Legal

Privacy policy

[02] Privacy policy

Note: the legally binding version of this privacy policy is the German version. The English text is provided for convenience only.

1. Controller

The controller responsible for processing personal data on this website under the General Data Protection Regulation (GDPR) is:

SHINRO UG (haftungsbeschränkt)

Wilhelmsruher Damm 142

13439 Berlin

Germany

hello@shinro.io

The managing directors are listed in the imprint.

2. Hosting and delivery

We use the following processors to deliver this website reliably and protect it against attacks.

Vercel

Vercel Inc., 440 N Barranca Avenue #4133, Covina, CA 91723, USA, hosts this website as a processor. When you access a page, server logs may contain your IP address, user agent, timestamp, and requested URL. The legal basis is Art. 6 (1) f GDPR. Our legitimate interest is the secure and reliable operation of the website.

Cloudflare

Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA, acts as a processor for content delivery and protection against attacks. Cloudflare may process the same technical data categories: IP address, user agent, timestamp, and requested URL. The legal basis is Art. 6 (1) f GDPR. Our legitimate interest is the secure and reliable operation of the website.

Server logs are typically deleted within 30 days unless they are required to investigate security incidents. [confirm with provider settings]

Transfers to third countries

Both recipients are based in the United States, a third country outside the European Economic Area. Personal data may therefore be transferred to and processed in the United States.

Vercel Inc. participates in the EU-US Data Privacy Framework; where the framework does not apply, EU standard contractual clauses (Art. 46 (2) c GDPR) are used.

Cloudflare, Inc. participates in the EU-US Data Privacy Framework; where the framework does not apply, EU standard contractual clauses (Art. 46 (2) c GDPR) are used.

3. Early access requests

When you submit an early access request, we process your work email address and company name to handle your request. The legal basis is Art. 6 (1) b GDPR for pre-contractual measures taken at your request. Any follow-up contact is based on Art. 6 (1) f GDPR and our legitimate interest in related communication. We use Zoho Corporation B.V., Beneluxlaan 4B, 3527 HT Utrecht, Netherlands, as a processor and recipient. The account uses the EU data center region, as confirmed by the owner. We retain the data until the request is settled, at the latest 12 months after the last contact, unless a contract follows.

4. Web analytics

We do not use web analytics.

5. Theme preference and local storage

Your theme preference (light or dark) is stored in your browser's local storage. It contains no personal data and is not transmitted to us. We do not set cookies requiring consent. For this reason, no consent banner is shown. Local storage is used only for this technically necessary preference.

6. Your rights

Subject to the applicable legal requirements, you have the following rights under Art. 15 to 21 GDPR regarding your personal data:

  • Access to your personal data and information about its processing
  • Rectification of inaccurate personal data
  • Erasure of your personal data
  • Restriction of processing
  • Data portability
  • Objection to processing based on Art. 6 (1) f GDPR

Right to complain

Under Art. 77 GDPR, you have the right to lodge a complaint with a data protection supervisory authority. The competent authority for Berlin is: Berliner Beauftragte für Datenschutz und Informationsfreiheit, Alt-Moabit 59-61, 10555 Berlin, mailbox@datenschutz-berlin.de.

Automated decision making

We do not use automated decision making, including profiling, within the meaning of Art. 22 GDPR.

Obligation to provide data

You are not legally or contractually required to provide personal data when browsing this website. A work email address and company name are required to submit the early access form. Without them, we cannot process your request.