Back to App

Privacy Policy

Pharma IBP Scenario Architect · Last updated: June 2026

1. Controller

Kloetzing Transformation Partners UG (haftungsbeschränkt) · HRB 289456 B · Amtsgericht Charlottenburg, Bölschestraße 60, 12587 Berlin, Germany

Represented by the managing director: John Pierre Klötzing.

Email: john@kloetzingtp.com

2. What Data We Collect & How It Is Processed

Contact Form Data:

  • Name
  • Email address
  • Message content

Planning Data (local-first):

  • Planning scenarios, supply plans, financial models, and forecast records are stored locally in your browser's local storage — not in any cloud database.
  • CSV files are parsed entirely in your browser; no data is transmitted.
  • Excel files are temporarily transmitted to our EU-based server for one-time conversion, then deleted immediately after processing. The converted result is stored locally only.

AI Processing (Executive Leadership Report):

  • When generating an Executive Leadership Report, only aggregated planning metrics are transmitted to our AI language model hosted on EU servers.
  • No patient-identifiable data or raw transactional records are shared with the AI model.
  • Aggregated data is processed for the sole purpose of generating the report and is not retained beyond the request.

No special categories of personal data (Art. 9 GDPR) are processed. We do not use your data for model training or sell it to third parties.

3. Legal Basis (Art. 6 GDPR)

  • Contact form data: Art. 6(1)(f) — Legitimate interest (responding to inquiries)
  • Usage/planning data: Art. 6(1)(f) — Legitimate interest

4. Purpose of Processing

  1. Providing free access to the reference tool
  2. Responding to customization inquiries
  3. Ensuring platform security and integrity
  4. Improving application functionality

We do not use your data for advertising, profiling, or sale to third parties.

5. Sub-processors

  • Base44 (hosting, database, authentication) — base44.com

A Data Processing Agreement (DPA) with Base44 is in place or being established per Art. 28 GDPR.

6. Data Retention

  • Contact form submissions: retained to respond to inquiries, deleted upon request
  • Planning scenarios & forecasts: retained in your browser's local storage only; deleted when you clear browser data or remove the dataset
  • Uploaded Excel/CSV files on the server: deleted immediately after conversion processing is complete
  • AI report inputs (aggregated metrics): not retained beyond the report generation request

7. Your Rights (Art. 15–22 GDPR)

Right of access, rectification, erasure, restriction, portability, objection.

Contact: john@kloetzingtp.com — response within 30 days.

8. Data Security

TLS/HTTPS encryption, access controls, authentication via Base44 platform.

9. International Transfers

Base44 and Stripe may process data outside the EEA. EU Standard Contractual Clauses apply.

10. Supervisory Authority

Bundesbeauftragter für den Datenschutz und die Informationsfreiheit (BfDI)

www.bfdi.bund.de

11. Changes

Material changes will be notified via email. Current version always available in-app.

Prepared in accordance with EU GDPR 2016/679.