Privacy Policy

This page explains what personal data this website processes, why, and what rights you have. We keep it short because the site does little with your data — and we would rather state that plainly than bury it in boilerplate.

Controller

realations GmbH
Kaufingerstraße 20
80331 München, Germany
Phone: +49 89 20008288
Email: andreas@realations.eu

1. Lead form (scorecard and report)

When you request your company's scorecard or the industry report, we process the data you enter: your email address, the company or agency name you provide, and your role (company or agency). We use it to send you what you requested and, occasionally, benchmark updates relevant to that request. You can unsubscribe at any time; every email includes a way to do so, and a short reply is enough.

This data is stored in our database, hosted by Neon Inc. (serverless Postgres; EU/US hosting). Legal basis: Art. 6(1)(b) GDPR (providing what you requested) and Art. 6(1)(f) GDPR (our legitimate interest in following up on that request). We delete the data when you ask us to.

2. Email delivery

Transactional emails (your scorecard, the report, notifications) are sent via Cloudflare Email Service (Cloudflare, Inc.). Your email address is processed by Cloudflare solely to deliver these messages.

3. Hosting and server logs

This site is hosted on Cloudflare Workers (Cloudflare, Inc.), which also stores the industry report file. Like almost every website, our hosting infrastructure processes technical data needed to deliver pages to your browser (IP address, time of request, requested URL, user agent) in short-lived server logs, used only for operation and security. Legal basis: Art. 6(1)(f) GDPR.

When you confirm your email address for the industry report, we also store the time of confirmation, the IP address it came from, and your browser's user agent. This is our record that the confirmation was genuine, as required for double opt-in. Legal basis: Art. 6(1)(c) and 6(1)(f) GDPR.

4. Cookies and analytics

We set two cookies, both strictly necessary for functions you have asked for, and neither used to track you across sites. Under §25(2) TDDDG these require no consent:

  • vr_session — keeps you signed in after you confirm a company claim. Expires after 30 days.
  • vr_report — records that your email address was confirmed, so the industry report stays downloadable without confirming again. Contains your address and a signature, nothing else. Expires after 30 days.

Analytics are optional and off until you allow them. Nothing is loaded and nothing is stored on your device unless you choose “Allow” in the banner; declining is a single click and leaves the site and the report fully usable. If you allow them, we load:

  • PostHog (EU-hosted) — product analytics, to see which pages work.
  • LinkedIn Insight Tag — measures which advertising campaigns bring people here. LinkedIn Ireland acts as joint controller for this measurement.

Legal basis: Art. 6(1)(a) GDPR and §25(1) TDDDG (consent). You can withdraw at any time by clearing this site's data in your browser, which resets the banner.

5. Your rights

Under the GDPR you have the right to:

  • access the personal data we hold about you (Art. 15),
  • have it rectified (Art. 16) or erased (Art. 17),
  • restrict its processing (Art. 18),
  • receive it in a portable format (Art. 20),
  • object to processing based on legitimate interest (Art. 21).

To exercise any of these rights, email andreas@realations.eu. You also have the right to lodge a complaint with a supervisory authority; for us that is the Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Ansbach, Germany.