privacy policy

1. data controller

neobim gmbh
roonstrasse 23a, 76137 karlsruhe, germany
email: hi@sparc.build
phone: +49 173 438 3864

2. data collected automatically

when you visit sparc.build, the following data is collected automatically by our hosting provider:

• ip address (anonymized)
• browser type and version
• operating system
• referrer url
• date and time of access

this data is processed on the basis of art. 6 (1) lit. f gdpr (legitimate interest in secure and stable website operation).

3. newsletter and lead capture

if you subscribe to our newsletter, we collect your email address and a record of which page you signed up from. the legal basis is art. 6 (1) lit. a gdpr (consent). you can unsubscribe at any time via the link in every email.

to deliver this service, we share your email with the following processors (each under a data processing agreement and standard contractual clauses where applicable):

• beehiiv (united states) — newsletter delivery. privacy policy
• resend (united states) — email delivery. privacy policy
• google (united states) — signup logging. privacy policy

data transfers to the united states are protected by the eu-us data privacy framework and/or standard contractual clauses under art. 46 gdpr.

4. hosting

this website is hosted by vercel inc. vercel may automatically collect information in server log files when you access our pages. more information: vercel.com/legal/privacy-policy

5. cookies, tracking, and fonts

sparc.build does not use tracking cookies. no analytics scripts (google analytics, meta pixel, hotjar, etc.) are loaded. fonts are self-hosted on our own infrastructure — no fonts are loaded from google or other third-party cdns. all javascript libraries are served from our own domain.

6. data sharing

we do not sell, trade, or rent your personal data. data may be shared with:

• hosting providers (vercel) for website delivery
• email service providers (beehiiv, resend) — see section 3
• google llc (apps script + sheets) — see section 3
• legal authorities when required by law

7. data retention

personal data is retained only as long as necessary for the purposes stated above:

• server logs: deleted after 30 days
• newsletter subscriptions: stored until you unsubscribe, then removed from active systems within 30 days
• internal backups: rolling 90-day retention before automatic deletion

8. your rights

under the gdpr, you have the right to:

• access your stored data (art. 15 gdpr)
• rectification of inaccurate data (art. 16 gdpr)
• erasure of your data (art. 17 gdpr)
• restriction of processing (art. 18 gdpr)
• data portability (art. 20 gdpr)
• object to processing (art. 21 gdpr)
• withdraw consent (art. 7 (3) gdpr)

to exercise your rights, contact us at: hi@sparc.build

9. supervisory authority

you have the right to lodge a complaint with a data protection supervisory authority. the authority responsible for us is the landesbeauftragte für den datenschutz und die informationsfreiheit baden-württemberg.

10. changes to this policy

we may update this privacy policy from time to time. changes will be published on this page with a revised date.