Privacy

Privacy, clearly explained.

This page explains which data urcase processes, why it is processed and which rights you have.

Last updated: 15 August 2026

1. Data controller

urcase is a venture of Visipass UG (haftungsbeschränkt).

2. Processing principles

We process only the information required for the relevant purpose. We do not sell personal data. The enquiry form does not request special categories of personal data such as health data; please do not submit such information there.

3. Website delivery and technical security

When a website is accessed, the delivery infrastructure processes technically necessary connection data, in particular the IP address, time, destination address, amount of data transferred and browser information. This is required for secure and stable delivery. The legal basis is Article 6(1)(f) GDPR; our legitimate interest is secure and reliable operation.

The application prepared for the enquiry endpoint does not keep a persistent access log containing full IP addresses. To prevent excessive requests, the IP address is temporarily converted into a non-reversible verification value and used only in memory.

4. Project and contact enquiries

Once the enquiry endpoint is activated, we process your name, company, business email address, workflow description, problem category, frequency, systems involved, desired outcome, language and limited attribution data such as landing page, referring domain and any UTM campaign parameters.

The purpose is to assess and respond to your enquiry and to prepare a potential project. Where you are the prospective contracting party, processing is based on Article 6(1)(b) GDPR. Where you act for a company or make another business enquiry, it is based on Article 6(1)(f) GDPR; our legitimate interest is handling genuine B2B enquiries addressed to us.

Information in the technical intake store is deleted after no more than 30 days. If this results in a contract or a business relationship subject to retention obligations, required parts of the correspondence may then be stored separately for the applicable commercial and tax retention periods.

5. Automated preliminary qualification

The information may be pre-structured using fixed criteria, for example completeness, frequency and identifiable risks. This is used solely for internal preparation. No decision with legal or similarly significant effects is made solely by automated means. A responsible person decides on any response, proposal and engagement.

6. Consent management and optional audience analytics

The self-hosted Klaro consent manager stores your selection in an essential cookie. Google Analytics 4 is loaded only if a measurement ID is configured and you consent to optional audience analytics. No Google Analytics scripts are loaded without consent. You can change your choice at any time via “Cookie settings” in the footer.

If Google Analytics is activated, processing is based on your consent under Article 6(1)(a) GDPR and Section 25(1) TDDDG. Provider, transfer and deletion details will be added to this policy before activation.

7. Recipients and processors

Within Visipass UG, access is limited to people handling an enquiry or responsible for secure operation. External service providers receive data only where required for hosting or operation and subject to an appropriate contractual basis. A final recipient list will be published before the enquiry endpoint is activated.

8. Your rights

Subject to the GDPR, you have rights including access, rectification, erasure, restriction of processing, data portability and objection. You may withdraw consent at any time with future effect. To exercise your rights, contact us using the email address above.

You may also lodge a complaint with a data protection supervisory authority. The authority responsible for our registered office is:

9. Changes to this policy

We update this policy when data flows, service providers or legal requirements change. The version published here with the stated update date applies.