Privacy Policy for p.ready_Market

The controller responsible for data processing on this website and the p.ready_Market platform is:

p.ready GmbH, represented by its Managing Director Olaf Kopmann

August-Bebel-Straße 26-53, 14482 Potsdam

Email: hello@p-ready.com

We process personal data only insofar as this is necessary to provide the website, the platform and our services, a statutory provision permits it, or you have given your consent. The legal bases are in particular Art. 6 (1)(a) (consent), (b) (contract and pre-contractual measures), (c) (legal obligation) and (f) (legitimate interest) GDPR.

We operate the platform’s servers with a hosting provider in data centers in Germany. Database, sign-in and file storage are provided by a database service; the data is stored in the Frankfurt am Main region. Data processing agreements pursuant to Art. 28 GDPR are in place with both providers. The legal basis is our legitimate interest in secure and reliable provision, Art. 6 (1)(f) GDPR.

When you access the website and the platform, our hosting provider automatically processes information transmitted by your browser: browser type and version, operating system, referrer URL, host name, time of the request and IP address. We do not combine this data with other data sources. The legal basis is our legitimate interest in technically error-free and secure provision, Art. 6 (1)(f) GDPR. We store the log files only for as long as is necessary for security and error analysis.

For the Brand Check and the AI Visibility Check, we process the address of your website, the publicly accessible content of this website, your inputs and corrections in the check, and the result. You receive the initial assessment without providing any personal data. For the full report, you provide your email address; we send you a sign-in link and create a profile (see section 7).

To limit free usage, we store a hash value of your IP address, which is generated using a random value that changes daily. As a result, it is no longer possible to infer the IP address once the day has ended.

The purpose is to produce the requested check and to protect against misuse. The legal bases are Art. 6 (1)(b) GDPR (pre-contractual measures at your request) and Art. 6 (1)(f) GDPR (protection against abusive use).

Before a check is started, we use Cloudflare Turnstile from Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. Turnstile uses technical characteristics of your browser and your IP address to check whether the request comes from a human. The legal basis is our legitimate interest in protecting the platform against automated misuse, Art. 6 (1)(f) GDPR. For the transfer to the USA, see section 13.

For your account, we process your email address, the brands you create, your inputs in the modules, the results, your bookings, and the times of sign-in and module start. Sign-in takes place without a password via a link that is valid for one hour. The purpose is to provide the Cockpit and the booked services. The legal basis is Art. 6 (1)(b) GDPR.

The modules analyze publicly accessible information, such as websites of you and your competitors, public statements by buyers, job advertisements, search results and responses from AI answer engines. This may include personal data of third parties, such as names in public posts or job advertisements. We process such data only insofar as it is required as evidence for the result. The legal basis is our legitimate interest and that of your company in an evidence-based market analysis, Art. 6 (1)(f) GDPR.

For the analysis, we use an AI provider as a processor, which processes the data in the USA. The provider does not use your inputs and results to train its models.

To measure visibility in AI answer engines and search engines, we use a measurement service based in the EU, and for web search in the modules a search service based in the USA, each as a processor. In doing so, we transmit search queries that may contain names of companies and persons.

The results are generated automatically. No automated decision within the meaning of Art. 22 GDPR that produces legal effects concerning you takes place.

We process payments via Stripe Payments Europe, Limited, 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland. You enter your payment data directly with Stripe; it does not reach our servers. We receive from Stripe your name, email address, billing address, your VAT identification number where applicable, the selected payment method and the payment status. The purpose is to process the payment and issue invoices. The legal bases are Art. 6 (1)(b) and (c) GDPR. Stripe also processes some data as an independent controller, for example for fraud prevention. If you use the Link payment service at checkout, Stripe’s privacy notices additionally apply.

We send sign-in links, result emails and notifications about your bookings via an email delivery service based in the EU from the address noreply@p-ready.com. For this purpose, the service processes your email address and the content of the message on our behalf. The legal basis is Art. 6 (1)(b) GDPR.

If you email us, we process your address and the content of your message in order to answer your inquiry. Our mailbox and office applications are operated by a provider based in the EU as a processor. The legal basis is Art. 6 (1)(b) GDPR insofar as your inquiry relates to a contract, otherwise Art. 6 (1)(f) GDPR.

With your separate consent, we occasionally send you information about p.ready by email. Delivery runs via the same email delivery service as in section 10. In doing so, we analyze whether a newsletter was opened and which links in it were clicked in order to improve our content. This analysis is part of your consent; the additional basis is § 25 (1) TDDDG (German Telecommunications Digital Services Data Protection Act). Consent is voluntary and independent of the use of the checks and modules. The legal basis is Art. 6 (1)(a) GDPR. You can withdraw your consent at any time with effect for the future, via the unsubscribe link in every message or by email to hello@p-ready.com.

We use only technically necessary cookies: a cookie that assigns a started check to your browser until you assign it to your account, a cookie for your signed-in session, and a cookie that remembers the most recently selected brand in your Cockpit. The basis is § 25 (2) no. 2 TDDDG, and for the subsequent processing Art. 6 (1)(b) and (f) GDPR. We do not use analytics or marketing cookies.

Some processors are based outside the EU or may process data there. The transfer is safeguarded as follows:

• Cloudflare (USA): adequacy decision of the EU Commission for companies certified under the EU-US Data Privacy Framework, alternatively EU Standard Contractual Clauses pursuant to Art. 46 (2)(c) GDPR.
• AI provider and search service (processing in the USA) and database service (based in Singapore, data in Frankfurt am Main): EU Standard Contractual Clauses pursuant to Art. 46 (2)(c) GDPR.
• Stripe and the other service providers based in the EU: insofar as they use subcontractors outside the EU, the transfer is safeguarded via the EU-US Data Privacy Framework or EU Standard Contractual Clauses.

You can obtain a copy of the Standard Contractual Clauses on request to hello@p-ready.com.

Data processing agreements pursuant to Art. 28 GDPR are in place with all service providers that process data on our behalf. We will tell you the names of the individual recipients on request to hello@p-ready.com (Art. 15 (1)(c) GDPR).

We store personal data only for as long as is necessary for the stated purposes:

• We delete an initial assessment for which no email address was provided after 30 days.
• We delete an account used only for a free check 12 months after the last sign-in. 30 days beforehand, we ask by email whether you would like to keep it.
• An account with booked services exists for as long as you use it. After 24 months without sign-in, we delete it after prior notice.
• You can have your account deleted at any time by email to hello@p-ready.com.
• We retain invoices and payment records for eight years pursuant to § 147 AO (German Fiscal Code) and § 257 HGB (German Commercial Code), even after the account has been deleted. During this period they are blocked from any other use.
• We store your consent to the newsletter until it is withdrawn.

Under the GDPR, you have the following rights: access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), objection to processing based on Art. 6 (1)(f) (Art. 21) and withdrawal of consent with effect for the future (Art. 7 (3)). To exercise these rights, a message to hello@p-ready.com is sufficient.

You have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Landesbeauftragte für den Datenschutz und für das Recht auf Akteneinsicht Brandenburg (Brandenburg State Commissioner for Data Protection and Access to Files).

This privacy policy is as of October 2026. We will update it if our services or the legal requirements change.