Privacy Policy

1. Responsible Party

2. Data Protection Officer

A Data Protection Officer is currently not appointed as there is no legal obligation. For data protection inquiries, please contact the address above.

3. General Information

Data protection is of high importance to us. We process personal data exclusively in accordance with GDPR and German data protection law.

This policy covers:

• The website www.saasx.de
• The SaaS platform SaaS Premium
• Communication with interested parties and customers
• Contract execution and billing

4. Categories of Data Subjects

We process personal data from:

• Website visitors
• Interested parties
• Customer contact persons (B2B)
• Platform users
• Business partners and service providers

5. Legal Basis for Processing

Data processing is based on:

• Art. 6 (1) lit. b GDPR - Contracts and pre-contractual measures
• Art. 6 (1) lit. c GDPR - Legal obligations
• Art. 6 (1) lit. f GDPR - Legitimate interests
• Art. 6 (1) lit. a GDPR - Consent (when obtained)
• Art. 28 GDPR - Data processing on Customer's behalf

6. Website Access and Server Logs

When accessing our website, the following data is recorded:

• IP address (anonymized)
• Date and time of access
• Accessed pages
• Referrer URL
• Browser and operating system information

7. Hosting

Our website and platform are hosted in Germany under a Data Processing Agreement (Art. 28 GDPR).

8. Contact Forms

Contact form submissions are processed for inquiry handling and communication.

Storage Duration: Until complete processing and within legal retention periods.

9. Cookies

We use technically necessary cookies for website operation.

Optional Cookies: Only with prior consent.

10. Google Analytics

This website uses Google Analytics with anonymized IP addresses.

Purpose: Website usage analysis and optimization.

Legal Basis: Art. 6 (1) lit. a GDPR (Consent).

11. Platform Registration

We process:

• Company data
• Contact information
• Access credentials
• Usage and system data
• Contract and billing data

Purpose: Platform provisioning, contract execution, IT security, support, billing.

12. Data Processing Agreement

When Customers process personal data in the platform:

• Customer = Data Controller
• SaaS Premium GmbH = Data Processor

Processing occurs under a Data Processing Agreement (DPA) per Art. 28 GDPR.

13. Payment Processing

External payment service providers process payments:

• Stripe Payments Europe Ltd.
• PayPal (Europe) S.à r.l. et Cie, S.C.A.
• SEPA Transfer (own bank)
• Klarna Bank AB (publ)

We do not store payment card numbers.

14. Legal Retention

15. Your Rights

You have the right to:

• Access (Art. 15 GDPR)
• Correction (Art. 16 GDPR)
• Deletion (Art. 17 GDPR)
• Processing restrictions (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Object (Art. 21 GDPR)
• Withdraw consent (Art. 7 (3) GDPR)

Contact: datenschutz@saasx.de

16. Right to Lodge a Complaint

You have the right to lodge a complaint with a data protection authority (Art. 77 GDPR).

17. Security Measures

We implement appropriate technical and organizational measures including:

• Access restrictions
• Role and permission concepts
• Data transmission encryption
• Backups and recovery processes
• Security event logging

18. Policy Updates

We reserve the right to update this privacy policy for technical, legal, or organizational reasons. Changes will be published on our website.