Privacy Policy
Last updated: January 2026
1. Data Controller
The data controller responsible for data processing on this website is:
Patterno GmbH i.G.
Jungfrauenthal 8
20149 Hamburg
Germany
Email: info@patterno.de
2. Overview of Data Processing
Patterno is a platform for public tenders. We only process personal data to the extent necessary to provide our services.
Data we collect:
- Account data: Email address, name, password (encrypted)
- Company data: Company name, address (optional)
- Usage data: Search profiles, saved tenders
- Technical data: IP address, browser type (for security)
3. Legal Basis
We process your data on the following legal bases:
- Contract fulfillment (Art. 6 para. 1 lit. b GDPR): Registration, login, tender search, search profiles
- Consent (Art. 6 para. 1 lit. a GDPR): Newsletter sending
- Legitimate interest (Art. 6 para. 1 lit. f GDPR): Security logging, fraud prevention
4. Recipients and Service Providers
We use the following service providers to deliver our services:
Google Cloud Platform (Hosting)
Our servers are located in the EU (Belgium, europe-west1).
Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Supabase (Authentication)
We use Supabase for secure login.
Processed data: Email address, encrypted password.
Provider: Supabase Inc., USA (EU Standard Contractual Clauses).
Google Gemini (AI Search)
We use Google Gemini for semantic search.
Only tender texts are processed, no personal data.
Provider: Google Ireland Limited.
Google Workspace (Email)
We use Google Workspace for newsletter delivery.
Processed data: Email address.
Provider: Google Ireland Limited.
5. Data Transfer to Third Countries
Some of our service providers are based in the USA. Data transfer is based on EU Standard Contractual Clauses (Art. 46 para. 2 lit. c GDPR), which ensure an adequate level of data protection.
6. Storage Duration
- Account data: Until deletion of your account
- Search profiles & saved tenders: Until deleted by you or your account
- Security logs: 365 days
- Newsletter unsubscription: Immediately upon unsubscription
7. Your Rights
You have the following rights regarding your personal data:
- Information (Art. 15 GDPR): You can request information about your stored data.
- Rectification (Art. 16 GDPR): You can have incorrect data corrected.
- Erasure (Art. 17 GDPR): You can request deletion of your data.
- Restriction (Art. 18 GDPR): You can request restriction of processing.
- Data portability (Art. 20 GDPR): You can receive your data in a common format.
- Objection (Art. 21 GDPR): You can object to processing.
- Withdrawal (Art. 7 GDPR): You can withdraw given consent at any time.
To exercise your rights, contact: info@patterno.de
8. Cookies and Tracking Technologies
8.1 Cookie Consent
When you first visit our website, we show you a cookie banner. You can choose between:
- Necessary cookies only – No analytics, no session recordings
- Accept all cookies – Analytics and improvement cookies
- Individual settings – Granular control over each category
You can change your choice at any time via the "Cookie Settings" link in the footer.
8.2 Necessary Cookies
These cookies are required for the website to function and are set without your consent:
| Name | Purpose | Duration |
|---|---|---|
| patterno-cookie-consent | Stores your cookie preferences | 12 months |
| Session cookie | For your login | Session |
| CSRF token | Protection against attacks | Session |
8.3 Analytics Cookies (only with your consent)
Google Analytics 4
| Name | Purpose | Duration |
|---|---|---|
| _ga | Distinguishes visitors | 2 years |
| _ga_* | Stores session status | 2 years |
Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
Purpose: Analysis of user behavior to improve our website
Legal basis: Consent (Art. 6 para. 1 lit. a GDPR)
Data transfer to USA: Yes, based on the EU-US Data Privacy Framework
More information: https://policies.google.com/privacy
Microsoft Clarity
| Name | Purpose | Duration |
|---|---|---|
| _clck | User ID | 1 year |
| _clsk | Session ID | 1 day |
| CLID | User ID | 1 year |
Provider: Microsoft Ireland Operations Limited, One Microsoft Place, Dublin, D18 P521, Ireland
Purpose: Heatmaps and session recordings for UX improvement
Legal basis: Consent (Art. 6 para. 1 lit. a GDPR)
Data transfer to USA: Yes, based on the EU-US Data Privacy Framework
Session recordings: Clarity records anonymized sessions. Form inputs are NOT captured.
More information: https://privacy.microsoft.com
Vercel Analytics
Provider: Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA
Purpose: Aggregated visitor statistics (page views, performance)
Legal basis: Consent (Art. 6 para. 1 lit. a GDPR)
Data transfer to USA: Yes, based on Standard Contractual Clauses
More information: https://vercel.com/legal/privacy-policy
8.4 Your Rights Regarding Cookies
You can withdraw your consent at any time with effect for the future:
- Click on "Cookie Settings" in the footer
- Disable the desired cookie categories
- Click on "Save Settings"
Data already collected will no longer be used for personalized analysis after withdrawal.
9. Newsletter
When you subscribe to our newsletter, we use your email address to send you relevant tenders. The legal basis is your consent (Art. 6 para. 1 lit. a GDPR).
You can unsubscribe from the newsletter at any time via the link in each email or in your account settings.
10. Right to Complain
You have the right to lodge a complaint with a data protection supervisory authority. The supervisory authority responsible for us is:
The Hamburg Commissioner for Data Protection and Freedom of Information
Ludwig-Erhard-Str. 22, 7th floor
20459 Hamburg
https://datenschutz-hamburg.de
11. Changes to This Privacy Policy
We reserve the right to adapt this privacy policy as needed to comply with changed legal requirements or changes to our service. The current version can always be found on this page.