1. Controller
Invessiv
Owner: Moritz Hecht
Frankenberger Straße 235, 09131 Chemnitz, Germany
Email: service@invessiv.com
Phone: +49 1523 2070477
2. Hosting and server log files
We use Vercel to host this website. When the website is accessed, Vercel processes technically required connection and log data, in particular IP address, time of access, requested resource, referrer URL, status information, and information about browser, operating system, and device where technically applicable. This processing is necessary to provide the website, deliver content, ensure stability and security, and defend against misuse. The legal basis is Art. 6 para. 1 lit. f GDPR. Log and infrastructure information is stored by Vercel only for as long as required for operation, security, and the retention periods applicable under the booked plan.
3. Vercel Web Analytics
We use Vercel Web Analytics to evaluate the use of our website in aggregated form. According to Vercel, the service processes anonymized data and does not use cookies. This may include page views, referrer information, technical context data such as browser type, operating system, device type, and approximate region, as well as conversion events defined by us. These include in particular CTA clicks, contact clicks, calendar clicks, form interactions such as form start, submit attempt, successful form submission or error category, and language or theme switches. The form entries themselves are not transmitted for analytics purposes; for error events, only a general error category such as validation, delivery, or rate limit is processed. In our integration, query parameters and URL fragments are removed before transmission, and sensitive URL areas are not sent to Vercel Analytics. The processing is used for reach measurement, conversion analysis, and website optimization. The legal basis is Art. 6 para. 1 lit. f GDPR.
4. Vercel Speed Insights
We use Vercel Speed Insights to measure the technical performance of our website. This may include page paths, technical performance indicators, and metrics relating to user experience. According to Vercel, the recorded data points are anonymous and are not associated with an individual person or IP address. The service helps us measure and technically improve loading times, stability, and interaction quality. The legal basis is Art. 6 para. 1 lit. f GDPR.
5. Contact by form and email
If you contact us by contact form or email, we process the data you provide in order to handle your inquiry, communicate with you, and, where applicable, prepare or perform a contract. Depending on your input, this may include in particular your name, email address, phone number, company, role, requested service, website, project description, and optional details relating to budget, preferred start, page scope, or workflows. Form inquiries are transmitted technically to our mailbox via the email service Resend and are also stored in a Postgres/Neon-based lead database used by us to document incoming inquiries, track processing status, and manage follow-up communication in a structured way. In particular, we store the time of receipt, the form or inquiry channel used, the processing and mail-delivery status, and the version of the privacy and terms notices applicable at the time of submission. For form interactions, general events are also sent to Vercel Analytics, such as form start, submit attempt, successful form submission, or a general error category. The form entries themselves are not transmitted to analytics. The legal basis is Art. 6 para. 1 lit. b GDPR where the processing is required for pre-contractual steps or contract performance and otherwise Art. 6 para. 1 lit. f GDPR for the efficient handling, documentation, and follow-up of inquiries. Required fields are marked in the form; without them, we may be unable to process your inquiry or may only be able to process it to a limited extent.
6. Appointment scheduling and online meetings
If you book an appointment via our Calendly link, you leave our website and enter your booking details directly on the Calendly page. This may include in particular your name, email address, appointment details, and optional notes. We use Zoom for online meetings. Depending on how a meeting is conducted, names, contact details, meeting metadata, and audio, video, or chat content may be processed. Meetings are not recorded by default; if a recording is planned in an individual case, we will inform you separately in advance. The processing is used to organize and conduct appointments and meetings. The legal basis is Art. 6 para. 1 lit. b GDPR where the processing is required for pre-contractual steps or contract performance and otherwise Art. 6 para. 1 lit. f GDPR.
7. Cookies and similar technologies
We currently do not use consent-based tracking or marketing cookies. However, the website uses technically necessary storage mechanisms to provide the display and interaction settings you request. This includes localStorage to store the selected language, sessionStorage to temporarily restore scroll position during language changes, and a first-party cookie named "invessiv-theme" that stores your selected theme preference (dark or light) for up to 12 months. These storage operations are used exclusively for the functionality, user guidance, and consistent presentation of the website. Where information is stored on or read from your device in this context, this is done only for technically necessary purposes. The legal basis for any subsequent processing of personal data is Art. 6 para. 1 lit. f GDPR. A cookie banner is currently not used solely because of these technically necessary storage operations.
8. Recipients and service providers
Depending on the processing activity, personal data may in particular be received by: Vercel Inc. for hosting, Vercel Web Analytics, and Vercel Speed Insights, Resend / Plus Five Five, Inc. for the technical delivery of form inquiries by email, Neon for the technical storage of lead records in a managed Postgres database, Calendly LLC for appointment scheduling, and Zoom Communications, Inc. for online meetings. Apart from that, we only disclose personal data where this is necessary to handle your inquiry, perform a contract, comply with legal obligations, or where you have provided consent.
9. Retention and deletion
We store personal data only for as long as required for the relevant purposes. We retain contact inquiries and related communication for as long as needed to handle the inquiry, continue related communication, prepare a contract, or comply with statutory retention and evidence obligations. Lead records from contact forms are generally deleted or anonymized after 24 months if no contractual relationship results from the inquiry and no longer statutory retention period applies. Technical log, analytics, and performance data is processed in accordance with the retention periods provided by the respective service and required for operation and is then deleted, anonymized, or no longer kept in a personally identifiable form.
10. Third-country transfers
When using Vercel, Resend, Neon, Calendly, and Zoom, it cannot be ruled out that personal data may also be processed in countries outside the EU or EEA, in particular in the United States, or be administratively accessible from there. Where no directly applicable adequacy decision or other lawful transfer mechanism applies to such transfers, the providers state that they rely on appropriate safeguards, in particular standard contractual clauses. Further information can be found in the respective providers' privacy notices.
11. Your rights
Under the GDPR, you have rights including access, rectification, erasure, restriction of processing, data portability, and objection. Where processing is based on your consent, you may withdraw that consent at any time with effect for the future.
12. Right to lodge a complaint
You have the right to lodge a complaint with a data protection supervisory authority. The competent supervisory authority is the Saxon Data Protection and Transparency Commissioner, Maternistraße 17, 01067 Dresden, Germany, email: post@sdtb.sachsen.de, website: www.datenschutz.sachsen.de.