Privacy Policy

The controller responsible for the processing of personal data on this website is:

Sellrock UG (haftungsbeschränkt) Kölner Str. 43a 90425 Nürnberg Germany

Email: [email protected] Website: https://former.cc

Depending on how you use our services, we process the following categories of personal data:

• Account data: name, email, password (hashed), company affiliation, role • Usage data: IP address, browser type, pages visited, timestamps • Content data: forms, submissions, protocols, uploaded documents, photos, signatures and other data you enter into the platform • Communication data: messages sent to our support or through forms

We process your data for the following purposes:

• Providing and operating the platform (Art. 6(1)(b) GDPR – contract performance) • Security, abuse prevention and audit logging (Art. 6(1)(f) GDPR – legitimate interest) • Billing and accounting (Art. 6(1)(c) GDPR – legal obligation) • Customer communication and support (Art. 6(1)(b) and (f) GDPR) • Product analytics and improvement (Art. 6(1)(a) GDPR – consent, where applicable)

Former is hosted on servers within the European Union. We engage carefully selected processors under data processing agreements (Art. 28 GDPR), including infrastructure, email, analytics and payment providers. A current list of our processors is available on request.

We use strictly necessary cookies to operate the platform (e.g. authentication and language preference). According to § 25 para. 2 TTDSG/DDG these cookies do not require consent.

With your explicit consent under Art. 6(1)(a) GDPR and § 25 para. 1 TTDSG/DDG we additionally use Google Analytics 4, a web analytics service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). Google processes the collected data also on behalf of Google LLC, USA. Google Analytics sets cookies (in particular _ga and _ga_<ID>) and collects information such as IP address, browser type, pages visited and timestamps in order to produce pseudonymous usage statistics. IP addresses are processed in a truncated form.

For any transfer of personal data to the United States we rely on the European Commission's adequacy decision under the EU-US Data Privacy Framework; Google LLC is certified under this framework.

You can withdraw your consent at any time with effect for the future – on the /cookies page or by deleting the relevant cookies in your browser. For details on the cookies we use and how to manage them, please see our cookie policy.

We do not sell personal data. We only share data with processors bound by contract, or when required by law. Where data is transferred outside the European Economic Area, we ensure appropriate safeguards (e.g. Standard Contractual Clauses).

We keep personal data only as long as necessary for the purposes described above or required by statutory retention periods (typically 6 to 10 years for accounting records under German commercial and tax law). Account data is deleted on request, subject to these obligations.

Under the GDPR you have the right to:

• Access (Art. 15) • Rectification (Art. 16) • Erasure (Art. 17) • Restriction of processing (Art. 18) • Data portability (Art. 20) • Object to processing (Art. 21) • Withdraw consent at any time, without affecting prior processing • Lodge a complaint with a supervisory authority

To exercise your rights, contact us at [email protected].

We apply technical and organisational measures to protect your data, including TLS encryption in transit, encryption at rest, role-based access control, audit logs and regular backups.

We may update this privacy policy to reflect changes in our services or the law. The current version is always available at this URL. Material changes will be announced in advance within the product.