Privacy Policy

This policy explains how we handle personal data when you visit this website and join our waitlist. We currently operate a pre-launch landing page; the Katalog app is not yet available.

1. Who is responsible

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

2. Your rights

Under the GDPR you have the following rights regarding your personal data:

• Right of access — you can request information about the data we hold about you.
• Right to rectification — you can ask us to correct inaccurate data.
• Right to erasure — you can ask us to delete your data ("right to be forgotten").
• Right to restriction — you can ask us to restrict processing of your data.
• Right to data portability — you can request your data in a structured, machine-readable format.
• Right to object — you can object to processing based on legitimate interests.
• Right to withdraw consent — where processing is based on consent, you can withdraw it at any time with effect for the future.
• Right to lodge a complaint — you can complain to a data protection supervisory authority.

To exercise any of these rights, contact us at info@getkatalog.com.

3. Waitlist sign-up (newsletter / launch notification)

When you sign up for our waitlist, we collect your email address (required) and, optionally, your first name. We use this data solely to send you a confirmation message, occasional updates, and a notification when the Katalog app launches.

Double opt-in

We use the double opt-in procedure. After you submit the form, you receive an email asking you to confirm your sign-up by clicking a link. Only after you confirm is your email address added to our waitlist. This ensures that no one can register your email address without your knowledge. We store the time of registration and confirmation as proof of your consent.

Legal basis

The legal basis for this processing is your consent pursuant to Art. 6(1)(a) GDPR. You can withdraw your consent at any time, for example by clicking the unsubscribe link in any of our emails or by contacting us. Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.

Email service provider — Brevo

We send our waitlist and notification emails using Brevo (Sendinblue GmbH, Köpenicker Straße 126, 10179 Berlin, Germany). When you sign up, the data you enter (email address and, if provided, first name) is transmitted to and stored by Brevo on our behalf. Brevo processes this data as a processor under a data processing agreement (Art. 28 GDPR). Brevo also helps us analyse whether and how our emails are opened so we can improve our communication. For more information, see Brevo's privacy policy at brevo.com/legal/privacypolicy.

Your data remains with us and Brevo until you unsubscribe or ask us to delete it, after which it is removed from the waitlist.

4. Hosting

This website is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA ("Vercel"). When you access the site, Vercel automatically processes certain technical information, including your IP address, which is technically necessary to deliver the website to your browser and to protect it against abuse. The legal basis is our legitimate interest in providing a secure and functional website (Art. 6(1)(f) GDPR). Vercel acts as a processor on our behalf under a data processing agreement (Art. 28 GDPR). As Vercel is based in the USA, data may be transferred there; such transfers are safeguarded by Vercel's certification under the EU–U.S. Data Privacy Framework and, where applicable, by the EU Standard Contractual Clauses. For more information, see Vercel's privacy policy at vercel.com/legal/privacy-policy.

5. Cookies and local storage

This website does not use tracking cookies, advertising cookies, or third-party analytics. We do not load external fonts, content delivery networks, or embedded third-party content when you open the page, so no consent banner is required.

We use a single piece of session storage in your browser that is strictly necessary for the password-protected pre-launch access: once you enter the correct access password, your browser remembers — for the duration of the session — that you have been granted access, so you are not asked again on every page. This information is stored only in your browser, is not transmitted to us, and is cleared when you close the browser tab. The legal basis is our legitimate interest in operating a functional pre-launch site (Art. 6(1)(f) GDPR) and, where applicable, § 25(2) TDDDG, as this storage is strictly necessary for a service you have explicitly requested.

6. Contacting us by email

If you contact us by email (for example at info@getkatalog.com), we process the data you provide in order to handle your request. The legal basis is our legitimate interest in responding to enquiries (Art. 6(1)(f) GDPR) and, where your request relates to a contract, Art. 6(1)(b) GDPR. We delete this data once it is no longer needed and no statutory retention periods prevent deletion.

7. Data retention

We keep your waitlist data until you withdraw your consent or request deletion. Technical data processed by our hosting provider is retained only as long as necessary for the secure delivery and operation of the website.

8. Changes to this policy

As our app develops and we add functionality, we may update this privacy policy. The current version is always available on this page, with the date of the last update shown at the top.