Website Privacy Policy

This Privacy Policy covers our public marketing website at vizrm.com (the "website"). If you have created a vizrm account and are looking for the policy that covers the vizrm application at app.vizrm.com, please see our App Privacy Policy.

vizrm is a product of CodeBriada UG (haftungsbeschränkt) (referred to as "our company", "we" and "us"). We value your privacy and are committed to protecting it.

This policy informs you, in accordance with Art. 13 GDPR, about the type, scope, purpose, duration, and legal basis of the processing of personal data that takes place when you visit the website or use the contact options connected to it (e.g. contact by e-mail, meeting booking). It does not apply to the vizrm application - see our App Privacy Policy for that.

Per Art. 4 No. 1 of Regulation (EU) 2016/679 (the General Data Protection Regulation or "GDPR"), "processing" refers to any operation or set of operations performed on personal data, such as collection, recording, storage, use, disclosure by transmission, or erasure, whether by automated means or not.

This policy is structured as follows:

• 1. Information about us as controller of your data
• 2. The rights of users and data subjects
• 3. Information about the data processing on the website
• 4. Our social media presences
• 5. Changes, contact, and supervisory authority

1. Information about us as controller of your data

The party responsible for the website for purposes of data protection law (the "controller") is:

Our contact for data protection matters is Jakob Porer, reachable at info@vizrm.com.

2. The rights of users and data subjects

With regard to the data processing described below, users and data subjects have the right:

• To confirmation of whether data concerning them is being processed, information about the data being processed, further information about the nature of the data processing, and copies of the data (Art. 15 GDPR);
• To correct or complete incorrect or incomplete data (Art. 16 GDPR);
• To the immediate deletion of data concerning them (Art. 17 GDPR), or, alternatively, if further processing is necessary as stipulated in Art. 17 Para. 3 GDPR, to restrict said processing per Art. 18 GDPR;
• To receive copies of the data concerning them and/or provided by them and to have the same transmitted to other providers/controllers (Art. 20 GDPR);
• Where processing is based on consent - such as analytics cookies - to withdraw that consent at any time with effect for the future, without affecting the lawfulness of processing carried out before the withdrawal (Art. 7 Para. 3 GDPR);
• To file complaints with a supervisory authority if they believe that data concerning them is being processed by the controller in breach of data protection provisions (Art. 77 GDPR).

Right to object (Art. 21 GDPR): You have the right to object at any time, on grounds relating to your particular situation, to processing of your data carried out on the basis of Art. 6 Para. 1 lit. f) GDPR. Where data is processed for the purpose of direct marketing, you may object at any time without giving reasons.

Exercising these rights is free of charge, and we respond within one month of receiving your request. To exercise any of these rights, contact us at info@vizrm.com.

The controller is obliged to inform all recipients to whom it discloses data of any corrections, deletions, or restrictions placed on processing per Art. 16, 17 Para. 1, 18 GDPR, unless such notification is impossible or involves a disproportionate effort. Users have a right to information about these recipients.

3. Information about the data processing on the website

Your data processed when using the website will be deleted or blocked as soon as the purpose for its storage ceases to apply, provided the deletion is not in breach of any statutory storage obligations and unless otherwise stipulated below.

3.1 Contact by e-mail

If you contact us via e-mail, the data you provide (e.g. your name, e-mail address, and the content of your message) will be used solely for the purpose of processing and answering your request. We need this data to process your inquiry; without it we will not be able to answer it in full or at all.

The legal basis for this processing is Art. 6 Para. 1 lit. b) GDPR, as your inquiry is directed at entering into or performing a contract, and Art. 6 Para. 1 lit. f) GDPR for general inquiries, our legitimate interest being the proper handling of correspondence.

Your data will be deleted once we have fully answered your inquiry and there is no further legal obligation to store it, such as if an order or contract resulted therefrom.

3.2 Meeting booking via Calendly

We use Calendly to allow you to book meetings with us. When you book a meeting via our Calendly widget, we and Calendly process the data you provide (e.g. your name, e-mail address, and any information you enter about the purpose of the meeting), as well as technical data such as your IP address and time zone.

Calendly is a service of Calendly, LLC, 271 17th Street NW, Suite 1000, Atlanta, GA 30363, USA. As Calendly is located in the United States, data is transferred there; this transfer relies on the European Commission's Standard Contractual Clauses. Calendly's privacy policy is available at https://calendly.com/privacy.

When you book a meeting, your name, e-mail address, and the details of your meeting request are also added to our HubSpot CRM so that we can manage our business contacts and follow up with you. HubSpot is a service of HubSpot, Inc., 2 Canal Park, Cambridge, MA 02141, USA. As HubSpot is located in the United States, this transfer relies on the European Commission's Standard Contractual Clauses. HubSpot's privacy policy is available at https://legal.hubspot.com/privacy-policy.

The legal basis for booking the meeting via Calendly is Art. 6 Para. 1 lit. b) GDPR, as the processing is necessary to take steps at your request prior to entering into a contract, or to communicate with you about our services. The legal basis for adding your contact details to our HubSpot CRM is our legitimate interest under Art. 6 Para. 1 lit. f) GDPR in maintaining an organized record of our business contacts. You may object to this as described in Section 2.

3.3 Server data (log files)

For technical reasons, the following data sent by your internet browser to us or to our server provider is collected, especially to ensure a secure and stable website: the type and version of your browser, your operating system, the website from which you came (referrer URL), the pages of our website visited, the date and time of your visit, and the IP address from which you visited our website.

The data thus collected is temporarily stored, but not in association with any other of your data.

The legal basis for this storage is Art. 6 Para. 1 lit. f) GDPR. Our legitimate interest lies in the improvement, stability, functionality, and security of our website.

The data is deleted within no more than seven days, unless continued storage is required for evidentiary purposes, in which case all or part of the data is excluded from deletion until the investigation of the relevant incident is finally resolved.

3.4 Cookies

Cookies are small text files placed on your device to store standard internet log information and visitor behaviour information.

Strictly necessary cookies - cookies that are required for the operation of the website - are used on the basis of § 25 Para. 2 TDDDG and our legitimate interest, Art. 6 Para. 1 lit. f) GDPR.

One such strictly necessary cookie is vizrm_crm, a first-party cookie (stored for up to 90 days) that remembers which CRM you selected - HubSpot or Pipedrive - so that we can show you the relevant examples and product screenshots on your next visit. It contains only your CRM choice and how it was set; it does not track you, is never shared with third parties, and is not used for analytics or advertising. It is set without consent because it is technically necessary to provide the CRM-specific view you requested.

Analytics cookies (currently Amplitude, see Section 3.5) are only set with your prior consent, obtained via our cookie consent banner, in accordance with § 25 Para. 1 TDDDG and Art. 6 Para. 1 lit. a) GDPR. You can withdraw your consent at any time with effect for the future via the cookie settings on our website.

You can also refuse or delete cookies via your browser settings. The steps required vary by browser; please consult your browser's help function or documentation. If you prevent or restrict the installation of cookies, not all functions of our website may be fully usable.

For general information about cookies, visit allaboutcookies.org.

3.5 Web analytics with Amplitude

We use Amplitude on our website to understand visitor behaviour and improve our website. Amplitude collects information such as pages visited, clicks, time on page, browser type, and IP address (anonymised). This data is used solely for analytics purposes.

Amplitude is a service of Amplitude, Inc., 631 Howard Street, Floor 5, San Francisco, CA 94105, USA. Data may be transferred to the United States; such transfers rely on the European Commission's Standard Contractual Clauses. Amplitude's privacy policy is available at https://amplitude.com/privacy.

The legal basis for this processing is your consent, Art. 6 Para. 1 lit. a) GDPR, obtained via our cookie consent banner. You can withdraw your consent at any time with effect for the future via the cookie settings on our website.

We do not currently use Google Analytics or any other analytics service on the website. Should we introduce an additional analytics service in the future, it will only be activated with your prior consent via the cookie consent banner, and this policy will be updated beforehand.

4. Our social media presences

4.1 Online presences

We maintain online presences on the following networks to present our company and services and to communicate with customers and prospects. When you visit these presences, user data may be processed outside the European Union, particularly in the United States, which may increase risks for users (for example, subsequent access to your data may be more difficult). We do not have access to this data; access is available only to the respective network.

• YouTube - a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, a subsidiary of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Privacy policy: https://policies.google.com/privacy
• LinkedIn - a service of LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland, a subsidiary of LinkedIn Corporation, 1000 W. Maude Avenue, Sunnyvale, CA 94085, USA. Privacy policy: https://www.linkedin.com/legal/privacy-policy

4.2 Social media links via graphics

We integrate the social media sites above into our website via linked graphics. The graphics are stored on our own servers, which prevents any automatic connection to the servers of these networks for their display. Only by clicking on the corresponding graphic will you be forwarded to the respective network.

Once you click, that network may record information about you and your visit to our site, such as your IP address, the date and time of your visit, and the page visited. It cannot be ruled out that such data will be processed in the United States. If you are logged into your user account on that network, the network operator might assign the information collected about your visit to your personal account. If you interact by clicking Like, Share, etc., this information can be stored in your personal user account and possibly posted on the respective network. To prevent this, log out of your social media account before clicking on the graphic. The networks also offer settings you can configure accordingly.

4.3 Links to other websites

Our website contains links to other websites. This privacy policy applies only to our website - if you click on a link to another website, you should read their privacy policy.

5. Changes, contact, and supervisory authority

Changes to this privacy policy

We keep this privacy policy under regular review and place any updates on this page. This policy was last updated on 7 July 2026.

How to contact us

If you have any questions about this privacy policy, the data we hold on you, or you would like to exercise one of your data protection rights, please contact us at info@vizrm.com.

How to contact the supervisory authority

You may lodge a complaint with any data protection supervisory authority, in particular in the EU member state of your habitual residence, your place of work, or the place of the alleged infringement (Art. 77 GDPR). The supervisory authority responsible for our company is:

Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Promenade 18, 91522 Ansbach, Germany - https://www.lda.bayern.de