Privacy Policy

This privacy policy explains which personal data we process when you visit this website and use the PCBoffer platform, for which purposes we do so, and which rights you have.

Controller

PCBoffer GmbH
74369 Löchgau
Germany
Email: info@pcboffer.de

The controller within the meaning of the General Data Protection Regulation (GDPR) is the entity named above, represented by Managing Director Josip Strutz.

Hosting and server log files

When you visit this website, our hosting provider automatically processes information transmitted by your browser: IP address, date and time of access, page requested, browser type and operating system. This data is technically required to deliver the website and to ensure its stability and security (Art. 6(1)(f) GDPR). Our systems run on Google Cloud (Europe region) and Railway. Where processing takes place in third countries, it is based on EU Standard Contractual Clauses.

Cookies and local storage

This website sets no advertising cookies. Your browser's local storage holds technically required settings: your language selection, the colour scheme, your decision about audience measurement and, after signing in, your session key. This storage is necessary to provide the service you requested (Section 25(2) of the German TDDDG) and requires no consent. The audience measurement with Google Analytics and the visitor analysis with HubSpot described in the next sections, by contrast, only take place if you agree to them.

Audience measurement with Google Analytics

For audience measurement we use Google Analytics 4 (provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). The service is only loaded after you have agreed in the consent banner; if you decline or make no choice, no Google script is loaded, no cookies are set and no data is transmitted to Google. The legal basis is your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG). What is processed: the pages you open, time and duration of the visit, the referring page, device and browser, and an approximate location; Google Analytics 4 derives the location from the IP address and does not store the IP address. Any transfer to the USA is based on EU Standard Contractual Clauses. The retention period for event data is configured in the property; Google offers 2 or 14 months for this. You may withdraw your consent at any time with effect for the future, through the "Cookie settings" link in the footer of every page. Your decision is kept in your browser's local storage for one year and you are asked again afterwards.

Visitor analysis with HubSpot

With your consent we also use HubSpot (provider: HubSpot Ireland Limited, 1 Sir John Rogerson's Quay, Dublin 2, Ireland; parent company HubSpot, Inc., USA). HubSpot records which pages of this website you open and links these visits to your enquiry if you contact us later through a form or by email. If you submit a form on this website, the details you enter (such as name, email address, company and message) may be passed to our HubSpot account for this. This shows us what you are interested in, so we can answer your enquiry more precisely. The service is only loaded after you have agreed in the consent banner; if you decline or make no choice, no HubSpot script is loaded and no cookies are set. The legal basis is your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG). What is processed: the pages you open, time and duration of the visit, the referring page, device and browser, and your IP address. HubSpot sets cookies for this: __hstc and hubspotutk recognise your browser (up to six months), __hssc counts the pages of a session (30 minutes) and __hssrc detects a browser restart (until the end of the browser session). The data is stored in HubSpot's European data centre. Any transfer to the USA is based on the EU-US Data Privacy Framework, under which HubSpot, Inc. is certified, and on EU Standard Contractual Clauses. We delete the data once it is no longer needed to handle your enquiry and maintain the customer relationship. You may withdraw your consent at any time with effect for the future, through the "Cookie settings" link in the footer of every page; HubSpot's cookies are deleted when you do, and the page reloads without HubSpot.

Contact and demo appointments

If you contact us by email or phone, we process the data you provide in order to handle your enquiry (Art. 6(1)(b) and (f) GDPR). For booking a demo appointment we embed Google's appointment calendar on our “Book a demo” page (provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). The calendar is only loaded once you press the “Load the calendar” button; doing so transmits your IP address as well as browser and device information to Google, and Google's privacy policy applies. The legal basis is your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG), which you give by pressing that button. Alternatively you can open the calendar directly at Google through the link below it.

Customer account and platform use

When you register for and use the PCBoffer platform, we process your account data (name, email address, company affiliation) and the project and business data you enter, in order to perform the contract (Art. 6(1)(b) GDPR). This data is made available only within your organisation and is never sold to third parties.

Service providers we use

To operate the platform we use processors: Google Cloud (hosting and email delivery via Google Workspace), Railway (hosting), HubSpot (managing enquiries and customer relationships) and Stripe (payment processing; Stripe processes your payment data as an independent controller for fraud prevention). Data processing agreements are in place with all providers; transfers to third countries are based on EU Standard Contractual Clauses.

Google reCAPTCHA

To protect our platform's sign-in and registration forms against abuse we use Google reCAPTCHA (provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). reCAPTCHA uses signals such as your IP address and behaviour on the page to determine whether an input comes from a human (Art. 6(1)(f) GDPR, protection against automated abuse). For more information see Google's privacy policy at https://policies.google.com/privacy.

Your rights

You have the right of access to the personal data we process about you (Art. 15 GDPR), and the rights to rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection to processing based on legitimate interests (Art. 21). You may also lodge a complaint with a data protection supervisory authority; the authority responsible for us is the State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg.

Retention period

We store personal data only for as long as it is required for the purposes stated or as long as statutory retention obligations (for example under commercial and tax law) apply. Account data is deleted after the contractual relationship ends, unless a retention obligation prevents this.

Changes to this policy

We update this privacy policy when our data processing changes, for example through new platform features. The version published here applies.

Last updated: September 2026