1. Subject Matter of this Privacy Policy
The protection of your personal data is of paramount importance to us. We collect, process, and use your personal data in accordance with the provisions of this privacy policy and in compliance with the EU General Data Protection Regulation (GDPR). Below, we inform you about the nature, scope, and purpose of the collection and use of personal data, as well as our identity and your rights as a data subject.
2. Data Controller / Service Provider
The data controller responsible for the processing of your personal data on this website within the meaning of the GDPR is:
For any questions or concerns regarding this privacy policy or data protection at Valesbridge, please contact service@valesbridge.com or write to our postal address.
3. Collection and Use of Personal Data
(1) Personal data means any information relating to an identified or identifiable natural person. This includes your name, email address, telephone number, or your IP address.
(2) The scope and nature of data processing depends on whether you visit our website for informational purposes only or contact us via our contact form.
a) Informational Website Use & Server Logfiles:
When accessing our website for informational purposes, the servers of our cloud hosting provider automatically collect connection information transmitted by your browser:
- Date and time of retrieval
- Name and URL of the retrieved file
- Referrer URL (the previously visited page)
- Browser type and operating system
- Data volume transmitted and HTTP status code
- IP address of the requesting device
This data is processed to ensure system stability, security, and defense against malicious network attacks. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure and reliable website delivery).
b) Inquiries via Contact Form or Email:
When you submit an inquiry via our contact form or send us an email, we process the data provided (name, email address, optional phone number, topic, and message).
This information is processed exclusively for handling your inquiry and following up on client communication. Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures / contract performance) and Art. 6(1)(f) GDPR (legitimate interest in responsive client service).
4. Web Hosting & Content Delivery Network (Vercel)
We host our website with cloud platform provider Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA.
When you visit our website, connection data (including your IP address) is routed and processed through Vercel's global edge network to deliver content swiftly and securely. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in optimal performance and stability).
Data transfers to the United States are governed by EU Standard Contractual Clauses (SCC) and the EU-U.S. Data Privacy Framework. We have entered into a Data Processing Agreement (DPA) with Vercel Inc. in accordance with Art. 28 GDPR. For further information, visit: https://vercel.com/legal/privacy-policy.
5. Bot Protection and Abuse Prevention (Vercel BotID)
To secure our contact form and API endpoints against malicious scrapers, credential abuse, and Denial of Service (DoS) attacks, we deploy Vercel BotID by Vercel Inc.
Vercel BotID evaluates technical request attributes (such as browser headers, user agent, interaction timing, and pattern metrics) to distinguish legitimate visitors from automated scripts without requiring intrusive captcha puzzles.
Legal basis: Art. 6(1)(f) GDPR. Our legitimate interest lies in defending against automated spam, protecting server infrastructure, and ensuring service integrity.
6. Email Delivery via Resend
For the reliable technical transmission of contact form submissions to our concierge desk, we utilize the transactional email service Resend, operated by Resend Inc., 2261 Market Street #5039, San Francisco, CA 94114, USA.
When you submit the contact form, your inquiry data is transmitted encrypted to Resend's REST API and dispatched directly to our mailbox (service@valesbridge.com). Resend acts strictly as a data processor under our instruction.
Legal basis: Art. 6(1)(b) GDPR (contract / pre-contractual fulfillment) and Art. 6(1)(f) GDPR (legitimate interest in reliable client communication). A Data Processing Agreement incorporating EU Standard Contractual Clauses (SCC) has been concluded with Resend Inc.
7. Use of Cookies & Local Font Hosting
(1) No Tracking or Marketing Cookies: We do not deploy any marketing, advertising, or analytical tracking cookies on our website.
(2) Strictly Necessary Session Continuity Cookie: To prevent layout flicker when switching languages between English and German, a single technical session cookie (valesbridge_lang_switching) is stored. This cookie contains no personal identifiers and expires automatically after 5 seconds. Pursuant to Section 25(2) No. 2 of the German TDDDG, no cookie consent banner is required.
(3) Local Font Hosting: All typography (Playfair Display, Montserrat) is hosted locally from our web server. No client-side connections to Google Fonts servers are initiated, preventing IP disclosure to third parties.
8. SSL / TLS Encryption
This website uses end-to-end SSL/TLS encryption for security and to protect confidential transmissions such as concierge contact inquiries. An encrypted connection is indicated by the “https://” prefix and lock icon in your browser address bar.
9. Protection of Minors
Individuals under the age of 18 should not submit personal data without parental or guardian consent. We do not knowingly collect personal data from minors.
10. Job Applications
If you submit application documents electronically, your personal data will be processed solely to conduct the recruitment process. In the absence of an employment agreement, dossiers are erased within six months after communication of the decision, unless statutory retention obligations apply.
11. Transfer of Data
Personal data is never sold or transferred for commercial purposes. Transfers occur strictly within the confines of statutory authorizations, to contracted processors under Art. 28 GDPR, or where required to fulfill our contractual commitments.
12. Duration of Storage & Erasure
We retain personal data only as long as necessary to achieve the respective purpose or as dictated by statutory retention obligations (e.g. tax and commercial codes). Thereafter, data is routinely deleted in compliance with data privacy standards.
13. Your Rights as a Data Subject
Under the GDPR, you have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), objection (Art. 21), and withdrawal of consent (Art. 7(3) GDPR).
To exercise your rights, simply send an email to service@valesbridge.com or write to the postal address specified in Section 2 or our Legal Notice.
You also retain the right to lodge a complaint with the competent supervisory authority:
14. Data Security
We maintain comprehensive technical and organizational measures to safeguard your personal data against unauthorized access, loss, manipulation, or destruction in compliance with state-of-the-art standards.
15. Links to External Websites
We assume no responsibility for external links or third-party web content beyond our control.
16. Amendments to this Privacy Policy
This Privacy Policy is currently effective. Due to future technical developments or legislative changes, modifications may become necessary. The latest version can always be accessed and printed directly from this website.