Privacy notice

Controller

Scriptpathcore, Level 10, 29 Ballindamm, Hamburg 20095, is the controller for personal data described here. Contact info@scriptpathcore.digital with privacy questions.

Data we use and why

We process contact details, booking information, messages and relevant documents to answer enquiries, take steps before a contract and deliver requested consultations. Billing records are processed to meet legal obligations. With consent, limited analytics may be used to understand site visits. Do not send health data or unrelated personnel records through the initial form.

Legal bases

Depending on the activity, processing rests on Article 6(1)(b) GDPR for contracts and pre-contract requests, Article 6(1)(c) for legal duties, Article 6(1)(f) for proportionate security and business administration, or Article 6(1)(a) for optional consent. Consent can be withdrawn prospectively.

Retention

Unconverted enquiries are normally deleted within six months. Consultation working files are normally deleted within twelve months after completion unless a longer period is agreed or needed for a dispute. Invoices and tax records are retained for applicable German statutory periods. Backup deletion may follow a limited rolling cycle.

Recipients and international transfers

Data may be handled by contracted hosting, email and accounting providers only as necessary and under data-protection terms. Where a provider processes data outside the European Economic Area, we use an adequacy decision or appropriate safeguards such as EU standard contractual clauses and assess supplementary measures where required.

Your rights

Subject to legal conditions, you may request access, correction, deletion, restriction, portability or object to processing based on legitimate interests. You may withdraw consent and lodge a complaint with the competent German data protection authority. Identity may need to be verified before a request is completed.

Security and updates

We use access controls, data minimisation and secure service providers proportionate to the material handled. No transmission method is risk-free. This notice may be updated when services or legal requirements change.