Privacy Policy

1. Introduction

Welcome to PSG-Stack Portal (operated by PSG Projekt Service Gesellschaft für Systemberatung und Softwareentwicklung mbH, Neuer Wall 80, 20354 Hamburg, Germany).

We care about your privacy and handle personal data in line with the EU General Data Protection Regulation (GDPR). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.

Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the site.

2. Information We Collect

Personal Information You Provide

We collect personal information that you voluntarily provide to us when you register on the service, including:

• Name
• Email address
• Password (encrypted)
• Profile information (if you sign in with Google)

Information Automatically Collected

We automatically collect certain information when you visit, use, or navigate the service:

• IP address
• Browser type and version
• Device information
• Usage data (pages visited, time spent, etc.)
• Session information

3. How We Use Your Information

Your data is used only to:

• Provide and maintain your PSG-Stack Portal account
• Send account-related notifications or newsletters (if you subscribed)
• Improve authentication and security
• Send you email verification and authentication emails
• Provide, operate, and maintain our service
• Improve, personalize, and expand our service
• Understand and analyze how you use our service
• Communicate with you about updates, security alerts, and support
• Prevent fraud and enhance security

We do not sell, rent, or share personal data with third parties for marketing purposes.

4. How We Share Your Information

We do not sell your personal information. We may share your information in the following situations:

• Service Providers: We share information with third-party service providers that perform services on our behalf (e.g., Cloudflare for hosting, Mailjet for emails)
• Legal Requirements: We may disclose your information if required by law or in response to valid requests by public authorities
• Business Transfers: We may share or transfer your information in connection with a merger, sale, or acquisition

5. OAuth and Third-Party Authentication

When you sign in using your preferred method (Email, Google, Microsoft, GitHub, or LinkedIn), we collect and store your name, email address, and technical information needed for login sessions (e.g., cookies and tokens).

For OAuth providers, we receive limited information including your name, email address, and profile picture. This information is used to create and manage your account. We do not have access to your OAuth provider passwords.

Your use of third-party authentication services is governed by their respective privacy policies. We recommend reviewing their privacy policies to understand how they handle your data.

6. Data Security

We implement appropriate technical and organizational security measures to protect your personal information:

• Passwords are hashed using industry-standard encryption
• All data transmission is encrypted using HTTPS/TLS
• Access to personal data is restricted to authorized personnel only
• We use Cloudflare's security features including DDoS protection and Turnstile bot protection
• Regular security audits and updates

7. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. When you delete your account, we will delete or anonymize your personal information.

8. Your Privacy Rights

Depending on your location, you may have the following rights:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information
• Data Portability: Request a copy of your data in a structured format
• Objection: Object to our processing of your personal information
• Withdraw Consent: Withdraw your consent at any time

To exercise these rights, please contact us at info@psg.de

9. Cookies and Tracking

We use only technical cookies required for authentication and secure operation of the Portal. These cookies do not track your browsing beyond this website.

• Session Cookies: Used to authenticate users and maintain sessions
• Security Cookies: Used for security features like Cloudflare Turnstile
• Preference Cookies: Used to remember your preferences and settings

All authentication cookies are httpOnly, secure, and use SameSite protection to prevent unauthorized access.

10. Children's Privacy

Our service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you become aware that a child has provided us with personal information, please contact us, and we will take steps to delete such information.

11. International Data Transfers

Our systems run on Cloudflare's global edge network. Data may be processed in data centers outside Germany or the EU, but always under Cloudflare's Data Processing Addendum (DPA) and GDPR-compliant safeguards.

Your information may be transferred to and maintained on servers located outside of your state, province, country, or other governmental jurisdiction where data protection laws may differ. By using our service, you consent to this transfer.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. You are advised to review this Privacy Policy periodically for any changes.

13. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data privacy rights, please contact us:

• Company: PSG Projekt Service Gesellschaft für Systemberatung und Softwareentwicklung mbH
• Address: Neuer Wall 80, 20354 Hamburg, Germany
• Email: info@psg.de
• Website: https://www.psg.de