Privacy Policy

Effective: 2025-01-01 · Last updated: 2025-01-01

1. Data Controller

ApexID UG (haftungsbeschränkt), Frankfurt am Main, Germany, is the data controller for personal data collected through apexid.site and the ApexID application.

2. What We Collect

We collect: (a) account information (name, work email, company name); (b) usage data (pages visited, actions performed); (c) content you submit (reviews, replies, notes). All data is stored in AWS eu-central-1 (Frankfurt) with KMS encryption at rest and TLS 1.2+ in transit.

3. Legal Basis (GDPR Art. 6)

We process personal data under: (a) contract performance (Art. 6(1)(b)); (b) legitimate interests (Art. 6(1)(f)); (c) consent (Art. 6(1)(a)) for marketing communications.

4. Your Rights

Under GDPR, you have the right to access, rectify, erase, port, and object to processing of your personal data. Contact privacy@apexid.site. We respond within 30 days.

5. Data Retention

Account data is retained for the duration of your subscription plus 30 days. Backups are retained for 7 days. On request, we delete all personal data within 30 days.

6. Sub-processors

We use AWS (Amazon Web Services EMEA SARL) as our primary infrastructure provider, operating exclusively in eu-central-1.

7. Contact

For privacy inquiries: privacy@apexid.site. For DPA requests: dpa@apexid.site.