Privacy Policy
This policy explains how Crewnetic processes personal data, for which purposes and which rights you have under Articles 13 and 14 GDPR.
1. Controller
The controller under the GDPR is Philipp Britz, Meißenwies 5, 66123 Saarbrücken, Germany. Email: info@crewnetic.de.
2. Overview of processing
We process account and contact data, company and freelancer profiles, event and booking data, availability, messages, documents, working-time records, invoices, reviews, consent records, security logs and support requests as needed to operate Crewnetic.
3. Hosting (Vercel)
The website and application are hosted by Vercel. Requests may produce technical connection and security data such as IP address, timestamp, requested resource and browser information. Processing is required to provide and secure the service (Art. 6(1)(b) and (f) GDPR).
4. Database (Neon)
Application data is stored in a managed PostgreSQL database operated by Neon. Access is restricted through role-based permissions and row-level security. Processing is based on the service agreement and our legitimate interest in secure operations.
5. Server logs
Security-relevant requests may be logged for fault diagnosis, abuse prevention and incident investigation. Logs are retained only as long as required for these purposes and applicable legal duties.
6. Cookies, analytics, Meta and Google Ads measurement
Essential cookies are used for sessions, security, language and privacy preferences. Pseudonymous first-party statistics and marketing measurement can be selected independently and are activated only after consent. Statistics may include page views, campaign source, device type and approximate location under a random signed visitor ID; that ID is not stored as an account link. If you allow Marketing, the Meta Pixel and server-side Conversions API provided by Meta Platforms Ireland Limited may process the requested URL, time, browser and device data, IP address and the _fbp/_fbc identifiers to measure page views and selected company-funnel actions, including pricing views, company calls to action, successfully submitted company enquiries, completed company registrations and booked meetings. The Google Ads tag provided by Google Ireland Limited may process comparable technical data and Google advertising identifiers; advertising click IDs are processed in Crewnetic campaign statistics only with Marketing consent and are not stored as an account link. Google Ads conversion events are sent only after a company enquiry has been submitted successfully, a company registration has completed or a 15-minute meeting has actually been booked. Enhanced conversions are disabled. Crewnetic does not send names, email addresses, phone numbers, profile content, event, booking, invoice or time-record data to Meta or Google Ads. The legal basis is your consent under Section 25(1) TTDSG and Art. 6(1)(a) GDPR. Without consent, neither marketing script is loaded and no marketing event is initiated. You may withdraw consent at any time in Privacy settings; future transmissions stop and accessible marketing cookies are removed. Transfers to the USA may be protected by the EU-US Data Privacy Framework and standard contractual clauses.
7. Registration and accounts
We process email address, password hash, account role, verification status and consent evidence to create and protect your account and provide the contracted service (Art. 6(1)(b) GDPR).
8. Profile data
Freelancers and companies decide which profile information they provide. Public visibility can be controlled in settings. Contact details and private documents are disclosed only where a justified workflow and the configured permissions allow it.
9. Events, applications and bookings
Event details, staffing positions, applications, direct requests, availability and bookings are processed to match and coordinate assignments. Relevant information is shared only with participating users and authorised company members.
10. Messages
Messages and attachments are processed to provide communication related to applications, bookings, time records, invoices, disputes and support.
11. Reviews
Reviews are stored with their internal author reference to prevent abuse. Public presentation is anonymised and may be delayed until both parties have reviewed or the review period expires.
12. Time tracking and QR check-in
Start, finish, breaks, travel time and assignment reports are processed to document and approve working time. QR check-in identifies the assignment; continuous location monitoring is not performed. Optional location confirmation requires consent.
13. Document uploads
Qualification, licence, insurance and other documents are stored in protected storage. Access uses short-lived signed links and depends on visibility settings and a legitimate assignment-related purpose.
14. Invoices and payments
Invoice metadata, uploaded invoices and payment status are processed to support billing between companies and freelancers. Companies can first use a one-time 30-day pilot without a card or automatic renewal. A paid subscription starts only through an explicit Stripe Checkout; Stripe processes the required billing and payment data and Crewnetic does not store complete card or bank details. Local development and test environments may simulate subscription states without a real payment.
15. Email delivery and outreach
We send transactional email required for accounts and workflows. Sales email is sent only where a documented lawful basis exists. Open and click tracking is used only with the required permission and remains indicative because mail clients and security scanners can distort metrics.
16. Recipients and processors
Data may be shared with carefully selected processors for hosting, database, email and payment services under data-processing agreements. Data is not sold. International transfers are protected by an applicable adequacy decision or suitable safeguards.
17. Retention and deletion
Data is retained for the account term and afterwards only as required by law, contractual claims, security or documented retention schedules. Account deletion starts a grace period; data subject to statutory retention is restricted and later deleted or anonymised.
18. Your rights
You may request access, correction, deletion, restriction, portability and objection where the statutory conditions apply. Requests can be made through account settings or by emailing info@crewnetic.de.
19. Withdrawal of consent
You may withdraw consent at any time with effect for the future. This does not affect the lawfulness of processing carried out before withdrawal. Essential processing required to provide an account cannot be disabled while the account remains active.
20. Right to complain
You have the right to lodge a complaint with a competent data-protection authority. The competent authority for the controller is the Independent Data Protection Centre Saarland.
21. Company enquiries, callback requests and introduction meetings
When you submit a company enquiry, request a callback or book an introduction meeting, we process the company name, contact name, email address, optional phone number and free-text details, as well as language, submission time, selected meeting and any campaign source and campaign name. We call only where you expressly requested a callback and store that choice together with the displayed consent wording as evidence. Processing is used to answer your request, perform the callback or meeting, prevent double bookings and evaluate our own acquisition channels. The legal bases are Art. 6(1)(b) GDPR for the enquiry and meeting as pre-contractual steps, Art. 6(1)(a) GDPR for the requested callback and Art. 6(1)(f) GDPR for internal source attribution; you may object to the latter under Art. 21 GDPR. Access is limited to authorised Crewnetic staff and processors used for hosting, database and transactional email. The request does not subscribe you to marketing. Enquiries without a subsequent contract receive a technical deletion deadline of 24 months; meeting or contract evidence may be restricted and kept longer where legal duties or claims require it. You can exercise the rights listed above via info@crewnetic.de and withdraw callback consent at any time for the future. This description reflects the implemented technical flow; the legal bases, retention periods, processors and international transfers must be reviewed against the actual contracts before production use and updated where necessary.
22. Changes
We update this policy when processing activities, providers or legal requirements change. Material changes are communicated through the platform or by email where appropriate.