Privacy

1. Overview and scope

(1) This privacy policy informs you how Datargo GmbH (hereinafter “Datargo”, “we” or “us”), as the operator of the website perstat.io, processes personal data that arises when you visit and use this website and the functions directly connected with it (live chat and contact). It is addressed to all persons whose data is processed in this context (hereinafter “data subjects” or “you”).

(2) Personal data means any information relating to an identified or identifiable natural person (Article 4 no. 1 GDPR). The relevant legal bases are, in particular, the General Data Protection Regulation (GDPR), the Bundesdatenschutzgesetz (BDSG, German Federal Data Protection Act) and the Telekommunikation-Digitale-Dienste-Datenschutz-Gesetz (TDDDG, German Telecommunications and Digital Services Data Protection Act).

(3) This privacy policy concerns solely the processing that takes place in connection with visiting the website. Separate rules apply to the processing of personal data that you, as a business customer or its employees, enter into the platform in the course of the contractual use of Perstat; for this, Datargo generally processes personal data as a processor pursuant to Article 28 GDPR on the basis of a separate data processing agreement.

2. Controller

(1) The controller within the meaning of Article 4 no. 7 GDPR for the processing operations described in this policy is:

Datargo GmbH
Omniturm, Neue Mainzer Straße 52-58, 60311 Frankfurt am Main
Germany

Represented by its management.

Email: hello@perstat.io
Data protection enquiries: hello@perstat.io

For further mandatory information (commercial register, VAT identification number, authorised representatives), please refer to the imprint (Impressum).

(2) This privacy policy concerns the website operated at perstat.io. For linked third-party offerings, the entities named there are responsible in each case (see section 10).

3. Data protection officer

We have not appointed a data protection officer, as there is no legal obligation to do so under section 38 BDSG. Please direct data protection enquiries and concerns to hello@perstat.io.

4. Principles of our data processing

(1) Place of processing. Personal data that we process ourselves in connection with this website (for example in the live chat or when you contact us) is processed within the European Union. This website is delivered through the worldwide network of Cloudflare, Inc.; processing outside the EU cannot be ruled out in the process (see section 5(4) and (5)). The website is static in design and loads its fonts and scripts from its own domain. The exception is the Google tag, which is loaded from Google only after your consent (section 7(6) to (10)).

(2) Data minimisation and purpose limitation. We collect and process personal data only to the extent necessary to achieve the respective purpose, and we delete it as soon as the purpose ceases to apply and no statutory retention obligations conflict (see section 9).

(3) Data security. We take appropriate technical and organisational measures pursuant to Article 32 GDPR to protect the data we process against loss, manipulation and unauthorised access. This website is delivered over an encrypted connection (TLS); you can recognise an active encryption by the address bar of your browser. Our security measures are continuously adapted in line with technological developments.

5. Processing when you visit the website (server logs and hosting)

(1) Description and data categories. When this website is accessed, your device automatically transmits data to the servers of our hosting service provider for technical reasons, where it is temporarily logged. The following, in particular, is recorded:

(2) Purpose. The processing serves the technical delivery of the website, ensuring stable and secure operation, detecting and averting attacks and misuse, and investigating and tracing security incidents.

(3) Legal basis. Article 6(1)(f) GDPR. Our legitimate interest lies in the secure, stable and functional provision of this website.

(4) Recipients / processors. This website is delivered by Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA, as a processor pursuant to Article 28 GDPR (provision of the static files through a content delivery network). Requests are generally answered by a nearby data centre of this network, which for visitors from Europe is regularly one within the EU. The basis is Cloudflare’s data processing agreement (Data Processing Addendum).

(5) Transfer to third countries. A transfer of personal data to the USA cannot be ruled out. Cloudflare, Inc. is certified under the EU-US Data Privacy Framework; the transfer is based on the adequacy decision of the European Commission of 10 July 2023 (Article 45(1) GDPR). In addition, the standard contractual clauses of the European Commission (Article 46(2)(c) GDPR) form part of the data processing agreement.

(6) Storage period. We ourselves do not store access logs of this website. Cloudflare processes the data listed above only for as long as necessary to deliver the website and avert attacks, and deletes it in accordance with the data processing agreement.

(7) This data is not merged with other data sources for the purpose of identifying individual persons.

6. Live chat and CRM widget

(1) Description. We optionally offer a live chat for convenience and support enquiries. This is an in-house service of Datargo GmbH (not a third-party provider), operated at crm.datargo.com exclusively within the European Union (Frankfurt am Main). The widget is loaded only on the production domain perstat.io.

(2) Consent and activation. The live chat is loaded and activated only when you click “Open chat” or a chat contact button. Before that action, no personal data is transmitted to the chat service in this context. This choice is separate from consent to advertising measurement.

(3) Data categories. We process the information you provide in the chat (name, contact details and message content, to the extent you provide them) as well as technical connection data required to provide the feature.

(4) Purpose and legal basis. The purpose is direct communication, answering your enquiries and providing assistance in the course of support and sales. The legal basis is Article 6(1)(b) GDPR (where the enquiry serves the initiation or performance of a contract) as well as Article 6(1)(f) GDPR (legitimate interest in efficient communication). The loading of the chat service onto your device takes place on the basis of your consent pursuant to section 25(1) TDDDG and Article 6(1)(a) GDPR.

(5) Recipients and third-country transfer. The chat content is not transmitted to third parties or to third countries. The service is operated exclusively by Datargo within the EU.

(6) Storage period. Chat histories are stored for as long as necessary to handle your request and for any follow-up questions, but for no longer than 90 days after the conversation ends, unless contractual or statutory retention obligations require longer storage.

7. Cookies, local storage and measurement

(1) Use. This website is static in design. Without your consent, we use exclusively technically necessary cookies (including the cookie that stores your decision on ad measurement) and use your browser’s local storage (“Local Storage”) to save your chosen display setting (theme, e.g. light or dark mode). Audience measurement (paragraph 5) works without cookies. Ad measurement via Google Ads takes place only with your consent (paragraphs 6 to 10).

Your explicit language choice is stored locally under perstat-language for 24 hours. On the homepage without a language prefix, this choice takes precedence over your browser language preferences. No location lookup is performed, and the preference is not transmitted to us.

(2) Categories.

Swipe sideways to inspect every column

(3) Nothing without consent. Without your consent, no cookies or comparable technologies are set or read for analytics, tracking or advertising purposes. The theme setting in Local Storage serves solely your display and is not used for recognition or profiling.

(4) Management. You can prevent the storage of cookies in your browser settings or delete cookies already stored as well as the Local Storage content; the full functionality of the website may be limited as a result. You can withdraw a consent you have given (for example for the live chat) at any time with effect for the future; the lawfulness of the processing carried out up to the withdrawal remains unaffected.

Audience measurement with Umami

(5) Audience measurement. To understand which content is used, we count page views and individual events (viewing the pricing overview, clicking a link to sign up together with where on the page it was). For this, the page reports each view to perstat.io itself; our server forwards the report to an instance of the open-source software Umami operated by Datargo GmbH itself. The data processed are the address visited without click identifiers of advertising networks, campaign parameters (utm), the referring page without parameters, the browser language, the user agent and the IP address. Umami stores neither the IP address nor the user agent; it derives a session identifier from them as a hash with a random value that changes monthly, and the country is derived from the IP address. Nothing is stored on or read from your device for this. The legal basis is Article 6(1)(f) GDPR; our legitimate interest lies in designing the website to meet demand and in measuring which campaigns bring visitors. The event data is deleted after 14 months at the latest. You can object to the processing pursuant to Article 21 GDPR (see section 11).

Ad measurement with Google Ads

(6) Provider and purpose. With your consent, we use the conversion tracking of Google Ads, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). It tells us whether a click on one of our ads led to a sign-up for Perstat. We do not use personalised advertising (remarketing).

(7) How it works and which data. Only after your consent does this website load the Google tag (gtag.js) from Google’s servers; without consent it is not loaded and no data goes to Google. Google then sets cookies (in particular _gcl_au and _gcl_aw) on perstat.io and its subdomains so that a sign-up on app.perstat.io can be attributed to the ad click. The data processed are in particular the IP address, device and browser information, pages visited, the click identifier of the ad (gclid, gbraid or wbraid) and the time of the sign-up. If you arrive via an ad and have consented to ad measurement, the links of this website pass the ad’s click identifier on in the address up to the sign-up on app.perstat.io, without storing it on your device, so that the sign-up can be attributed to the ad. The legal basis is your consent under Article 6(1)(a) GDPR in conjunction with section 25(1) TDDDG; you can withdraw it at any time (paragraph 8). Without consent, after a withdrawal or if your browser sends a Do Not Track or Global Privacy Control signal, the website passes on no click identifier. We receive only statistical reports from Google from which we cannot identify anyone.

(8) Legal basis and withdrawal. Storing and reading information on your device: section 25(1) TDDDG; processing: Article 6(1)(a) GDPR. Consent is voluntary. You can withdraw it at any time with effect for the future via “Privacy settings” in the footer; we then delete Google’s cookies on perstat.io.

(9) Recipients and transfer to third countries. Google processes the data as an independent controller. A transfer to Google LLC in the USA is possible; Google LLC is certified under the EU-US Data Privacy Framework, and the transfer is based on the adequacy decision of the European Commission of 10 July 2023 (Article 45(1) GDPR). More information: policies.google.com/privacy.

(10) Storage period. Google’s cookies expire after 90 days at the latest. We store your decision for 12 months in the cookie perstat_consent on perstat.io; after that we ask again.

Campaign parameters at sign-up

(11) Campaign parameters at sign-up. If you reach this website through a link with campaign parameters (utm_source, utm_medium, utm_campaign, utm_term, utm_content), the website passes these parameters on in the address when you move to the sign-up on app.perstat.io, regardless of your consent to ad measurement and without storing anything on your device; if your browser sends a Do Not Track or Global Privacy Control signal, nothing is passed on. If you register, we store these parameters with your account in order to evaluate which campaign led to the registration; we do not store the click identifier (paragraph 7). The parameters are already recorded with the registration while it is still unconfirmed; if the confirmation link expires unused, we delete them together with the unconfirmed registration. The legal basis is Article 6(1)(f) GDPR; our legitimate interest lies in measuring which campaigns lead to registrations. We do not transmit the parameters stored with your account to third parties and delete them 24 months after registration, or together with the account if it is deleted earlier. With your consent to ad measurement, however, the sign-up page on app.perstat.io transmits the campaign parameters and the click identifier to Google as part of the page address (paragraphs 6 to 10). You can object to the processing pursuant to Article 21 GDPR (see section 11).

8. Contact

(1) Description. If you contact us by email at hello@perstat.io, we process the information you transmit in order to handle and answer your enquiry, as well as for any follow-up questions.

(2) Data categories. We process, in particular, your name, your contact details (e.g. email address, company), the content of your message, and any further information you provide voluntarily.

(3) Purpose and legal basis.

(4) Storage period. We store your information until your enquiry has been finally handled and there is no further reason to retain it. You can object to further storage at any time or request deletion, to the extent that no statutory retention obligations conflict. Enquiries with commercial or tax-law relevance are stored within the framework of the statutory retention periods (see section 9).

9. Storage period and deletion

(1) Unless an express storage period is stated in this privacy policy, personal data is deleted as soon as the purpose of its processing ceases to apply and no statutory retention obligations conflict.

(2) Statutory retention obligations arise, in particular, from the Handelsgesetzbuch (section 257 HGB, German Commercial Code) and the Abgabenordnung (section 147 AO, German Fiscal Code) and amount, depending on the type of document, to up to ten years. While such periods are running, the processing of the data concerned is restricted.

10. External links

This website may contain links to external third-party websites. We have no influence over their content and data processing; the respective provider is responsible for these in each case. The privacy notice of the respective linked website applies.

11. Your rights as a data subject

With regard to the personal data concerning you, you have the following rights in relation to Datargo:

(1) Access (Article 15 GDPR). You have the right to request confirmation as to whether we process data concerning you, as well as to obtain information about that data and the information specified in Article 15 GDPR (such as purposes, categories, recipients, storage period) and a copy of the data.

(2) Rectification (Article 16 GDPR). You have the right to request the rectification of inaccurate data concerning you and the completion of incomplete data concerning you.

(3) Erasure (Article 17 GDPR). You have the right to request the erasure of data concerning you, provided that one of the grounds specified in Article 17 GDPR applies and no statutory retention obligations conflict.

(4) Restriction of processing (Article 18 GDPR). You have the right, under the conditions of Article 18 GDPR, to request the restriction of the processing of data concerning you.

(5) Data portability (Article 20 GDPR). To the extent that the processing is based on consent or a contract and is carried out by automated means, you have the right to receive the data concerning you in a structured, commonly used and machine-readable format, or to request its transmission to another controller, where technically feasible.

(6) Objection (Article 21 GDPR). You have the right, on grounds relating to your particular situation, to object at any time to processing of data concerning you that is based on Article 6(1)(f) GDPR. We will then no longer process the data, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

(7) Withdrawal of consent given (Article 7(3) GDPR). You have the right to withdraw a consent you have given at any time with effect for the future. The lawfulness of the processing carried out up to the withdrawal remains unaffected.

(8) Exercising your rights. To exercise your rights, an informal notification to the contact details specified in section 2 suffices. The exercise of your rights is, as a matter of principle, free of charge for you.

12. Right to lodge a complaint with a supervisory authority

(1) Without prejudice to any other administrative or judicial remedy, you have the right under Article 77 GDPR to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, place of work or the place of the alleged infringement, if you consider that the processing of data concerning you infringes the GDPR.

(2) The supervisory authority responsible for Datargo is:

Der Hessische Beauftragte für Datenschutz und Informationsfreiheit (HBDI)
Postal address: Postfach 31 63, 65021 Wiesbaden
Street address: Gustav-Stresemann-Ring 1, 65189 Wiesbaden
Telephone: +49 611 1408-0
Email: poststelle@datenschutz.hessen.de
Website: datenschutz.hessen.de

Datargo GmbH is based in Hesse; the competent supervisory authority is therefore the aforementioned Hessischer Beauftragter für Datenschutz und Informationsfreiheit (Hessian Commissioner for Data Protection and Freedom of Information).

13. No automated decision-making

Automated decision-making in individual cases, including profiling within the meaning of Article 22(1) and (4) GDPR, does not take place in connection with visiting the website.

14. Changes to this privacy policy

We will adapt this privacy policy as soon as changes to the data processing we carry out or to the legal framework make this necessary. The current version published on this website applies in each case.

As at September 2026.

Governing language version

This document is provided in German and English. The English version is solely a translation for ease of understanding. The German version alone is authoritative and, in the event of a dispute and in the case of differences of interpretation or translation, solely binding.