AUTOMACER

Legal

Privacy Policy

This notice explains, in concise form, how personal data is handled when you visit or use Automacer.

Effective: 21 July 2026

1. Controller

Kalman Control UG (haftungsbeschränkt), Kastanienstraße 5, 47269 Duisburg, Germany. Privacy requests: info@automacer.com.

2. Data and purposes

We process account and contact details, profile and company information, project posts, applications, messages, forum questions and answers, follows, helpful votes, reports, uploaded profile media or documents, verification information, email-notification preferences, consent records, campaign delivery events, and technical security logs.

The purposes are to create and secure accounts, provide profiles and marketplace functions, enable introductions and communication, notify searchable specialists about closely matching published projects, send Automacer updates or advertising only where the relevant consent is active, verify accounts, prevent abuse, answer requests, and comply with legal obligations.

3. Legal bases and email choices

Core account, marketplace and closely matched project-opportunity processing is necessary to perform the user agreement or take requested pre-contractual steps (Art. 6(1)(b) GDPR) and may also rely on the legitimate interest in enabling relevant professional introductions (Art. 6(1)(f)). Users can disable project-opportunity emails at any time without hiding their profile. Security, fraud prevention, platform improvement and the defence of legal claims rely on legitimate interests (Art. 6(1)(f)). Statutory retention or disclosure relies on legal obligations (Art. 6(1)(c)).

Automacer news and platform updates, and events, offers or partner promotions, are separate optional categories. They are disabled by default and sent under Art. 6(1)(a) GDPR only after the user selects the relevant category. Consent may be withdrawn for the future at any time in Account Settings or through the unsubscribe link included in every marketing email. Withdrawing marketing consent does not disable essential account or security messages.

4. Public profiles, forum and other users

Profile and company information is public only where the relevant visibility and verification conditions are met. Forum questions, answers, selected technical subjects, contribution dates and the contributor's public display name, account type and verification badge are visible to everyone. Email addresses are never used as a public forum-name fallback or disclosed to other outreach recipients.

Users choose whether email or phone details are shown elsewhere. Project owners, applicants and conversation participants receive the information needed for their interaction. Do not upload confidential plant data, credentials, undisclosed vulnerabilities, trade secrets or third-party personal data without authority.

5. Service providers and transfers

Automacer uses Supabase for database, authentication, storage and serverless functions, Vercel for hosting and delivery, and Resend for transactional, project-opportunity and consent-based broadcast email delivery. For marketing broadcasts, Resend also processes the subscription state and delivery events such as delivery, bounce, spam complaint, failure, opening or link click when those events are made available. Signed provider events are used to update campaign statistics and to suppress further marketing after an unsubscribe, bounce, complaint or provider suppression.

These providers process data on our instructions. Processing may involve countries outside the EEA; where required, recognised safeguards such as adequacy decisions or standard contractual clauses are used. Provider information: Supabase privacy · Vercel privacy · Resend privacy

6. Retention and security

Account and marketplace data is generally kept while the account or relevant relationship remains active. Project-outreach and marketing campaign records are retained for delivery control, duplicate prevention, preference compliance, consent evidence and accountability, without exposing recipient lists publicly. Data is deleted or anonymised when no longer needed, subject to statutory retention periods, unresolved disputes, abuse prevention and limitation periods. Acceptance and consent records may be retained for the period needed to prove the user agreement or the consent history. We use access controls, encrypted transport and restricted database permissions, but no online service can guarantee absolute security.

7. Cookies

Automacer currently uses only cookies or similar storage needed for authentication, session security and basic preferences. See the Cookie Notice.

8. Your rights

You may request access, correction, deletion, restriction, portability or object to processing where the legal requirements are met. You may withdraw consent for the future. Email categories can be managed in Account Settings; marketing emails also contain an unsubscribe link. Automacer does not currently use solely automated decisions that produce legal or similarly significant effects.

You may also complain to a supervisory authority, in particular the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen. Contact us first if you would like us to resolve a concern.

9. Changes

We may update this notice when the service or law changes. Material changes will be communicated appropriately and the effective date will be updated.