Privacy Policy

The controller responsible for data processing on this website is Thalamiq GmbH, Poccistraße 13, 80336 Munich, Germany, represented by its managing director Till Rostalski. You can reach us by email at hello@thalamiq.io or by phone at +49 178 67 11 378.

This website is served by Vercel Inc., 440 N Barranca Avenue #4133, Covina, CA 91723, USA. With every page request, Vercel processes technically necessary connection data: your IP address, date and time, the requested address, the previously visited page (referrer) and details about your browser and operating system. Without this data the website can neither be delivered nor protected against attacks.

The legal basis is our legitimate interest in providing the website securely and reliably (Art. 6(1)(f) GDPR). Vercel processes the data on our behalf under a data processing agreement (Art. 28 GDPR) and retains it only as long as necessary for these purposes.

A transfer to the USA cannot be ruled out. Vercel is certified under the EU-U.S. Data Privacy Framework, which is covered by an adequacy decision of the European Commission (Art. 45 GDPR). Standard contractual clauses apply in addition. See Vercel’s privacy policy for details.

To understand which content is read, we use Vercel Web Analytics. The service sets no cookies and stores nothing on your device. It records the page viewed, the referrer, approximate location (country, region, city), browser, operating system and device type. To count visits, Vercel derives a hash from the request, which is discarded after 24 hours. We only see aggregated statistics and cannot draw conclusions about individual people.

The legal basis is our legitimate interest in statistical analysis of website usage (Art. 6(1)(f) GDPR). Provider, data processing agreement and transfer to the USA are as described under hosting.

We set a single cookie: NEXT_LOCALE stores the language you are reading the website in and is deleted when you close your browser. If you switch the color scheme, your choice is saved in your browser’s local storage under the key theme. Both serve only this purpose and are strictly necessary for it, so no consent is required (Section 25(2) no. 2 TDDDG).

The fonts are delivered together with the website by our hosting provider. Your browser does not connect to Google or any other font provider.

When you email us, we process the information you provide (email address, name and message content) to answer your inquiry. The legal basis is Art. 6(1)(b) GDPR where your inquiry relates to a contract, otherwise our legitimate interest in responding to inquiries (Art. 6(1)(f) GDPR).

Our email runs on Google Workspace, a service of Google Cloud EMEA Limited, 70 Sir John Rogerson’s Quay, Dublin 2, Ireland, acting as our processor. A transfer to Google LLC in the USA cannot be ruled out. Google is also certified under the EU-U.S. Data Privacy Framework.

We delete your message once your inquiry has been fully handled, unless statutory retention obligations apply, for example for business correspondence under German commercial and tax law. Please do not send us patient health data by email.

You have the right to access the data stored about you (Art. 15 GDPR) and to rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). An informal message to hello@thalamiq.io is sufficient.

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is the Bavarian Data Protection Authority (Bayerisches Landesamt für Datenschutzaufsicht), Promenade 18, 91522 Ansbach, Germany, www.lda.bayern.de.

We do not use automated decision-making, including profiling.

Where we process data on the basis of our legitimate interest (Art. 6(1)(f) GDPR), you may object to this processing at any time on grounds relating to your particular situation (Art. 21 GDPR). We will then no longer process your data unless we can demonstrate compelling legitimate grounds that override your interests, or the processing serves the establishment, exercise or defense of legal claims.