Privacy policy

1. Controller

2. Scope

This policy applies to the public Vorrio project website. Vorrio itself is a self-hosted application. The operator of each third-party Vorrio installation is solely responsible for its data processing. Product-specific information is available in the product privacy documentation.

3. Provision and hosting

The project website is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, United States. When the website is requested, Vercel processes technically necessary connection and log data. This may include the IP address, timestamp, requested resource, referrer, browser and device information. Processing serves the secure, stable and error-free provision of the website and relies on Article 6(1)(f) GDPR.

Vercel processes data on our behalf under the applicable contractual and data-protection terms. Processing in the United States cannot be excluded. Vercel identifies the EU-US Data Privacy Framework and, where required, the EU Standard Contractual Clauses as transfer mechanisms. Retention depends on the period required for delivery, security, troubleshooting and legal or contractual obligations. Further information is available in Vercel's Privacy Notice and Data Processing Addendum.

4. Cookies, local storage and analytics

The current website does not set cookies or access information on the device through local storage or session storage. It does not create usage profiles or load analytics, advertising or tracking services. Fonts, scripts and images are served as local website files.

No consent under § 25(1) TDDDG is required for this implementation, so no cookie banner is provided. If a technology requiring consent is added later, it will only be loaded after valid consent and this policy will be updated.

5. External links

The website links to external services, in particular GitHub. A connection to the relevant provider is only established after a visitor follows such a link. The external provider is responsible for its processing. See the GitHub General Privacy Statement for more information.

6. Contact by email or phone

When you contact us, we process the information you provide to handle and answer your request. Article 6(1)(b) GDPR applies where your request concerns a contract or pre-contractual measures. In other cases, processing relies on Article 6(1)(f) GDPR; our legitimate interest is the appropriate handling of your request.

We delete the information once the request has been resolved, unless legal retention obligations or legitimate reasons require further storage.

7. Your rights

Subject to the applicable legal requirements, you have rights including access, rectification, erasure, restriction of processing, data portability and objection. To exercise these rights, email info@amturo.de.

You may also lodge a complaint with a data protection authority. Our competent authority is generally the Hessian Commissioner for Data Protection and Freedom of Information, Gustav-Stresemann-Ring 1, 65189 Wiesbaden, Germany.

8. Security and updates

TLS encryption is used for the website. We update this policy when hosting, services, law or processing activities change.