Privacy Policy

This Privacy Policy describes the processing of personal data in connection with the public website operated under the designation "VibeVote" (the "Website") and, where applicable, the associated VibeVote web application (the "Web App").

This notice applies to visitors to the Website and to users who register for or access an account within the Web App. The relevant contact details are set out in the imprint.

Where a VibeVote account is created, the personal data currently collected for that purpose is limited to the user's email address and chosen username.

Such data is processed through Better Auth for the purposes of account creation, user authentication, access control, and the provision of essential account-related functionality within the Web App.

Processing is limited to the extent necessary for the operation, administration, and security of the account system.

Where personal data is submitted through forms made available on the Website or, where applicable, within the Web App, such data is transmitted in encrypted form.

The data provided in this manner is processed exclusively for the receipt, review, and handling of the respective enquiry and for any follow-up communication arising therefrom.

The public Website is hosted via Vercel, a provider based in the United States.

In the course of providing hosting, content delivery, and related technical services for the Website, technical access, connection, request, and system data may be processed to the extent necessary to ensure the availability, stability, integrity, performance, and security of the Website.

The VibeVote Web App is hosted on an Albwebsolutions Kubernetes cluster. According to the information currently provided, the cluster nodes used for this infrastructure are located in Germany and therefore within the European Union.

In the course of operating the Web App, technical access, connection, and system data may be processed to the extent required for the secure operation, stability, and delivery of the application environment.

The Website uses Google Analytics, a web analytics service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Google Analytics uses cookies and comparable technologies stored on the user's device in order to analyze the use of the Website. The information generated in this context is generally transmitted to a Google server in the United States and stored there.

Google processes this information for the purpose of evaluating usage of the Website, compiling reports on website activity, and providing further services connected with website and internet usage. According to the information presently available, the IP address transmitted by the browser within the scope of Google Analytics is not combined by Google with other Google data.

In connection with the use of Vercel and Google Analytics, personal data may be transmitted to recipients in a third country, in particular the United States.

As Vercel is a United States-based provider, the technical provision of the public Website may involve access to or processing of personal data in the United States. The same applies to the use of Google Analytics to the extent that data is transmitted to Google servers in the United States.

Depending on the specific transfer scenario, a level of data protection essentially equivalent to that applicable within the European Union may not be guaranteed in every case, in particular due to the legal powers of public authorities under applicable United States law.

By contrast, the Web App infrastructure described above is, according to the information currently available, operated on cluster nodes located in Germany within the European Union.

Subject to the applicable statutory requirements, data subjects are entitled to request access to their personal data as well as rectification, erasure, restriction of processing, and data portability, where applicable.

Data subjects are also entitled to object to processing in accordance with the statutory requirements and to lodge a complaint with a competent supervisory authority.

Requests concerning data protection rights may be directed to the contact details provided in the imprint.

Appropriate technical and organizational measures are implemented in order to protect personal data against unauthorized access and other unlawful or accidental forms of processing, taking into account the nature, scope, context, and purposes of the relevant processing operations.