Privacy Policy

1. Introduction

Welcome to getcolors.co (the "Website"), a service provided jointly by Torsten Kühlmann and Mahmoud Daya ("we", "us", "our"). This Website provides software services (the "Service"). This Privacy Policy explains how we collect, use, store, and protect information from visitors and registered users ("you") of this Website and the Service.

We are committed to protecting your privacy. This policy is intended to comply with the requirements of the EU General Data Protection Regulation (GDPR) and relevant US privacy laws.

As we jointly operate this website and service, we are considered 'Joint Controllers' responsible for your personal data collected through this Website and Service within the meaning of the GDPR.

7. Your Data Protection Rights

Depending on your location (especially EEA or certain US states), you have rights regarding your personal data:

Access, Rectification, Erasure, Restriction, Portability, Objection, Withdraw Consent: You have the rights described previously (Access, Correct, Delete, Restrict Processing, Data Portability, Object to processing based on legitimate interests, Withdraw Consent).

Account Information: You can typically review and update some of your account information directly by logging into your account settings. For other requests, please contact us using the details provided in Section 2 or Section 11.

Lodging a Complaint: You have the right to complain to a relevant data protection supervisory authority.

Specific Information for US Residents:

• This policy outlines the categories of data collected (identifiers like email, commercial information like service usage, internet activity like logs), purposes, and third-party sharing.
• We do not "sell" or "share" (for cross-context behavioral ads) personal information as defined under laws like CCPA/CPRA.
• You possess rights to know, delete, correct your data, and non-discrimination for exercising these rights.

To exercise any rights, contact us at torsten@getcolors.co (as indicated in Section 2) or via the details in Section 11. We will respond according to applicable law.

8. International Data Transfers

Your information, including personal data, will be processed by AWS and Vercel. These providers operate globally, meaning your data will likely be transferred to and processed in countries outside of your country of residence, including the United States, where data protection laws may differ from those in your jurisdiction (like the EEA).

We rely on appropriate mechanisms for these transfers as provided by AWS and Vercel, which may include:

• Decisions by the European Commission confirming an adequate level of data protection in the recipient country (an "Adequacy Decision").
• Standard Contractual Clauses (SCCs) approved by the European Commission implemented between us (implicitly via terms of service) and the providers, or between the providers' entities.
• For transfers to the US, reliance on the EU-U.S. Data Privacy Framework (DPF), UK Extension to the EU-U.S. DPF, and Swiss-U.S. DPF, where AWS/Vercel entities are certified participants.

By using the Service, you acknowledge and consent to these necessary international transfers.