Privacy

1. Overview and scope

(1) This privacy policy informs you how Datargo GmbH (hereinafter “Datargo”, “we” or “us”), as the operator of the website perstat.io, processes personal data that arises when you visit and use this website and the functions directly connected with it (live chat and contact). It is addressed to all persons whose data is processed in this context (hereinafter “data subjects” or “you”).

(2) Personal data means any information relating to an identified or identifiable natural person (Article 4 no. 1 GDPR). The relevant legal bases are, in particular, the General Data Protection Regulation (GDPR), the Bundesdatenschutzgesetz (BDSG, German Federal Data Protection Act) and the Telekommunikation-Digitale-Dienste-Datenschutz-Gesetz (TDDDG, German Telecommunications and Digital Services Data Protection Act).

(3) This privacy policy concerns solely the processing that takes place in connection with visiting the website. Separate rules apply to the processing of personal data that you, as a business customer or its employees, enter into the platform in the course of the contractual use of Perstat; for this, Datargo generally processes personal data as a processor pursuant to Article 28 GDPR on the basis of a separate data processing agreement.

2. Controller

(1) The controller within the meaning of Article 4 no. 7 GDPR for the processing operations described in this policy is:

Datargo GmbH
Omniturm, Neue Mainzer Straße 52-58, 60311 Frankfurt am Main
Germany

Represented by its management.

Email: hello@perstat.io
Data protection enquiries: hello@perstat.io

For further mandatory information (commercial register, VAT identification number, authorised representatives), please refer to the imprint (Impressum).

(2) This privacy policy concerns the website operated at perstat.io. For linked third-party offerings, the entities named there are responsible in each case (see section 10).

3. Data protection officer

We have not appointed a data protection officer, as there is no legal obligation to do so under section 38 BDSG. Please direct data protection enquiries and concerns to hello@perstat.io.

4. Principles of our data processing

(1) Processing in the EU. The personal data processed in connection with visiting and using this website is, as a matter of principle, processed within the European Union; this website is hosted in Frankfurt am Main. The website is static in design, uses no analytics, and loads its fonts and scripts from its own domain.

(2) Data minimisation and purpose limitation. We collect and process personal data only to the extent necessary to achieve the respective purpose, and we delete it as soon as the purpose ceases to apply and no statutory retention obligations conflict (see section 9).

(3) Data security. We take appropriate technical and organisational measures pursuant to Article 32 GDPR to protect the data we process against loss, manipulation and unauthorised access. This website is delivered over an encrypted connection (TLS); you can recognise an active encryption by the address bar of your browser. Our security measures are continuously adapted in line with technological developments.

5. Processing when you visit the website (server logs and hosting)

(1) Description and data categories. When this website is accessed, your device automatically transmits data to the server for technical reasons, which is temporarily stored in a log file (server log file). The following, in particular, is recorded:

(2) Purpose. The processing serves the technical delivery of the website, ensuring stable and secure operation, detecting and averting attacks and misuse, and investigating and tracing security incidents.

(3) Legal basis. Article 6(1)(f) GDPR. Our legitimate interest lies in the secure, stable and functional provision of this website.

(4) Recipients / processors. A hosting service provider is engaged to operate the infrastructure as a processor pursuant to Article 28 GDPR within the EU (Frankfurt am Main).

(5) Storage period. The log data is stored for a maximum of 7 days, and in justified security cases for up to 90 days, and is then deleted. Longer storage of individual records takes place only to the extent necessary to investigate a specific security incident; in this case, the data concerned is exempt from routine deletion until the matter is finally resolved.

(6) This data is not merged with other data sources for the purpose of identifying individual persons.

6. Live chat and CRM widget

(1) Description. We optionally offer a live chat for convenience and support enquiries. This is an in-house service of Datargo GmbH (not a third-party provider), operated at crm.datargo.com exclusively within the European Union (Frankfurt am Main). The widget is loaded only on the production domain perstat.io.

(2) Consent and activation. The live chat is loaded and activated only after you have given your consent via the consent banner. Before consent is given, no personal data is transmitted to the chat service in this context.

(3) Data categories. We process the information you provide in the chat (name, contact details and message content, to the extent you provide them) as well as technical connection data required to provide the feature.

(4) Purpose and legal basis. The purpose is direct communication, answering your enquiries and providing assistance in the course of support and sales. The legal basis is Article 6(1)(b) GDPR (where the enquiry serves the initiation or performance of a contract) as well as Article 6(1)(f) GDPR (legitimate interest in efficient communication). The loading of the chat service onto your device takes place on the basis of your consent pursuant to section 25(1) TDDDG and Article 6(1)(a) GDPR.

(5) Recipients and third-country transfer. The chat content is not transmitted to third parties or to third countries. The service is operated exclusively by Datargo within the EU.

(6) Storage period. Chat histories are stored for as long as necessary to handle your request and for any follow-up questions, but for no longer than 90 days after the conversation ends, unless contractual or statutory retention obligations require longer storage.

7. Cookies and local storage

(1) Use. This website is static in design and functions without tracking. We use exclusively technically necessary cookies or comparable technologies, as well as those features that you have previously enabled by consent. Beyond technically necessary storage, we use your browser’s local storage (“Local Storage”) solely to save your chosen display setting (theme, e.g. light or dark mode).

(2) Categories.

Swipe sideways to inspect every column

(3) No tracking or marketing cookies. No cookies or comparable technologies are set for analytics, tracking or advertising purposes. The theme setting in Local Storage serves solely your display and is not used for recognition or profiling.

(4) Management. You can prevent the storage of cookies in your browser settings or delete cookies already stored as well as the Local Storage content; the full functionality of the website may be limited as a result. You can withdraw a consent you have given (for example for the live chat) at any time with effect for the future; the lawfulness of the processing carried out up to the withdrawal remains unaffected.

8. Contact

(1) Description. If you contact us by email at hello@perstat.io, we process the information you transmit in order to handle and answer your enquiry, as well as for any follow-up questions.

(2) Data categories. We process, in particular, your name, your contact details (e.g. email address, company), the content of your message, and any further information you provide voluntarily.

(3) Purpose and legal basis.

(4) Storage period. We store your information until your enquiry has been finally handled and there is no further reason to retain it. You can object to further storage at any time or request deletion, to the extent that no statutory retention obligations conflict. Enquiries with commercial or tax-law relevance are stored within the framework of the statutory retention periods (see section 9).

9. Storage period and deletion

(1) Unless an express storage period is stated in this privacy policy, personal data is deleted as soon as the purpose of its processing ceases to apply and no statutory retention obligations conflict.

(2) Statutory retention obligations arise, in particular, from the Handelsgesetzbuch (section 257 HGB, German Commercial Code) and the Abgabenordnung (section 147 AO, German Fiscal Code) and amount, depending on the type of document, to up to ten years. While such periods are running, the processing of the data concerned is restricted.

10. External links

This website may contain links to external third-party websites. We have no influence over their content and data processing; the respective provider is responsible for these in each case. The privacy notice of the respective linked website applies.

11. Your rights as a data subject

With regard to the personal data concerning you, you have the following rights in relation to Datargo:

(1) Access (Article 15 GDPR). You have the right to request confirmation as to whether we process data concerning you, as well as to obtain information about that data and the information specified in Article 15 GDPR (such as purposes, categories, recipients, storage period) and a copy of the data.

(2) Rectification (Article 16 GDPR). You have the right to request the rectification of inaccurate data concerning you and the completion of incomplete data concerning you.

(3) Erasure (Article 17 GDPR). You have the right to request the erasure of data concerning you, provided that one of the grounds specified in Article 17 GDPR applies and no statutory retention obligations conflict.

(4) Restriction of processing (Article 18 GDPR). You have the right, under the conditions of Article 18 GDPR, to request the restriction of the processing of data concerning you.

(5) Data portability (Article 20 GDPR). To the extent that the processing is based on consent or a contract and is carried out by automated means, you have the right to receive the data concerning you in a structured, commonly used and machine-readable format, or to request its transmission to another controller, where technically feasible.

(6) Objection (Article 21 GDPR). You have the right, on grounds relating to your particular situation, to object at any time to processing of data concerning you that is based on Article 6(1)(f) GDPR. We will then no longer process the data, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

(7) Withdrawal of consent given (Article 7(3) GDPR). You have the right to withdraw a consent you have given at any time with effect for the future. The lawfulness of the processing carried out up to the withdrawal remains unaffected.

(8) Exercising your rights. To exercise your rights, an informal notification to the contact details specified in section 2 suffices. The exercise of your rights is, as a matter of principle, free of charge for you.

12. Right to lodge a complaint with a supervisory authority

(1) Without prejudice to any other administrative or judicial remedy, you have the right under Article 77 GDPR to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, place of work or the place of the alleged infringement, if you consider that the processing of data concerning you infringes the GDPR.

(2) The supervisory authority responsible for Datargo is:

Der Hessische Beauftragte für Datenschutz und Informationsfreiheit (HBDI)
Postal address: Postfach 31 63, 65021 Wiesbaden
Street address: Gustav-Stresemann-Ring 1, 65189 Wiesbaden
Telephone: +49 611 1408-0
Email: poststelle@datenschutz.hessen.de
Website: datenschutz.hessen.de

Datargo GmbH is based in Hesse; the competent supervisory authority is therefore the aforementioned Hessischer Beauftragter für Datenschutz und Informationsfreiheit (Hessian Commissioner for Data Protection and Freedom of Information).

13. No automated decision-making

Automated decision-making in individual cases, including profiling within the meaning of Article 22(1) and (4) GDPR, does not take place in connection with visiting the website.

14. Changes to this privacy policy

We will adapt this privacy policy as soon as changes to the data processing we carry out or to the legal framework make this necessary. The current version published on this website applies in each case.

As at July 2026.

Governing language version

This document is provided in German and English. The English version is solely a translation for ease of understanding. The German version alone is authoritative and, in the event of a dispute and in the case of differences of interpretation or translation, solely binding.