Privacy notice

1. Controller

The controller responsible for data processing on this website within the meaning of the GDPR is:

Registered company name
India
Email: sandeep@presly.de
Telephone: +91 6281758943

A data protection officer has been appointed: name and contact, or state that none is required.

2. What this notice covers

This notice applies to www.presly.de and to the enquiry we receive through it. It covers two distinct roles we hold:

• As controller — for data you give us through this website, by email or by telephone while you are evaluating Presly.
• As processor — for the personal data of your customers, buyers and staff that you store inside Presly Estate. For that data, you are the controller and we act strictly on your instructions under a data processing agreement.

3. Data we collect on this website

3.1 Enquiry form

When you submit the contact form, we process the details you enter: first and last name, work email address, telephone number, company name, country, company size, inventory size, the subject of your enquiry and your message.

Purpose: to answer your enquiry, prepare a quotation, and provide a demonstration of the software.
Legal basis: Article 6 (1) (b) GDPR where your enquiry relates to entering into a contract, and Article 6 (1) (f) GDPR for our legitimate interest in responding to business enquiries. Where you have ticked the consent box, Article 6 (1) (a) GDPR applies.
Retention: we keep enquiry data for e.g. 24 months after our last contact with you, unless a contract is concluded, in which case statutory retention periods apply.

Providing these details is voluntary. Without a name, company and email address we cannot reply to you.

3.2 How the form is transmitted

This website is a static site. The enquiry form does not transmit your data to a server we operate; it opens your own email client with the details pre-filled, and the message is then sent from your mail account to sandeep@presly.de. If we later connect the form to a form-processing service, this notice will name that provider and the location of processing before it goes live. Update this section if you change the form handler.

3.3 Server log files

Our hosting provider records standard access data when this website is requested: IP address, date and time, the file requested, the referring page, browser type and operating system. This is necessary to deliver the site securely and to diagnose faults.

Legal basis: Article 6 (1) (f) GDPR — our legitimate interest in the secure and reliable operation of our website.
Retention: log data is retained for e.g. 7 days and then deleted.

3.4 Cookies and tracking

This website sets no cookies and loads no analytics, no advertising pixels and no social media trackers. Fonts, stylesheets and scripts are all served from our own domain, so visiting these pages does not send your IP address to third-party content networks.

If we introduce analytics in future, this notice will be updated and consent will be requested before any non-essential cookie is set.

3.5 Embedded maps

The contact page currently shows a decorative placeholder rather than an embedded map. If we embed a third-party map, your IP address and browser details will be transmitted to that provider when the map loads, and we will ask for your consent first or load the map only after an active click. Update this section if you embed a map.

4. Data in the Presly Estate software

When you use Presly Estate, you store personal data about your own customers: names, contact details, identity documents, booking and payment information and sales correspondence. In that context:

• You are the controller. You decide what is stored, why and for how long.
• We are the processor. We process that data only on your documented instructions and only to provide the software.
• A data processing agreement is concluded with every customer before any personal data is loaded, in accordance with Article 28 GDPR.
• Sub-processors used for hosting and infrastructure are named in that agreement, and you are informed before any change.

Technical and organisational measures include encryption in transit and at rest, company-level data isolation enforced at the database layer, role-based access control, audit logging of changes, and regular backups with a tested restoration procedure.

5. Where your data is processed

Our hosting infrastructure is located in e.g. the European Union (Germany). Data is not transferred outside the European Economic Area unless this is necessary for a specific service you have asked for, in which case we put appropriate safeguards in place under Chapter V GDPR and inform you beforehand.

6. Recipients of your data

We share personal data only where it is necessary and lawful:

• with our hosting and infrastructure providers, under processor agreements;
• with our email provider, for correspondence with you;
• with professional advisers such as tax advisers and auditors, where legally required;
• with authorities, where we are legally obliged to disclose.

We do not sell personal data, and we do not share it with third parties for their own marketing purposes.

7. Your rights

Under the GDPR you have the right to:

• Access the personal data we hold about you (Article 15);
• Rectify inaccurate or incomplete data (Article 16);
• Erase data where there is no lawful reason for us to keep it (Article 17);
• Restrict processing in the circumstances set out in Article 18;
• Data portability — receive data you provided in a structured, machine-readable format (Article 20);
• Object to processing based on legitimate interests (Article 21);
• Withdraw consent at any time, with effect for the future, where processing is based on consent (Article 7 (3)).

To exercise any of these rights, write to sandeep@presly.de. We will respond within one month. If you believe we have handled your data unlawfully, you have the right to lodge a complaint with a supervisory authority — for example the data protection authority of the German state in which you live or work, or in which the alleged infringement occurred.

8. Security

We use appropriate technical and organisational measures to protect personal data against loss, misuse and unauthorised access, including encrypted transport (TLS), encrypted storage, access controls, audit logging and personnel confidentiality obligations. No transmission over the internet can be guaranteed absolutely secure, but we work to keep our measures current and we document them.

9. Data breaches

If a personal data breach occurs that is likely to result in a risk to your rights and freedoms, we will notify the competent supervisory authority without undue delay and, where required, inform affected individuals. Customers whose data we process will be informed without undue delay so that they can meet their own notification obligations.

10. Changes to this notice

We update this notice when our processing changes. The version published on this page is the current one.

Last updated: date