Privacy Policy

1. Who We Are

Cyberlicious GmbH, Musterstraße 1, 80331 Munich, Germany (“Cyberlicious”, “we”, “us”, or “our”) operates the website at cyberlicious.de. This policy explains what personal data we collect, why, and your rights under the General Data Protection Regulation (GDPR).

2. Data We Collect

We collect personal data in the following situations:

• Questionnaire submissions — name, business name, email address, phone number, postal address, and business information you provide when completing an onboarding questionnaire.
• Contact enquiries — name, email address, and the content of your message when you contact us by email or contact form.
• Usage data — IP address, browser type, pages visited, and referring URL collected automatically via server logs and analytics tools.
• Cookies — strictly necessary cookies required for the website to function, and optional analytics cookies (only with your consent).

3. Legal Basis for Processing

• Contract performance (Art. 6(1)(b) GDPR) — processing your questionnaire data to deliver the service you requested.
• Legitimate interests (Art. 6(1)(f) GDPR) — analysing usage data to improve our website and prevent fraud.
• Consent (Art. 6(1)(a) GDPR) — placing optional analytics cookies after you give explicit consent.
• Legal obligation (Art. 6(1)(c) GDPR) — retaining invoicing and contract records as required by German commercial and tax law.

4. How We Use Your Data

• To build and deliver your website
• To communicate with you about your project and subscription
• To send monthly performance reports (for active subscribers)
• To comply with legal and accounting obligations
• To improve our services and website (aggregated analytics only)

5. Data Sharing

We do not sell your personal data. We share data only with:

• Hosting and infrastructure providers (e.g. Vercel, AWS) — to operate the website and deliver your project, under data processing agreements.
• Google LLC — via Google Search Console for your client website performance analysis (governed by Google's privacy policy).
• Accounting and legal advisors — where required by law.

6. Data Retention

We retain your data for as long as your subscription is active, plus a further 10 years as required by German commercial law (HGB) for invoicing and contract records. Usage and analytics data is retained for a maximum of 14 months.

7. Your Rights

Under GDPR you have the right to:

• Access the personal data we hold about you (Art. 15)
• Rectify inaccurate data (Art. 16)
• Erasure (“right to be forgotten”) where no legal obligation requires retention (Art. 17)
• Restrict processing (Art. 18)
• Data portability (Art. 20)
• Object to processing based on legitimate interests (Art. 21)
• Withdraw consent at any time without affecting prior processing (Art. 7(3))
• Lodge a complaint with the supervisory authority — in Bavaria: Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), www.lda.bayern.de

To exercise any right, contact us at privacy@cyberlicious.de. We will respond within 30 days.

8. Cookies

We use strictly necessary cookies to operate the website. With your consent we also place analytics cookies (Google Analytics or a privacy-friendly alternative). You can manage or withdraw cookie consent at any time via the cookie settings link in the footer.

9. Changes to This Policy

We may update this policy from time to time. The “Last updated” date at the top of this page reflects the most recent revision. Continued use of the service after changes constitutes acceptance of the updated policy.

10. Contact

For privacy-related enquiries:
Cyberlicious GmbH — Data Protection
Musterstraße 1, 80331 Munich, Germany
privacy@cyberlicious.de