Privacy Policy

Last updated: December 2025

1. Data Controller

The data controller responsible for data processing on this website is:

Patterno GmbH (i.G.)
Jungfrauenthal 8
20149 Hamburg
Germany

2. Overview of Data Processing

Patterno is a platform for public tenders. We only process personal data to the extent necessary to provide our services.

Data we collect:

Account data: Email address, name, password (encrypted)
Company data: Company name, address (optional)
Usage data: Search profiles, saved tenders
Technical data: IP address, browser type (for security)

3. Legal Basis

We process your data on the following legal bases:

Contract fulfillment (Art. 6 para. 1 lit. b GDPR): Registration, login, tender search, search profiles
Consent (Art. 6 para. 1 lit. a GDPR): Newsletter sending
Legitimate interest (Art. 6 para. 1 lit. f GDPR): Security logging, fraud prevention

4. Recipients and Service Providers

We use the following service providers to deliver our services:

Google Cloud Platform (Hosting)

Our servers are located in the EU (Belgium, europe-west1).
Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Supabase (Authentication)

We use Supabase for secure login.
Processed data: Email address, encrypted password.
Provider: Supabase Inc., USA (EU Standard Contractual Clauses).

Google Gemini (AI Search)

We use Google Gemini for semantic search.
Only tender texts are processed, no personal data.
Provider: Google Ireland Limited.

Google Workspace (Email)

We use Google Workspace for newsletter delivery.
Processed data: Email address.
Provider: Google Ireland Limited.

5. Data Transfer to Third Countries

Some of our service providers are based in the USA. Data transfer is based on EU Standard Contractual Clauses (Art. 46 para. 2 lit. c GDPR), which ensure an adequate level of data protection.

6. Storage Duration

Account data: Until deletion of your account
Search profiles & saved tenders: Until deleted by you or your account
Security logs: 365 days
Newsletter unsubscription: Immediately upon unsubscription

7. Your Rights

You have the following rights regarding your personal data:

Information (Art. 15 GDPR): You can request information about your stored data.
Rectification (Art. 16 GDPR): You can have incorrect data corrected.
Erasure (Art. 17 GDPR): You can request deletion of your data.
Restriction (Art. 18 GDPR): You can request restriction of processing.
Data portability (Art. 20 GDPR): You can receive your data in a common format.
Objection (Art. 21 GDPR): You can object to processing.
Withdrawal (Art. 7 GDPR): You can withdraw given consent at any time.

To exercise your rights, contact: info@patterno.de

8. Cookies and Local Storage

We only use technically necessary cookies and local storage:

Session cookie: For your login (duration: session)
CSRF token: For protection against attacks (duration: session)
Auth token: For secure authentication (duration: 7 days)

We do not use tracking cookies, advertising cookies, or analytics tools like Google Analytics.

9. Newsletter

When you subscribe to our newsletter, we use your email address to send you relevant tenders. The legal basis is your consent (Art. 6 para. 1 lit. a GDPR).

You can unsubscribe from the newsletter at any time via the link in each email or in your account settings.

10. Right to Complain

You have the right to lodge a complaint with a data protection supervisory authority. The supervisory authority responsible for us is:

The Hamburg Commissioner for Data Protection and Freedom of Information
Ludwig-Erhard-Str. 22, 7th floor
20459 Hamburg
https://datenschutz-hamburg.de

11. Changes to This Privacy Policy

We reserve the right to adapt this privacy policy as needed to comply with changed legal requirements or changes to our service. The current version can always be found on this page.