Privacy

This policy explains what personal data we process when you visit this website, write to us, sign up for our emails, or attend an event where we speak. It does not cover data our customers process in the Vortner product. That is governed by a separate data processing agreement with each customer.

Who is responsible

Secureless UG (haftungsbeschränkt), operating as Vortner, Kollwitzstraße 76, 10435 Berlin, Germany. Commercial register: Amtsgericht Charlottenburg, HRB 287751 B. Managing director: Paul Karrmann.
Questions about your data: privacy@vortner.de

We have not appointed a data protection officer, as we are not legally required to.

Visiting this website

When you open a page, your browser sends technical data to our server: your IP address, the date and time, the page requested, the referring page, and browser and operating system information. We use this data only to deliver the website and to keep it secure, for example to detect and fend off attacks. The legal basis is our legitimate interest in a secure, working website (Art. 6 (1) (f) GDPR). The server logs are deleted after 7 days, unless a security incident requires us to keep specific entries longer.

The fonts are stored on our own server. Your browser does not contact Google or any other font provider.

Emailing us

If you email us, we process your email address, your name and anything you include in your message, to reply and handle your request. The legal basis is steps prior to or in performance of a contract, where your request concerns one (Art. 6 (1) (b) GDPR), otherwise our legitimate interest in answering you (Art. 6 (1) (f) GDPR). We delete correspondence once it is no longer needed, unless commercial or tax law requires us to keep it (typically 6 or 10 years for business letters and invoices).

Updates and event invitations by email

If you sign up for our emails, we send you updates about Vortner and invitations to webinars and events. Sign-up uses double opt-in: you only receive emails after you confirm the link we send you.

We store your email address and, if you give them, your name and company. To prove your consent, we record the time of sign-up and confirmation and the IP address used. The legal basis is your consent (Art. 6 (1) (a) GDPR). We keep the proof of consent to meet our accountability obligation (Art. 6 (1) (c) and Art. 7 (1) GDPR).

You can unsubscribe at any time with the link in every email, or by writing to us. This does not affect the lawfulness of emails sent before. We keep your data until you unsubscribe. After that we keep only your email address on a block list, so that we never email you again by mistake.

We do not track whether you open our emails or click on links.

Events organised by our partners

We regularly speak at or co-host webinars and events organised by other companies. If you register for such an event, the organiser may pass your registration data to us, provided they informed you about this when you registered.

We receive your name, email address, company and job title, and any questions you submitted for the event. We use them only to follow up on that event, for example to send slides or a recording, or to answer your questions. The legal basis is our legitimate interest in following up on an event you chose to attend (Art. 6 (1) (f) GDPR). We delete this data 6 months after the event, unless you have since signed up for our emails or are in contact with us.

We do not add you to our email list or send you marketing emails on this basis. We only do that if you have given separate consent, either on the organiser's registration form or by signing up with us directly. You can object to this processing at any time by writing to us, and we will delete your data.

Service providers

We use the following providers. They process data only on our instructions, under data processing agreements (Art. 28 GDPR):

• Hetzner Online GmbH, Industriestraße 25, 91710 Gunzenhausen, Germany: server hosting for this website. Germany.
• Heinlein Hosting GmbH (mailbox.org), Schwedter Straße 8/9A, 10119 Berlin, Germany: business email. Germany.
• Keila GmbH, Hauptstraße 10, 95517 Seybothenreuth, Germany: sign-up form and list of subscribers. Hosted in Germany and France.
• Lettermint B.V., Willemsvaart 16 B, 8019 AB Zwolle, Netherlands: delivery of our update and event emails. EU.

We do not transfer personal data to countries outside the EU or the EEA.

Your rights

You have the right to access the data we hold about you (Art. 15 GDPR), to have incorrect data corrected (Art. 16 GDPR), to have your data deleted (Art. 17 GDPR), to restrict its processing (Art. 18 GDPR) and to receive it in a portable format (Art. 20 GDPR). You can withdraw consent at any time, with effect for the future (Art. 7 (3) GDPR).

Right to object (Art. 21 GDPR): where we process your data based on our legitimate interest, you can object at any time for reasons arising from your particular situation. Where we use your data for direct marketing, you can object at any time without giving reasons.

To exercise any of these rights, write to privacy@vortner.de.

You also have the right to complain to a data protection authority. The authority responsible for us is the Berliner Beauftragte für Datenschutz und Informationsfreiheit, Alt-Moabit 59-61, 10555 Berlin, Germany, mailbox@datenschutz-berlin.de.

Automated decisions

We do not make decisions about you based solely on automated processing, including profiling.

Changes

We update this policy when our processing changes. The current version is always on this page.

Last updated: 13 October 2026