Skip to content

Privacy policy

In progress

The privacy policy for this portal is still being drafted. The controller is Promptheus GmbH, Bochumer Straße 11, 10555 Berlin, Germany.

Visitor statistics

We count page views with Umami. Umami runs on a server in Germany (Hetzner, Falkenstein), sets no cookies and stores nothing on your device. It records the page viewed without search terms, the page you came from, browser, operating system, device type and country. Your IP address is used only for counting and is not stored. Without your consent, views are not linked to your account (see the next section). The AquaVentus office sees the figures to understand which content is used. The legal basis is Art. 6(1)(f) GDPR.

Linking visits with your consent

After your first sign-in we ask whether we may link your visits, and you can choose two purposes separately. “Link visits to your company”: your browser sends Umami the name of your company in addition to the data listed above. “Link visits to your account”: your browser sends an identifier that is derived from your account, contains neither your name nor your email address and stays the same across your visits. This allows your page views to be grouped.

The purpose is to let the AquaVentus office see which content the member companies use. The recipient is the AquaVentus office; Umami runs on the server in Germany named above. The legal basis is your consent under Art. 6(1)(a) GDPR and, where information on your device is accessed, Section 25(1) TDDDG. If yours is the only account of your company in the portal, the office can in practice link the visits to you.

Consent is voluntary. You can withdraw it for each purpose at any time with one click in your profile under “Visit counting”; from then on we count anonymously again for that purpose. Withdrawal does not affect the lawfulness of processing before it. Linked visits are deleted after 13 months. We store your choice with its time and the version of the notice text on your account to be able to demonstrate consent (Art. 7(1) GDPR); this record is deleted with your account.