Privacy notice

1. Controller

Daniel Shtabinsky
Prinz-Georg-Str. 45, 40477 Düsseldorf, Germany
Email: sleep@performeight.com

2. Data we process

When you visit this site we process technical data required to deliver the pages (IP address, user agent, timestamps). When you submit a form or request investor access we process the data you provide (name, email, company, message) together with account and authentication metadata. Inside the investor data room we log document opens, downloads and AI-assistant queries for security and audit purposes.

3. Legal basis

Art. 6 (1) (b) GDPR (pre-contractual and contractual measures) for investor access and account handling, Art. 6 (1) (f) GDPR (legitimate interest in a secure, functional service) for logging and abuse prevention, and Art. 6 (1) (a) GDPR (consent) for optional cookies and marketing communication.

4. Recipients and processors

We use vetted processors under Art. 28 GDPR to host the site, database and authentication (Lovable Cloud / Supabase), send transactional email (Lovable Email), and, where enabled, import documents from Google Drive. No data is sold. Transfers outside the EEA rely on Standard Contractual Clauses where applicable.

5. Retention

Account and investor-access data is kept for the duration of the relationship plus applicable statutory retention periods. Interest signups are kept until you unsubscribe. Audit and security logs are kept for up to 24 months.

6. Your rights

You have the right to access, rectification, erasure, restriction, portability and objection under Art. 15–21 GDPR, and to lodge a complaint with a supervisory authority (for us: Landesbeauftragte für Datenschutz und Informationsfreiheit NRW).

Template based on standard GDPR wording — final review by a qualified lawyer recommended before commercial launch.