Privacy Policy

Last Updated: 2026-03-17

Welcome to Promethee-Cloud. We believe in "Privacy by Design." We have built this application to collect as little personal data as possible, and we do not use tracking tools, advertising networks, or third-party Content Delivery Networks (CDNs).

This Privacy Policy explains how we collect, use, and protect your personal data when you use our web application, in accordance with the General Data Protection Regulation (GDPR).

1. The Data Controller

The entity responsible for processing data on this website (the "Data Controller") is:

Erik Pohl
c/o Impressumservice Dein-Impressum
Stettiner Str. 41
35410 Hungen, Germany
Email: promethee-cloud@posteo.de

2. What Data We Collect and Why

We only collect data that is strictly necessary to run the application securely and provide our services to you.

A. Server Log Files

When you visit our application, the server automatically records standard information sent by your browser. This data includes:

  • Your IP address
  • Browser type and version
  • Operating system
  • Time and date of your visit
  • Pages accessed
  • Purpose & Legal Basis: This data is required to deliver the website to your browser, ensure server stability, and detect cyberattacks or fraud. The legal basis for this processing is our legitimate interest (Art. 6(1)(f) GDPR) in operating a secure and stable application.
  • Data Retention: Server logs are automatically deleted after 14 days.

B. User Account Data

To use our application, you must create an account. We collect:

  • Email address
  • Password (which is securely hashed; we cannot see your actual password)
  • Entered or uploaded data for promethee.
  • Purpose & Legal Basis: We process this data to create and manage your account, authenticate your logins, and provide the core functionality of our app. The legal basis is the performance of a contract with you (Art. 6(1)(b) GDPR).
  • Data Retention: We keep your account data for as long as your account exists. If you choose to delete your account, your data will be permanently erased within 30 days, unless legal retention obligations require otherwise.

3. Cookies

We do not use tracking, analytics, or marketing cookies. We only use strictly necessary cookies to ensure the app functions properly:

  • Session & Authentication Cookies: When you log in, we set a temporary cookie to keep you authenticated as you navigate the app. If you check the "Remember Me" box, we set a cookie to keep you logged in for future visits.
  • Because these cookies are strictly necessary to provide the service you explicitly requested, they do not require prior consent under the ePrivacy Directive.

4. Data Sharing and Hosting

We do not sell, trade, or share your personal data with third parties for marketing purposes. Furthermore, all our assets (fonts, scripts, etc.) are hosted locally, meaning your IP address is not leaked to external third-party services (like Google Fonts or external CDNs).

Hosting Provider
Our application is hosted on servers provided by Contabo, located in Germany. We have a Data Processing Agreement (DPA) in place with our host to ensure they only process data according to GDPR standards and our instructions.

5. Data Security

We implement strict security measures, including SSL/TLS encryption (HTTPS) for all data in transit, to prevent unauthorized access to your personal data. All passwords are encrypted using strong cryptographic hashing algorithms.

6. Your Rights Under the GDPR

If you are located in the European Economic Area (EEA), you have the following rights regarding your personal data:

  • Right to Access: You can request a copy of the personal data we hold about you.
  • Right to Rectification: You can ask us to correct or update inaccurate data.
  • Right to Erasure: You can ask us to delete your account and personal data ("Right to be forgotten").
  • Right to Restrict Processing: You can request that we limit how we process your data.
  • Right to Data Portability: You can request your data in a structured, commonly used, and machine-readable format.
  • Right to Object: You can object to data processing based on our legitimate interests.

To exercise any of these rights, simply contact us at promethee-cloud@posteo.de.

Right to Lodge a Complaint
If you believe that our processing of your personal data violates data protection laws, you have the right to lodge a complaint with a supervisory authority, particularly in the EU Member State of your habitual residence, place of work, or the place of the alleged infringement.