Privacy Policy

1. Introduction

CurlyByte Solutions ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services.

2. Data Processing in Relation to Website Usage

This section applies when you visit and interact with our website at www.curly-byte.de.

Information We Collect from Website Visitors

• IP address and browser information
• Website usage analytics and navigation patterns
• Cookies and similar tracking technologies
• Device and browser type
• Pages visited and time spent on pages

How We Use Website Information

• To ensure website functionality and security
• To analyze website usage and improve user experience
• To protect against fraud and abuse
• To comply with legal obligations

Information Sharing for Website Usage

We do not sell, trade, or rent your website usage information to third parties. We may share this information only in the following circumstances:

• With service providers who assist in website operations (e.g., hosting, CDN, security services like Cloudflare)
• To comply with legal requirements
• To protect our rights or the safety of others

Legal Basis: Processing of website usage data is based on our legitimate interest in operating and securing our website (Art. 6(1)(f) GDPR), and for cookies requiring consent, on your consent (Art. 6(1)(a) GDPR).

3. Data Processing in Relation to Consulting Contracts

This section applies when you engage with us for data engineering and consulting services under a contract or agreement.

Information We Collect for Consulting Services

• Name and contact information (email, phone number, address)
• Company information and business details
• Project requirements and specifications
• Communication records (emails, meeting notes, correspondence)
• Business data provided for analysis or processing as part of the consulting engagement
• Billing and payment information

How We Use Consulting Information

• To provide and deliver our data engineering and consulting services
• To communicate with you about projects, services, and deliverables
• To manage and fulfill our contractual obligations
• To process payments and manage billing
• To comply with legal and regulatory obligations
• To protect our rights and interests under the contract

Information Sharing for Consulting Services

We do not sell, trade, or rent your consulting-related information to third parties. We may share this information only in the following circumstances:

• With your explicit consent
• With trusted service providers who assist in delivering consulting services (subject to confidentiality agreements)
• To comply with legal requirements or court orders
• To protect our rights or the safety of others
• In connection with business transfers (mergers, acquisitions, etc.)

Data Retention for Consulting Services

We retain consulting-related data for the duration of the contract and for a period thereafter as required by law or as necessary for legitimate business purposes (e.g., tax obligations, dispute resolution). Typically:

• Contract and communication records: retained for the duration of the contract plus 7 years for legal and tax purposes
• Project data and deliverables: retained as specified in the contract or until deletion is requested (subject to legal retention requirements)
• You may request deletion of your data at any time, subject to our legal obligations to retain certain records

Legal Basis: Processing of consulting-related data is based on the performance of the consulting contract (Art. 6(1)(b) GDPR), compliance with legal obligations (Art. 6(1)(c) GDPR), and our legitimate interests (Art. 6(1)(f) GDPR).

4. Information Sharing

The specific circumstances under which we share information are detailed in the sections above (Website Usage and Consulting Contracts). In general, we do not sell, trade, or rent your personal information to third parties.

5. Data Processing Tools Used in Consulting Services

In the course of providing data engineering and consulting services, we may use various third-party tools and platforms to process, analyze, and manage data. This section explains how we handle your data when using these tools.

Tools and Platforms

We may use the following types of tools during consulting engagements:

• Data Analytics Platforms (e.g., Databricks, Apache Spark): Used for data processing, transformation, and analysis
• Cloud Infrastructure Services (e.g., Google Cloud Platform, AWS, Azure): Used for data storage and compute resources
• Development and Collaboration Tools: Used for code development, version control, and project management
• Data Visualization Tools: Used for creating reports and dashboards

Data Handling in Consulting Tools

• Data is processed only for the specific purposes agreed upon in the consulting engagement
• We use industry-standard security practices and access controls when working with your data in these platforms
• Data access is restricted to authorized personnel who require it to perform the consulting services
• We configure tools to use secure connections (encryption in transit) and encrypted storage (encryption at rest) where available

Third-Party Service Providers

When we use third-party tools like Databricks, your data may be processed by these service providers according to their own privacy policies and terms of service. We select service providers that:

• Maintain appropriate security certifications and compliance standards (e.g., SOC 2, ISO 27001, GDPR compliance)
• Provide data processing agreements that align with applicable data protection laws
• Allow us to configure data residency and storage locations according to your requirements
• Support data export and deletion capabilities

Data Retention and Deletion

Data processed in consulting tools is retained only for the duration necessary to complete the consulting engagement and any agreed-upon retention period. Upon completion of the project or upon your request:

• We will delete or return your data from our consulting tool accounts, unless retention is required by law or contract
• You may request access to or deletion of your data at any time during or after the engagement
• We will assist you in exporting your data in a standard format if requested

Legal Basis: Processing of data in consulting tools is based on the performance of the consulting contract (Art. 6(1)(b) GDPR) and, where applicable, your consent (Art. 6(1)(a) GDPR).

6. Cookies and Website Tracking Technologies

This section applies specifically to our website usage. We use cookies and similar technologies to operate this website and, with your consent, to enable additional features (e.g., analytics). You can change your preferences at any time via the "Cookie Settings" link in the footer.

• Strictly necessary cookies (always active): required for basic site functionality and security. These may include Cloudflare security/performance cookies used to protect the site against bots and ensure reliable delivery:
  • __cf_bm: bot management cookie set by Cloudflare to distinguish humans from bots; short lifetime (usually 30 minutes).
  • cf_clearance: set after a Cloudflare challenge (e.g., CAPTCHA) to remember that a client passed; persistence can vary.
• Analytics cookies (optional): enabled only with your consent to understand usage and improve the site.
• Marketing cookies (optional): disabled by default; used only if explicitly consented to.

Legal basis for strictly necessary cookies is our legitimate interest (Art. 6(1)(f) GDPR). All other cookies are used on the basis of your consent (Art. 6(1)(a) GDPR). You can withdraw consent at any time without affecting the lawfulness of processing before withdrawal.

7. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. This applies to all data processing activities, whether related to website usage, consulting services, or third-party tools.

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security.

8. Your Rights

Depending on your location, you may have the following rights regarding your personal information:

• Right to access your personal data
• Right to rectification of inaccurate data
• Right to erasure of your data
• Right to restrict processing
• Right to data portability
• Right to object to processing

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the effective date.

10. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us: