Legal Information

1. General Information

The protection of your personal data is of particular concern to us. We therefore process your data exclusively on the basis of legal provisions, in particular the General Data Protection Regulation (GDPR). This privacy policy informs you about which personal data we collect, how we use it, and what rights you have.

2. Data Controller under GDPR

3. Collection and Processing of Personal Data

We only process personal data when necessary, e.g. for:

• Provision of our platform and back office
• Management of user accounts
• Communication with partners
• Technical security and system stability

Processed data may include: Name, email address, login and account data, IP address, usage and access data.

4. Registration and Use of the Platform

When registering on PreNet, the data you enter is processed to create a user account, enable access to the back office, and correctly map your network structure.

Processing is based on Art. 6(1)(b) GDPR (contract performance).

5. Data Transfer during System Changes

PreNet enables the transfer of structure data during system changes or project migrations. In this context, personal data (e.g. name, email address, structure position) may be transferred to a new system.

Transfer only occurs with your explicit consent (opt-in procedure) pursuant to Art. 6(1)(a) GDPR. You have the right to withdraw your consent at any time with effect for the future.

Data is only transferred to a new system operator who meets the data protection requirements of the GDPR. After the transfer has been completed, the respective new system operator is independently responsible within the meaning of the GDPR for the further processing of the transferred data. No data transfer will take place without your explicit consent.

6. Email Communication

We use your email address to inform you about important information regarding your user account, system changes, security warnings, and relevant platform updates.

This communication is based on Art. 6(1)(b) GDPR (contract performance) and Art. 6(1)(f) GDPR (legitimate interests).

Newsletters or promotional emails are only sent with your explicit consent pursuant to Art. 6(1)(a) GDPR. You may withdraw your consent at any time.

7. Cookies and Tracking Technologies

Our website uses cookies. These are small text files stored on your device that contain certain information.

Technically necessary cookies: These cookies are essential for website operation (e.g. session cookies for login functionality, language settings). Processing is based on Art. 6(1)(f) GDPR.

Optional cookies: Analytics and performance cookies are only set with your explicit consent (Art. 6(1)(a) GDPR). You may withdraw your consent at any time.

More information can be found in our Cookie Policy.

8. Disclosure of Data to Third Parties

Your personal data will only be disclosed to third parties in the following cases:

• You have given your explicit consent (Art. 6(1)(a) GDPR)
• Disclosure is necessary for contract performance (Art. 6(1)(b) GDPR)
• There is a legal obligation (Art. 6(1)(c) GDPR)
• Disclosure is necessary for legitimate interests (Art. 6(1)(f) GDPR)

Recipients may include: IT service providers, payment service providers, and new platform operators during system changes (only with your consent).

9. Data Transfer to Third Countries

Transfer of personal data to countries outside the EU/EEA only occurs if appropriate safeguards pursuant to Art. 44 ff. GDPR are in place.

• EU Commission adequacy decision
• EU Standard Contractual Clauses
• Your explicit consent

If data transfers to third countries occur, we will inform you separately.

10. Storage Duration

We store your personal data only as long as necessary for the processing purposes or as required by legal retention obligations.

Account data: deleted within 30 days after account termination.

Contract data: retained for up to 10 years according to commercial and tax law.

Communication data: stored for the duration of the business relationship.

Log data (IP addresses): stored for a maximum of 7 days.

11. Your Rights – Information and Correction

You have the right to receive free information about your stored personal data at any time (Art. 15 GDPR):

• Processing purposes
• Categories of data processed
• Recipients or categories of recipients
• Planned storage duration
• Rights to correction, deletion, restriction or objection

You also have the right to correction of inaccurate data (Art. 16 GDPR).

12. Your Rights – Deletion ("Right to be Forgotten")

You have the right to immediate deletion of your data (Art. 17 GDPR) if:

• The data is no longer necessary for its original purposes
• You withdraw your consent
• You object to the processing
• The data was processed unlawfully
• There is a legal obligation to delete

The right to deletion does not exist if processing is necessary for fulfilling legal obligations.

13. Your Rights – Restriction and Data Portability

Restriction of processing (Art. 18 GDPR): You have the right to request restriction of processing if:

• You dispute the accuracy of the data
• The processing is unlawful
• We no longer need the data but you need it for legal claims
• You have lodged an objection

Data portability (Art. 20 GDPR): You have the right to receive your data in a structured, commonly used and machine-readable format.

14. Your Rights – Objection and Withdrawal

Right to object (Art. 21 GDPR): You have the right to object to processing at any time for reasons relating to your particular situation.

If processing is for direct marketing purposes, you have an unrestricted right to object at any time.

Withdrawal of consent: You may withdraw any consent given at any time with effect for the future.

Please direct your objection or withdrawal to: datenschutz@prenet.io

15. Right to Complain to a Supervisory Authority

You have the right to complain to a data protection supervisory authority about processing (Art. 77 GDPR).

The supervisory authority responsible for us is:

You may also contact the supervisory authority of your habitual residence.

16. Data Security

We employ technical and organizational security measures to protect your data.

• Data transmission encryption via TLS/SSL
• Password hashing with modern algorithms (bcrypt)
• Regular security updates and system monitoring
• Access restrictions and logging
• Two-factor authentication (optional)

Our security measures are regularly reviewed.

17. Changes to this Privacy Policy

We reserve the right to adapt this privacy policy as needed.

For material changes, we will inform you through appropriate channels.

The date of the last update can be found at the end of this privacy policy.

18. Final Provisions

This privacy policy is governed by German law.

If individual provisions are invalid, the validity of the remaining provisions remains unaffected.