Privacy Policy

The controller within the meaning of the GDPR is:

North Star Digital Labs UG (haftungsbeschränkt), Gerhofstrasse 3, 20354 Hamburg, Germany.

Data protection enquiries: datenschutz@northstarlabs.io, or by post to the address above marked for the attention of the data protection officer.

We process personal data only insofar as is necessary to provide a functional website and our content and services. Processing generally takes place only with the user's consent (Art. 6 (1) (a) GDPR) or where another legal basis applies (in particular Art. 6 (1) (b), (c) or (f) GDPR).

When you access our website, technical data is processed that your browser automatically transmits: browser type and version, operating system, referrer URL, hostname/IP address, time of the server request.

Legal basis: legitimate interest in stable, secure operation of the website (Art. 6 (1) (f) GDPR). Retention: up to 14 days in server logs.

If you contact us via the contact form or by email, we process the data you provide (name, company, email, content of the message) in order to respond.

Legal basis: Art. 6 (1) (b) GDPR (pre-contractual measures) or Art. 6 (1) (f) GDPR (legitimate interest). Retention: as long as required to handle your enquiry and any follow-up.

Parallax sample report: if you request a sample report on the Parallax page, we process your email address, the area you choose (GPs, specialists or pharmacies) and your language. We use this to provide the sample report and to answer any questions about it. Entries from the contact form and the sample form are forwarded to us by email through the form service FormSubmit (formsubmit.co). Legal basis: Art. 6 (1) (b) GDPR or Art. 6 (1) (f) GDPR. The interactive demo on that page runs entirely in your browser. What you enter there is not transmitted.

We use technically necessary cookies to make the website work (e.g. storing your language and cookie preferences). These do not require consent (Art. 6 (1) (f) GDPR).

We set optional cookies (statistics, marketing), currently Google Analytics 4 (see section 6), only with your consent via the cookie banner (Art. 6 (1) (a) GDPR). You can withdraw your consent at any time.

If you choose "Accept all" in the cookie banner, we use Google Analytics 4, a web analytics service from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). Without your consent, Google Analytics is not loaded and no data is sent to Google.

We measure which pages are viewed and how visitors move through the site, for example clicks on booking buttons, use of the Parallax demo, and the steps of the enquiry path (demo opened, sample report requested, own numbers entered, call booked). We also record the area chosen on the sample report step. Your email address and anything else you type into form fields is not sent to Google Analytics.

Google Analytics 4 does not store full IP addresses. Google may transfer data to the USA. The transfer relies on the EU-US Data Privacy Framework and EU Standard Contractual Clauses. Retention follows the retention period configured in our property.

Legal basis: your consent (Art. 6 (1) (a) GDPR, Section 25 (1) TDDDG). You can withdraw it at any time with effect for the future using the "Cookie settings" link in the footer.

Our contact page embeds an appointment booking widget from Cal, Inc. (San Francisco, USA). When you use the widget, the data you enter (e.g. name, email, selected slot) is transmitted to Cal.com.

Legal basis: Art. 6 (1) (b) GDPR (pre-contractual measures) and Art. 6 (1) (f) GDPR (efficient scheduling). Transfers to the USA are based on appropriate safeguards (EU-US Data Privacy Framework and EU Standard Contractual Clauses).

For security reasons this site uses SSL/TLS encryption to protect the transmission of confidential content.

You have the right to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and to object (Art. 21). You can withdraw any consent given at any time (Art. 7 (3) GDPR).

You also have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR). The authority responsible for us is the Hamburg Commissioner for Data Protection and Freedom of Information.