Privacy policy

ESIEBENX Digital Trust GmbH

Ricarda-Huch-Straße 9A

55122 Mainz, Germany

Managing Director: Júlio César Duque de Lima

Telephone: +49 176 28636737

Email: hello@esiebenx.com

We process personal data only to provide this website and Digital Trust securely, to operate the workspaces you create, to respond to enquiries, and to meet legal duties. This site uses no advertising technologies and no analytics or tracking tools.

Our hosting provider processes technically necessary data for delivery, security and stability. Requests from Germany are normally served from European edge locations. The legal basis is Art. 6(1)(f) GDPR. Where processing takes place in a third country, it is safeguarded by EU Standard Contractual Clauses.

Provider: Lovable (Lovable Inc.)

Delivery: globally distributed edge network with European edge locations

Privacy information: lovable.dev/privacy

Safeguards for third-country transfers: EU Standard Contractual Clauses (Art. 46(2)(c) GDPR)

Data may include IP address, access time, requested page, referrer, browser, operating system and internet provider. The legal basis is Art. 6(1)(f) GDPR and our legitimate interest in secure, stable delivery and the prevention of attacks.

Retention: up to 7 days, then deleted automatically.

To use Digital Trust you create an account and a company workspace. We process the following data on the basis of contract performance, Art. 6(1)(b) GDPR:

• Account data: your name, email address and password (stored only as a cryptographic hash), and your role in the workspace.
• Workspace data: company name, industry, billing contact, subscription details and the governance records you enter — AI systems, risk assessments, controls, evidence documents and activity logs.
• Evidence documents: uploaded files are stored in a private, access-controlled storage area that only members of your workspace can reach.
• Invitations: when an administrator invites a colleague, we process their name and email address to deliver the invitation.
• Authentication and security data: sign-in sessions and security-relevant events, to protect your workspace.

We do not use your data for advertising, profiling, or training any artificial intelligence model. Your workspace records belong to your organisation and are not shared with other customers.

Selecting an email address opens your email application. Data reaches us only when you send a message. The legal basis is Art. 6(1)(b) GDPR for contractual communication, otherwise Art. 6(1)(f) GDPR.

Data goes only to necessary recipients, contracted providers and authorities. Transfers outside the EU or EEA follow Art. 44 et seq. GDPR.

TLS protects transmitted content; an encrypted connection uses “https://”.

Data is retained only as long as required, subject to legal retention duties and legal claims. Workspace records remain available while your subscription is active; after termination they are deleted in line with our deletion concept, unless statutory retention periods require otherwise.

• Access (Art. 15)
• Rectification (Art. 16)
• Erasure (Art. 17)
• Restriction (Art. 18)
• Portability (Art. 20)
• Objection (Art. 21)
• Withdrawal of consent (Art. 7(3))
• Complaint (Art. 77)

State Commissioner for Data Protection and Freedom of Information Rhineland-Palatinate

Hintere Bleiche 34

55116 Mainz, Germany

www.datenschutz.rlp.de

We are neither willing nor obliged to participate in dispute resolution proceedings before a consumer arbitration board.

We do not use advertising cookies or analytics tracking. Necessary local storage supports your requested services: authentication sessions, registration invitations, your selected plan and the post-sign-in destination (session storage). The storage notice acknowledgement is a versioned preference retained for up to 180 days in this browser; it contains only the version and acknowledgement time.

Strictly necessary device storage is exempt from consent under §25(2) TDDDG. Reading or closing the notice does not grant consent for optional tracking. You can reopen the notice using “Cookies & storage”. Browser settings allow you to clear local storage; clearing your authentication session signs you out.

Instrument Sans and JetBrains Mono fonts are hosted on this website, without a request to Google Fonts. If optional tracking is introduced in future, it must remain disabled until valid consent is obtained.

October 2026