Privacy

Privacy, clearly explained.

This page explains which data urcase processes, why it is processed and which rights you have.

Last updated: 21 September 2026

1. Data controller

urcase is a venture of Visipass UG (haftungsbeschränkt).

2. Processing principles

We process only the information required for the relevant purpose. We do not sell personal data. The enquiry form does not request special categories of personal data such as health data; please do not submit such information there.

3. Website delivery and technical security

When a website is accessed, the delivery infrastructure processes technically necessary connection data, in particular the IP address, time, destination address, amount of data transferred and browser information. This is required for secure and stable delivery. The legal basis is Article 6(1)(f) GDPR; our legitimate interest is secure and reliable operation.

The website and form handler run on Cloudflare (Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA). Cloudflare processes connection data and, on submission, the form contents. Its infrastructure is distributed internationally. To limit abusive requests we use a daily changing value derived from the IP address. Our sending function does not write form contents to application logs.

Cloudflare privacy policy

We use Cloudflare Turnstile to protect the contact form from automated abuse. Cloudflare processes technical browser and connection data and creates a short-lived verification token. No form email is sent without successful verification.

4. Project and contact enquiries

When you submit the form, we process your name, company, business email address, workflow description, problem category, frequency, systems involved, desired outcome, language.

The purpose is to assess and respond to your enquiry and to prepare a potential project. Where you are the prospective contracting party, processing is based on Article 6(1)(b) GDPR. Where you act for a company or make another business enquiry, it is based on Article 6(1)(f) GDPR; our legitimate interest is handling genuine B2B enquiries addressed to us.

Your enquiry is sent by email to hello@urcase.de and recorded in our self-hosted Chatwoot for handling. There is no additional form database. We retain correspondence as long as needed to handle it; statutory retention requirements remain applicable.

5. Handling your enquiry

The form does not calculate an automated score. A responsible person decides on the response, proposal and engagement.

6. Consent management and optional audience analytics

The self-hosted Klaro consent manager stores your selection in an essential cookie. Google Analytics 4 is loaded only if you consent to optional audience analytics. No Google Analytics scripts are loaded without consent. You can change your choice at any time via “Cookie settings” in the footer.

Google Analytics 4 measures page views, traffic sources, contact clicks and successful form submissions. The provider is Google Ireland Limited, Ireland. Data includes cookie identifiers, device and browser information, and usage events. Names, email addresses and free-text enquiry fields are not sent as analytics events. Processing is based on your consent under Article 6(1)(a) GDPR and Section 25(1) TDDDG. Google LLC may process data in the United States; Google describes its transfer mechanisms in the information linked below. Our analytics cookies are limited to 60 days; user and event data retention in this property is two months. Aggregated reports may persist longer. Our website does not enable advertising personalization or Google Signals.

Google: Privacy · Data transfers

7. Recipients and service providers

Within Visipass UG, access is given to people handling your enquiry or responsible for technical operations. We use Cloudflare for the website and form. The email mailbox is hosted by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. We operate Chatwoot ourselves to handle this correspondence.

Hetzner privacy policy

8. Your rights

Subject to the GDPR, you have rights including access, rectification, erasure, restriction of processing, data portability and objection. You may withdraw consent at any time with future effect. To exercise your rights, contact us using the email address above.

You may also lodge a complaint with a data protection supervisory authority. The authority responsible for our registered office is:

9. Changes to this policy

We update this policy when data flows, service providers or legal requirements change. The version published here with the stated update date applies.