Section 1 · GDPR
Privacy Policy
DevPulseSystems (“we”, “us”), controller for the processing described below, is committed to protecting personal data in accordance with Regulation (EU) 2016/679 (GDPR) and, where applicable, the California Consumer Privacy Act as amended by the CPRA (“CCPA”).
1.1 Categories of data we process
- Identity & contact data — name, business email, phone number, organization, postal address you submit via our contact requisition form or by email.
- Project data — technical requirements, budget band, timelines, and files you choose to share for scoping.
- Contract & billing data — company details, invoice history, and payment status required for accounting under German commercial and tax law.
- Technical data — IP address, browser type, device identifiers, and pages viewed, collected through essential server logs and, only with consent, analytics cookies.
1.2 Purposes and legal bases (GDPR Art. 6)
- Art. 6(1)(b) — contract: responding to inquiries, preparing quotations, delivering contracted development work, and supporting deliverables.
- Art. 6(1)(c) — legal obligation: retaining invoices and accounting records for the periods required by German §147 AO and §257 HGB (typically 6–10 years).
- Art. 6(1)(f) — legitimate interests: securing our services, preventing abuse, improving site reliability, and managing B2B client relationships — balanced against your rights.
- Art. 6(1)(a) — consent: non-essential cookies and optional marketing communications; withdrawable at any time without affecting prior processing.
1.3 Recipients and processors
Data is shared only with vetted processors under GDPR Art. 28 data-processing agreements: our EU-hosted infrastructure provider, transactional email delivery service, Stripe Payments Europe, Ltd. for payment processing, and professional advisers (tax, legal) bound by confidentiality. We do not sell personal information and do not engage in automated decision-making or profiling that produces legal effects.
1.4 International transfers
Primary storage is within the European Economic Area. Where a tool involves a transfer to a third country, we rely on EU Standard Contractual Clauses and supplementary technical measures, or on an adequacy decision where one exists.
1.5 Retention
- Inquiry records: up to 24 months after the last meaningful contact.
- Contracts and invoices: statutory retention (generally 6–10 years).
- Server logs: routinely rotated within 90 days unless needed for security investigation.
1.6 Your rights
You may request access, rectification, erasure, restriction, and portability of your data; object to processing based on legitimate interests; and withdraw consent at any time. You may lodge a complaint with a supervisory authority — in Berlin: the Berlin Commissioner for Data Protection and Freedom of Information. To exercise any right, email [email protected]. We respond within one month as required by GDPR Art. 12(3).
1.7 CCPA / CPRA notice (California residents)
If you are a California resident, you have the right to know which personal information we collect, the categories and specific pieces of information, the business purposes for collection, and the categories of third parties with whom it is shared; to request deletion; to correct inaccurate information; and to opt out of any “sale” or “sharing” of personal information. We do not sell or share personal information as those terms are defined under the CCPA/CPRA. We will not discriminate against you for exercising your rights. Requests may be submitted to [email protected] and will be verified before processing.