Privacy
This page describes which personal data we process when you visit praxly.de, for which purpose and on which legal basis. It does not cover the signed-in Praxly applications: there we process data on behalf of the respective company under a separate agreement.
Controller
AKS Dr. med. Kay Schumann, Am Buchensteg 9, 14547 Beelitz, Germany. Email: info@praxly.de. Send any privacy matter to the same address.
Hosting
praxly.de is a static website delivered over the network of Cloudflare, Inc.; the contracting entity in the European Economic Area is Cloudflare Germany GmbH, Rosental 7, 80331 Munich, Germany. Pages are served from the closest location in that network. Every request technically opens a connection to Cloudflare, which processes your IP address in doing so. The legal basis is our legitimate interest in secure and fast delivery (Art. 6 (1) lit. f GDPR). Form submissions are received by our own server at api.praxly.md, which also holds our database and our CRM.
Contact form
Through the form on praxly.de we process your name, your email address, the selected service or topic and the language of the page. For enquiries about professional support or software, we also ask for company size, the preferred start date and industry. Providing a company name, postal code or phone number is optional. Additional notes are also optional; for other enquiries, we require a brief description. We also process your confirmation that you have read the privacy notice. We use this data solely to answer your enquiry — on the basis of Art. 6 (1) lit. b GDPR where the enquiry concerns a quote or a contract, otherwise on the basis of our legitimate interest in answering business enquiries (Art. 6 (1) lit. f GDPR). You cannot submit the form without a name and an email address. Your enquiry is emailed to info@praxly.de and also filed in our self-hosted CRM at crm.praxly.md. Email delivery is handled by Resend (Plus Five Five, Inc., San Francisco, USA), which also carries the receipt confirmation to you.
To keep bots out, the form is preceded by Cloudflare Turnstile. This transmits your IP address and technical characteristics of your browser to Cloudflare, where they are checked. We also limit submissions to five per IP address per hour; the IP address is held in our server's memory for that purpose only and is not stored. The legal basis is our legitimate interest in a working form free of abuse (Art. 6 (1) lit. f GDPR).
Audience measurement
With your consent we measure which pages are opened and where visitors drop off. We use Google Analytics 4 (property G-6X2BSH8NDC) provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, and PostHog provided by PostHog, Inc., San Francisco, USA; the PostHog data is held in its EU instance in Frankfurt am Main, Germany. The legal basis is your consent (Art. 6 (1) lit. a GDPR, Sec. 25 (1) TDDDG). Only after that do these services set cookies or similar identifiers and transmit usage data. The Google and PostHog analytics scripts are loaded only after you consent. If you decline audience measurement, these services are not loaded. We run no advertising on this website.
Consent and withdrawal
On your first visit a banner asks for your choice, separately per purpose. If you decline, the website works in full — only the audience measurement stays off. You can change your choice at any time through “Cookie settings” in the footer; a withdrawal takes effect immediately and is as easy as giving consent (Art. 7 (3) GDPR). Processing that took place before the withdrawal remains lawful. Your choice is stored on your device and, together with the time, your IP address and your browser identification, on our server at api.praxly.md — so that we do not have to ask again on every visit and can evidence your consent under Art. 7 (1) GDPR.
Log data
We keep no access logs of our own for praxly.de. The connection data arises at Cloudflare and is processed there for delivery, operation and defence against attacks. Our server at api.praxly.md logs the requests it answers: time, method, path, status code and duration. Your IP address is not among them. The legal basis is our legitimate interest in secure and stable operation (Art. 6 (1) lit. f GDPR). We do not combine this data with other sources.
Newsletter
We offer no newsletter on this website and send no promotional email. You hear from us only in reply to your enquiry.
Retention
We delete enquiries from the form in the inbox and in the CRM once the matter is closed and no statutory retention period applies; commercial and tax retention periods of six and ten years respectively remain unaffected. We keep the record of your consent for as long as we have to be able to evidence it under Art. 7 (1) GDPR. Your choice in the banner stays on your device until you change it or clear your browser data. How long Cloudflare, Google and PostHog keep the data arising with them follows those providers' own terms.
Transfers to the United States
Cloudflare, Inc., PostHog, Inc. and Plus Five Five, Inc. (“Resend”) are seated in the United States, and Google Ireland Limited may pass data to Google LLC in the United States. Transfers happen only to the extent described above. They rely on the EU-US Data Privacy Framework, for which the European Commission has found an adequate level of protection (Art. 45 GDPR), and in addition on the European Commission's standard contractual clauses (Art. 46 GDPR). Access by US authorities can still not be entirely ruled out.
Data processing agreements
Cloudflare, Resend, Google and PostHog process the data named above on our instructions. We engage them only under a data processing agreement pursuant to Art. 28 GDPR. Our database and our CRM we run ourselves; nobody outside Praxly has access to them. For the Praxly applications used by our customers we conclude a separate data processing agreement, which forms part of the contract.
Your rights
You have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20 GDPR). You may object at any time to processing we base on a legitimate interest (Art. 21 GDPR). A message to info@praxly.de is enough; we answer within one month. We make no automated decisions within the meaning of Art. 22 GDPR.
Right to lodge a complaint
You may also lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), for instance where you live or work. The authority competent for us is: Die Landesbeauftragte für den Datenschutz und für das Recht auf Akteneinsicht Brandenburg, Stahnsdorfer Damm 77, 14532 Kleinmachnow, Germany, phone +49 33203 356-0, poststelle@lda.brandenburg.de, www.lda.brandenburg.de.