Privacy Policy

The data controller for this website is: Contrify GmbH Friedrichstrasse 123 10117 Berlin Germany Email: privacy@contrify.com Phone: +49 30 1234 5678 Managing Directors: Dr. Thomas Weber, Sarah Mueller

You can reach our Data Protection Officer at: Email: dpo@contrify.com Phone: +49 30 1234 5680

When visiting our website, the following data is automatically collected: - IP address of the requesting device (anonymized) - Date and time of access - Name and URL of the retrieved file - Website from which the access was made (referrer URL) - Browser used and, if applicable, operating system - Name of your access provider This data is collected solely to ensure a smooth connection, to guarantee comfortable use of the website, and to evaluate system security. The legal basis is Art. 6(1)(f) GDPR.

When registering and using the Contrify platform, we collect: - Name and email address (for your user account) - Company data (name, address of the property management company) - Contract data (uploaded documents and data extracted from them) - Building data (addresses, equipment numbers) - Usage data (login times, features used) Processing is based on Art. 6(1)(b) GDPR (contract performance) and Art. 6(1)(f) GDPR (legitimate interest).

Uploaded documents are processed by our AI-powered document analysis: - Processing takes place exclusively on servers in Germany (AWS Frankfurt) - Documents are stored encrypted (AES-256) - AI analysis extracts contract data such as prices, terms, and deadlines - No AI model training takes place with your data - Documents can be deleted at any time The legal basis is Art. 6(1)(b) GDPR.

Your personal data will only be shared with third parties: - If you have given your explicit consent (Art. 6(1)(a) GDPR) - If the sharing is necessary for contract performance (Art. 6(1)(b) GDPR) - If there is a legal obligation (Art. 6(1)(c) GDPR) We use the following data processors: - Amazon Web Services EMEA SARL (Hosting, Frankfurt am Main) - Hetzner Online GmbH (Backup servers, Nuremberg) - Brevo GmbH (Email delivery)

You have the following rights regarding your personal data: - Right of access (Art. 15 GDPR) - Right to rectification (Art. 16 GDPR) - Right to erasure (Art. 17 GDPR) - Right to restriction of processing (Art. 18 GDPR) - Right to data portability (Art. 20 GDPR) - Right to object (Art. 21 GDPR) To exercise your rights, please contact privacy@contrify.com.

Our website uses cookies. These include: Technically necessary cookies: - Session cookie (authentication, expires: end of session) - CSRF token (security, expires: end of session) Analytics cookies (only with consent): - Plausible Analytics (privacy-friendly analytics, no personal tracking) You can adjust your cookie settings at any time under /landing/cookies.

We implement comprehensive technical and organizational measures to protect your data: - Encrypted data transfer (TLS 1.3) - Encrypted data storage (AES-256) - Hosting exclusively in Germany - Regular security audits and penetration tests - Access control and permission management - Regular employee training on data protection

This privacy policy is currently valid as of January 2026. Due to the further development of our platform or changes in legal requirements, it may become necessary to update this privacy policy.