Privacy policy

Who is responsible

The controller under the EU General Data Protection Regulation (GDPR) is:

Email privacy@seamlessworks.ai, phone +49 176 64419092.

We are not required to appoint a data protection officer. For any question about your data, write to privacy@seamlessworks.ai.

Visiting the website

The website is hosted by Vercel Inc., 440 N Barranca Avenue #4133, Covina, CA 91723, United States. It runs in Vercel’s data centre in Frankfurt, Germany, in the EU, and pages reach you through Vercel’s network from the location nearest to you. When you open a page, your browser sends the server the data it needs to deliver it, and the server records it in log files: your IP address, the date and time, the page requested, the page you came from, your browser and operating system, and whether the request succeeded.

We use this data only to deliver the website, keep it secure and find faults. The legal basis is our legitimate interest in a secure website that works (Art. 6(1)(f) GDPR). The logs are kept only as long as these purposes need, then deleted automatically.

Fonts, images and videos come from our own domain. While you browse, your browser does not contact any other company.

Contact form and email

When you use the contact form or email us, we process what you send: your name, email address and company, your role and industry if you give them, and your message. We use it only to answer you and, if it leads to working together, to prepare and carry out that contract.

The legal basis is Art. 6(1)(b) GDPR where your enquiry concerns a contract or the steps before one, and otherwise our legitimate interest in answering the enquiries we receive (Art. 6(1)(f) GDPR).

We delete your enquiry once it has been dealt with, unless tax or commercial law requires us to keep it. Business correspondence must usually be kept for six years.

Job applications

When you apply through the careers page, we process your name, email address, the area you are interested in, a link if you add one (for example to a profile or portfolio), what you write about yourself, and your CV. We use these details only to assess your application and, if we make you an offer, to prepare your employment. The legal basis is Art. 6(1)(b) GDPR: steps taken at your request before entering into an employment contract.

Please send only what the application needs. Leave out sensitive information, such as about your health, unless you want us to take it into account.

If we don’t hire you, we delete your application six months after telling you our decision. We keep it that long in case we have to answer legal claims, for example under the German General Equal Treatment Act (AGG). If you would like us to keep it for future openings, we ask for your consent first (Art. 6(1)(a) GDPR), and you can withdraw it at any time. If we hire you, your application becomes part of your personnel file.

Who receives your data

These companies process personal data for us, only on our instructions and under data processing agreements (Art. 28 GDPR):

• Vercel Inc. hosts the website and runs the code that receives the forms, in Frankfurt, Germany.
• Plus Five Five, Inc. (Resend), United States, delivers what you send through the forms to our inbox by email, including any CV you attach.
• Google Cloud EMEA Limited (Google Workspace), 70 Sir John Rogerson’s Quay, Dublin 2, Ireland, hosts our email, where your messages and applications are stored.

The website runs in the EU. Resend processes data in the United States, and Google may process data outside the EU. Vercel, Resend and Google are US companies, or part of one, so data may also be accessed from the United States. All three are certified under the EU-U.S. Data Privacy Framework, for which the European Commission has decided that it ensures an adequate level of protection (Art. 45 GDPR). Their data processing agreements also include the EU standard contractual clauses (Art. 46(2)(c) GDPR).

We don’t sell your data or share it for advertising. We pass it to others only where the law requires us to, for example to tax authorities.

Cookies and tracking

The website sets no cookies and stores nothing on your device. It has no analytics, no advertising and no social media plugins. More on the cookies page.

Security

The website is served only over an encrypted connection (HTTPS), so what you send through the forms cannot be read on the way.

Your rights

Under the GDPR you have the right to:

• know what data we hold about you and receive a copy (Art. 15)
• have incorrect data corrected (Art. 16)
• have your data deleted (Art. 17)
• have its processing restricted (Art. 18)
• receive the data you gave us in a common, machine-readable format (Art. 20)
• withdraw a consent you gave, with effect for the future (Art. 7(3))

Right to object. Where we process your data on the basis of our legitimate interests (Art. 6(1)(f) GDPR), you can object at any time, on grounds relating to your particular situation (Art. 21 GDPR). We then stop, unless we have compelling legitimate grounds that override your interests, or need the data to establish, exercise or defend legal claims.

To use any of these rights, write to privacy@seamlessworks.ai.

You also have the right to complain to a data protection authority (Art. 77 GDPR). The authority responsible for us is the Bavarian State Office for Data Protection Supervision (BayLDA), Promenade 18, 91522 Ansbach, Germany, www.lda.bayern.de.

Automated decisions

We don’t make decisions about you based solely on automated processing, including profiling (Art. 22 GDPR).

Changes to this policy

We update this policy when the website or the law changes. The date at the top shows when it last changed.