Privacy Policy

1. Controller and scope

This policy concerns the informational REL31 website and communications about REL31. The technology is in development. This website has no shop or user accounts. REL31 inquiries use a dedicated Formspark form and the REL31 contact mailbox hello@rel31.com.

2. Hosting and technical server processing

Public hosting is planned through Cloudflare Pages, provided by Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA. When the public website is accessed through Cloudflare, the provider processes connection and request information such as IP address, requested URL, time, browser information and security-related data to deliver files and protect the service.

This processing is based on our legitimate interest in providing a reliable and secure website under Article 6(1)(f) GDPR. Cloudflare operates an international network; processing is not restricted to Germany or the EU. Its Data Processing Addendum describes processing obligations and transfer safeguards, including standard contractual clauses where applicable. See also Cloudflare's privacy policy. Provider-controlled security logs and technical retention depend on the service and purpose; they are separate from our inquiry deletion routine.

We do not enable Cloudflare Web Analytics or visitor analytics.

3. Contact inquiries and purposes

If you choose to contact us, your contact details and message are used to read, respond to and follow up on your REL31 inquiry. The form requires an email address and a message; name and organization are optional. A topic selection distinguishes general inquiries from investor or strategic-partnership discussions. Messages include the REL31 project identifier and the selected inquiry topic.

Contact is voluntary. Without the required fields, the form cannot submit an inquiry. You may instead write directly to hello@rel31.com. Please do not include sensitive personal information, children's data, payment details or unnecessary information about other people.

General project correspondence relies on the legitimate interest in responding to communications under Article 6(1)(f) GDPR. Article 6(1)(b) applies only where an inquiry actually concerns a contract or steps requested by you before entering a contract. No newsletter subscription or marketing consent is bundled into contact submission.

4. Contact form: Formspark

The form sends your entries directly to Formspark, operated by Trampoline Software SRL, Belgium, using a dedicated REL31 submission endpoint. Form notifications are sent to hello@rel31.com. These notifications contain the submitted contact details and message. Formspark's built-in automatic spam screening is enabled. No optional external CAPTCHA service or integration such as Google Sheets, Slack or a webhook is enabled for this form.

Formspark's Data Processing Agreement identifies it as processor of form submissions. It describes submitted fields, IP address, approximate location and request metadata. Submission content is retained until the customer deletes it, with a further 30-day recovery period; the published schedule lists 12 months for IP/location data and filtered submissions, and seven days for export files. These provider periods are separate from the operator routine below. The agreement is stated to form part of its terms without a separate signature.

The client omits credentials and the referrer, but this does not conceal your IP address or the Origin information required for the request. It does not persist form contents in browser storage or log them. A local honeypot check rejects filled trap fields; it is not a complete spam defence. No CAPTCHA or third-party form widget is loaded.

5. REL31 email mailbox: STRATO

The REL31 mailbox uses STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany, as the provider of hello@rel31.com. REL31 inquiries are received and answered through this dedicated mailbox. Messages, sender and recipient details, subjects, contents and technical delivery information are processed there to support correspondence.

STRATO's Data Processing Agreement describes processing for contracted services. Its duration depends on the actual service and processing; it is not a fixed deletion deadline for every email. Technical backups, service logs and any mailbox-specific filtering must be considered separately from copies the operator can delete. Further information is available in STRATO's privacy information.

6. Recipients and international transfers

Inquiries are available to the responsible operator and the service providers involved in receiving, storing and delivering them. Access is limited to the responsible operator and service providers for these purposes.

Formspark's current subprocessor register lists AWS in Ireland for hosting and delivery, and Hetzner in Germany for IP-based location processing. It also lists US processing for error reporting and dashboard functions, with recipient-specific safeguards, and additional recipients when optional features are enabled. Operator-account payment or sign-in activity should not be treated as proof that every visitor's message is sent to those services.

No exclusively EU processing is promised. Where international transfers require safeguards, the relevant provider arrangements include adequacy decisions or standard contractual clauses, as applicable to the recipient and processing. You can request information about applicable safeguards through hello@rel31.com.

7. Retention and deletion

We retain inquiry correspondence only as long as needed to handle and appropriately follow up on the matter. Completed general inquiries are deleted no later than six months after correspondence ends, and sooner if their purpose has ended. A specific legal obligation or necessary legal claim may justify longer retention; exceptions and ongoing matters are assessed individually. No blanket commercial or tax retention period applies to every project inquiry.

The operator performs a monthly manual review, targeting completed inquiries at five months to meet the six-month maximum. This covers REL31 records in Formspark, STRATO and operator-controlled exports and local copies. The routine is manual, not an automatic deletion feature. Provider-controlled logs, recovery periods and backups may remain for their separately applicable periods after a visible message is deleted.

8. Cookies, analytics and external links

This REL31 website does not implement visitor analytics, marketing tracking, advertising cookies, fingerprinting or consent-management scripts. The website's own scripts do not write cookies, localStorage or sessionStorage. Fonts use the operating system; visual assets, styles and scripts are served locally. No optional tracking technology requiring a consent choice is implemented. This describes the website-controlled code; hosting and form providers may separately process technical request information and perform security or spam checks as described above. It does not mean that infrastructure providers perform no technical processing.

The form contacts Formspark only when you submit. The website code does not save a permanent draft; unsent or failed entries remain in the current page until cleared or the page is left. Browser autofill and history are controlled separately by your browser.

Links to provider information load no embedded content. Following them opens the external service under its own privacy terms. A mail link opens your chosen email application.

9. Your rights and supervisory authority

Subject to the applicable legal conditions, you may request access, correction, deletion, restriction or portability of your personal data. You may object to processing based on legitimate interests for reasons relating to your situation. Where processing relies on consent, you may withdraw it for the future without changing the lawfulness of earlier processing. Contact the controller using the details above.

No solely automated decisions with legal or similarly significant effects are implemented by this website. The form supports human correspondence.

You may complain to a supervisory authority, including where you live or work or where an alleged infringement occurs. For the operator in Baden-Württemberg, see the complaint service of the State Commissioner for Data Protection and Freedom of Information Baden-Württemberg. The general rights framework is set out in the General Data Protection Regulation.