Privacy Policy

1. Data Controller

The entity responsible for processing personal data on this website within the meaning of the GDPR is:

2. Data collected when you visit this site

When you access the site, our web server automatically processes technically necessary information: IP address, date and time, requested URL, HTTP status code, referrer and user agent. This processing is necessary to deliver the site reliably and securely and is carried out on the basis of our legitimate interest (Art. 6(1)(f) GDPR). Logs are deleted or anonymised after 14 days at the latest.

3. Demo environment (demo.pacioli.systems)

At demo.pacioli.systems we operate a public alpha demo of the LUCA software. When you access and use the demo, we generate technically necessary server and application logs: IP address, date and time, requested URL/endpoint, HTTP status code, referrer, user agent, and application action logs (for example click paths and inputs within the demo tenants). We use these logs solely to identify and fix bugs and stability issues in the alpha version.

No marketing analytics, advertising tracking, or profiling takes place in the demo environment. Plausible Analytics, HubSpot and comparable services are not active on demo.pacioli.systems.

Legal basis: our legitimate interest in functional and secure software (Art. 6(1)(f) GDPR). Logs are deleted or anonymised after 30 days at the latest. The demo database is reset entirely at irregular intervals; any data you enter in the demo is deleted along with it.

4. Cookies and consent management

By default we do not set any cookies. Optional services (see sections 5 and 6) are only loaded after you have given your consent through our consent banner. We store your choice in a single technically necessary cookie (luca-consent, 180-day storage). You may withdraw your consent at any time via "Cookie settings" in the footer.

5. Analytics with Plausible

With your consent we use Plausible Analytics to anonymously measure site usage. Plausible does not set cookies, does not store IP addresses in the clear, and does not process personal data. We operate the instance ourselves within the EU. Legal basis: your consent (Art. 6(1)(a) GDPR).

6. Marketing tracking with HubSpot

With your consent we use HubSpot for forms and campaign attribution. HubSpot sets cookies (including hubspotutk, __hstc, __hssc, __hssrc) and processes your IP address and device data. Provider: HubSpot Ireland Ltd., Dublin (EU hosting). Further information: legal.hubspot.com/privacy-policy. Legal basis: your consent (Art. 6(1)(a) GDPR).

7. Waitlist form and double opt-in

If you register via the form at /en/waitlist, we process the email address you provide and — if supplied — your company name solely for the purpose of contacting you about LUCA test access. We do not collect any further fields. Transmission is TLS-encrypted to our workflow server (n8n, EU hosting).

We use a two-step double opt-in procedure. After you submit the form, we send a confirmation email containing a confirmation link to the address you provided. Your signup only becomes active once you click that link within 24 hours. The link contains a signed, time-limited token; we do not store these tokens in a separate database. If the link is not clicked, the token expires automatically and your submission is not processed further.

Legal basis: your consent (Art. 6(1)(a) GDPR), given by ticking the consent checkbox and clicking the confirmation link. You can withdraw your consent at any time by emailing kontakt@pacioli.systems. Confirmed entries are deleted after contact has been made, or at the latest 12 months after confirmation if no business relationship is established.

8. Self-hosted fonts

We use exclusively self-hosted fonts from the @fontsource project (Geist Variable). No requests are made to external font servers.

9. Hosting

This website is operated on servers within the EU. A data-processing agreement (AVV) in accordance with Art. 28 GDPR is in place with the hosting provider.

10. Your rights

You have the following rights towards us:

• Right of access to your processed data (Art. 15 GDPR)
• Right to rectification of inaccurate data (Art. 16 GDPR)
• Right to erasure — "right to be forgotten" (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object to processing (Art. 21 GDPR)
• Right to withdraw consent with effect for the future (Art. 7(3) GDPR)
• Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)

The competent supervisory authority is Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg (State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg).

11. SSL/TLS encryption

This site is served exclusively over an encrypted connection. You can recognise an active TLS connection by the padlock symbol and https:// prefix in your browser's address bar.

12. Contact

For questions about data protection or to exercise your rights, please contact us at kontakt@pacioli.systems.

13. Changes

We reserve the right to adapt this privacy policy to changes in the legal framework or to technical circumstances. The current version is always available on this page.