1. Controller
Kalman Control UG (haftungsbeschränkt), Kastanienstraße 5, 47269 Duisburg, Germany. Privacy requests: info@automacer.com.
2. Data and purposes
We process account and contact details, profile and company information, optional phone and mobile numbers, optional private postal addresses, specialist education and qualifications, project posts, applications, messages, forum questions and answers, follows, helpful votes, reports, uploaded profile media or documents, verification information, email-notification preferences, consent records, campaign delivery events, and technical security logs.
If you introduce or discuss a project opportunity, we may also process the contact details, non-confidential requirement information, conflict declarations, suitability notes, proposal correspondence, and—where a separate collaboration is agreed—contract, invoicing and project-administration data needed for that engagement.
The Engineering Support inquiry form records the contact name, company name, email address, project title, requested discipline and project description, together with any optional location, delivery model, schedule, team or telephone information supplied. It also records the required privacy and information-sharing confirmations, language, submission time and technical notification status.
The purposes are to create and secure accounts, provide profiles and marketplace functions, enable introductions and communication, notify searchable specialists about closely matching published projects, send Automacer updates or advertising only where the relevant consent is active, verify accounts, prevent abuse, answer requests, and comply with legal obligations.
Project-opportunity data is used to assess the enquiry, identify and contact potentially suitable participants, prepare a proposal or project-specific agreement, administer an agreed engagement, protect confidential information and meet compliance obligations.
3. Legal bases and email choices
Core account, marketplace and closely matched project-opportunity processing is necessary to perform the user agreement or take requested pre-contractual steps (Art. 6(1)(b) GDPR) and may also rely on the legitimate interest in enabling relevant professional introductions (Art. 6(1)(f)). Users can disable project-opportunity emails at any time without hiding their profile. Security, fraud prevention, platform improvement and the defence of legal claims rely on legitimate interests (Art. 6(1)(f)). Statutory retention or disclosure relies on legal obligations (Art. 6(1)(c)).
The Automacer Technical Briefing, which covers electrical engineering, industrial automation and platform updates, and the separate events, offers or partner-promotions category are optional. They are disabled by default and sent under Art. 6(1)(a) GDPR only after the user gives the relevant consent. When a user selects the Technical Briefing during registration, the subscription becomes active only after the user verifies the account email with the time-limited signup code. This records the selected wording version, request time and verified activation. Consent may be withdrawn for the future at any time in Account Settings or through the unsubscribe link included in every marketing email. Withdrawing marketing consent does not disable essential account or security messages.
4. Public profiles, forum and other users
Profile and company information is public only where the relevant visibility and verification conditions are met. Forum questions, answers, selected technical subjects, contribution dates and the contributor's public display name, account type and verification badge are visible to everyone. Email addresses are never used as a public forum-name fallback or disclosed to other outreach recipients.
Users choose whether email or phone details are shown elsewhere. Specialist phone and mobile numbers remain private unless the specialist independently enables the relevant number for display on the full profile. A specialist postal address is always private and is never displayed publicly. Education is professional profile information and may be displayed when the specialist profile meets the existing public-profile visibility rules. Automacer does not claim that an education record or degree is verified unless a separate verification process expressly says so. Project owners, applicants and conversation participants receive the information needed for their interaction. Do not upload confidential plant data, credentials, undisclosed vulnerabilities, trade secrets or third-party personal data without authority.
Information from a project enquiry is shared only as necessary with the customer, selected potential participants, professional advisers or service providers involved in assessment and delivery. Sensitive details should not be included in an initial enquiry and are shared only under an appropriate project or confidentiality arrangement.
5. Service providers and transfers
Automacer uses Supabase for database, authentication, storage and serverless functions, Vercel for hosting and delivery, and Resend for transactional, project-opportunity and consent-based broadcast email delivery. For marketing broadcasts, Resend also processes the subscription state and delivery events such as delivery, bounce, spam complaint, failure, opening or link click when those events are made available. Signed provider events are used to update campaign statistics and to suppress further marketing after an unsubscribe, bounce, complaint or provider suppression.
These providers process data on our instructions. Processing may involve countries outside the EEA; where required, recognised safeguards such as adequacy decisions or standard contractual clauses are used. Provider information: Supabase privacy · Vercel privacy · Resend privacy
6. Retention and security
Account and marketplace data is generally kept while the account or relevant relationship remains active. Project-outreach and marketing campaign records are retained for delivery control, duplicate prevention, preference compliance, consent evidence and accountability, without exposing recipient lists publicly. Data is deleted or anonymised when no longer needed, subject to statutory retention periods, unresolved disputes, abuse prevention and limitation periods. Acceptance and consent records may be retained for the period needed to prove the user agreement or the consent history. Users can update or remove optional contact and education details. Account deletion removes the related contact and education records, subject to the legal-retention rules described above. Adding contact details to a profile does not itself enrol the user in marketing or notification activity. We use access controls, encrypted transport and restricted database permissions, but no online service can guarantee absolute security.
Engineering Support inquiries are retained only as long as needed for initial assessment, follow-up, duplicate and abuse prevention, accountability and any resulting pre-contractual or contractual relationship. They are then deleted or anonymised, subject to legal retention duties, unresolved disputes and limitation periods.
7. Cookies
Automacer currently uses only cookies or similar storage needed for authentication, session security and basic preferences. See the Cookie Notice.
8. Your rights
You may request access, correction, deletion, restriction, portability or object to processing where the legal requirements are met. You may withdraw consent for the future. Email categories can be managed in Account Settings; marketing emails also contain an unsubscribe link. Automacer does not currently use solely automated decisions that produce legal or similarly significant effects.
You may also complain to a supervisory authority, in particular the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen. Contact us first if you would like us to resolve a concern.
9. Changes
We may update this notice when the service or law changes. Material changes will be communicated appropriately and the effective date will be updated.
