store IP addresses; they are only used briefly to determine an approximate location and are then discarded. We do not combine this data with other data sources. The usage data collected is automatically deleted once the retention period set in Google Analytics has expired (at most 14 months).

The legal basis is your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG), which you can withdraw at any time with effect for the future. A transfer of data to Google LLC in the USA is possible; see the section “Transfer to Third Countries”.

7. Previews of Other Websites

When you follow a link to fishfy.app or lurejunks.de, we first show you a notice with a live preview of that website. The preview is loaded directly from the respective website’s server. For technical reasons, your browser transmits data such as your IP address, date and time, the page you visited, as well as your browser type and operating system to the website operator. We do not include the address of our site as a referrer.

fishfy.app is operated by us and hosted by Vercel. lurejunks.de is the responsibility of Lurejunks GmbH, Hasenpfuhlstr. 38c, 67346 Speyer, and is hosted by ALL-INKL.COM (Germany). You can only scroll through the preview; links and input fields within it are disabled. The respective website’s privacy policy applies to how it processes your data. To the best of our knowledge, neither website sets cookies that require consent when loading the preview; fishfy.app does not run analytics in the preview.

The legal basis for this is our legitimate interest in showing you where a link leads before you leave our website (Art. 6(1)(f) GDPR). Other links, such as those to the App Store, open without a preview and only when you click on them.

8. Recipients and Third-Party Providers

We use the following service providers as processors for the operation of the website:

• Vercel Inc. (based in the USA): hosting and delivery of the website. Legal basis: legitimate interest; data processing agreement; EU-U.S. Data Privacy Framework and standard contractual clauses.
• Resend (Plus Five Five, Inc., based in the USA): technical delivery of messages sent via the contact form. Legal basis: pre-contractual measures or legitimate interest; data processing agreement; EU-U.S. Data Privacy Framework and standard contractual clauses.
• Microsoft 365, obtained through GoDaddy (Microsoft Ireland Operations Limited, Ireland, together with Microsoft Corporation, USA, and GoDaddy Operating Company, LLC, USA): mailbox for support@apzura.com, i.e. receipt and storage of incoming emails, including messages sent via the contact form. Legal basis: pre-contractual measures or legitimate interest; data processing agreement; EU-U.S. Data Privacy Framework and standard contractual clauses.
• Google Ireland Limited (Google Analytics): based in Ireland; transfer to Google LLC (USA) possible. Function: statistical audience measurement. Legal basis: consent; EU-U.S. Data Privacy Framework and standard contractual clauses.

Beyond this, we only disclose your data if we are legally required to do so.

9. Transfer to Third Countries

Vercel and Resend process data in the USA. Data may also be transferred to the USA in connection with the email mailbox (Microsoft 365 via GoDaddy). Vercel, Resend (Plus Five Five, Inc.), Microsoft Corporation and GoDaddy Operating Company, LLC are certified under the EU-U.S. Data Privacy Framework. Transfers to these companies are therefore covered by the European Commission’s adequacy decision on the EU-U.S. Data Privacy Framework (Art. 45 GDPR); in addition, standard contractual clauses and data processing agreements are in place.

When using Google services (Google Analytics), data may be transferred to Google LLC in the USA. Google is certified under the EU-U.S. Data Privacy Framework; standard contractual clauses are additionally in place. This processing only takes place with your consent.

10. Retention Period

• Server log files: generally for a short period for security and stability purposes (usually up to 30 days), unless a security incident requires longer retention.
• Contact requests: until your request has been fully dealt with and any statutory retention periods have expired.

11. Your Rights

Under the GDPR, you have the following rights:

• access to the data stored about you (Art. 15)
• rectification (Art. 16)
• erasure (Art. 17)
• restriction of processing (Art. 18)
• data portability (Art. 20)
• objection to processing (Art. 21)
• withdrawal of consent with effect for the future (Art. 7(3))
• lodging a complaint with a supervisory authority (Art. 77)

To exercise your rights or if you have questions about data protection, you can reach us at support@apzura.com. The supervisory authority responsible for us is the State Commissioner for Data Protection and Freedom of Information of Rhineland-Palatinate (Rheinland-Pfalz).

12. Right to Object (Art. 21 GDPR)

Where we process your data on the basis of our legitimate interest (Art. 6(1)(f) GDPR), you have the right to object to this processing at any time on grounds relating to your particular situation. We will then no longer process your data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing serves the establishment, exercise or defense of legal claims.

You can send your objection informally to support@apzura.com.

13. Data Security

This website and the transmission of your form data are always encrypted via TLS (recognizable by “https://” and the padlock icon in your browser’s address bar).

14. Changes to This Policy

We update this privacy policy when the legal situation or our processing changes (e.g. when introducing new features or services). The version published on this page applies; you can find the current date at the beginning of this policy.