Privacy Policy

Last updated: May 2026

1. Controller

The controller responsible for the processing of personal data on this website is:

Supora UG (haftungsbeschränkt)
Hergoldingerstraße 15a
85599 Parsdorf
Germany

Email: contact@supora.one
Managing Director: Donat Gashi

2. Website Hosting and Visitor Data

This website is hosted and technically operated by Squarespace.

When you visit this website, Squarespace processes personal data required to provide, secure and operate the website. This may include information about your browser, network and device, webpages you visited before coming to this website, webpages you view on this website, your IP address, access times and technical log data.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is the secure, stable and efficient operation of this website.

Squarespace may process data outside the European Economic Area, including in the United States. Where required, such transfers are based on appropriate safeguards, including the EU-U.S. Data Privacy Framework or standard contractual clauses.

3. Cookies, Analytics and Advertising Cookies

This website uses cookies and similar technologies provided by Squarespace.

Necessary cookies are always used because they allow Squarespace, our hosting platform, to securely provide this website and enable core website functionality. These cookies cannot be rejected through our cookie banner because the website would not function properly without them.

The legal basis for storing necessary cookies is § 25(2) TDDDG. The legal basis for the related processing of personal data is Art. 6(1)(f) GDPR. Our legitimate interest is the secure and reliable operation of this website.

With your consent, this website uses Squarespace performance and analytics cookies to understand website traffic and activity.

For this purpose, Squarespace may process personal data including information about your browser, network and device, webpages you visited before coming to this website, your IP address, pages visited on this website, clicks, internal links, scrolling, searches and timestamps.

The legal basis for performance and analytics cookies is § 25(1) TDDDG. The legal basis for the related processing of personal data is Art. 6(1)(a) GDPR.

The cookie banner may also show an advertising cookie category. We currently do not use advertising cookies or advertising tracking tools. If advertising cookies are used in the future, they will only be used with your consent.

You can reject or manage non-essential cookies through the cookie banner. You may withdraw your consent at any time with effect for the future.

Further information about the cookies used by Squarespace is available here:
https://support.squarespace.com/hc/de/articles/360001264507-%C3%9Cber-die-von-Squarespace-verwendeten-Cookies

4. Contact Forms and Email Communication

If you submit information through a contact form on this website or contact us by email, we process the information you provide in order to receive, track and respond to your enquiry. This may include your name, email address, message content and any other information you choose to provide.

Form submissions are processed through Squarespace, our website hosting provider. Depending on the form configuration, submissions may also be stored in Squarespace’s form or contact management features.

Form submissions are forwarded to our business email inbox hosted by Zoho Mail. Zoho Mail processes email data to provide email hosting, delivery, storage and security functions.

We do not use Zapier, Mailchimp or Google Drive for form submissions.

The legal basis is Art. 6(1)(b) GDPR if your enquiry relates to a contract or pre-contractual communication. In all other cases, the legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is responding to enquiries and managing business communication.

5. Recipients

Personal data may be processed by Squarespace as our website hosting, technical, form and analytics provider, and by Zoho Mail as our email service provider.

Data may also be disclosed to authorities, courts, tax advisors or legal advisors where legally required or necessary to assert, exercise or defend legal claims.

We do not sell personal data.

6. Retention

We store personal data only for as long as necessary for the relevant purpose or as required by law.

Contact enquiries are stored for as long as necessary to process the enquiry and any related follow-up communication. Business and accounting-related data may be stored for the applicable statutory retention periods.

7. Your Rights

You have the right to request access to your personal data, rectification, erasure, restriction of processing, data portability and, where applicable, objection to processing based on Art. 6(1)(f) GDPR.

Where processing is based on consent, you may withdraw your consent at any time with effect for the future.

You also have the right to lodge a complaint with a data protection supervisory authority.

8. Supervisory Authority

The competent supervisory authority for private companies in Bavaria is:

Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 18
91522 Ansbach
Germany

9. No Automated Decision-Making

We do not use automated decision-making or profiling within the meaning of Art. 22 GDPR.