Privacy Policy

Last updated: April 2026

1. Introduction

D3Companion GmbH, operating under the brand name Projected ("we", "us", or "our"), is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website at projected.tech and our SaaS platform for construction feasibility studies (collectively, the "Service").

By using our Service, you consent to the data practices described in this policy.

2. Data Controller

The data controller responsible for your personal data is:

D3Companion GmbH (operating as Projected)
Bundesallee 187
10717 Berlin, Germany
Email: [email protected]
Phone: +49 (0) 30 86 32 12 28

3. Information We Collect

3.1 Information You Provide

We collect information you voluntarily provide when using our Service:

  • Account information: name, email address, company name, phone number
  • Billing information: payment details are collected and processed by our third-party payment processor
  • Project data: property information, floor plans, feasibility study inputs, and related construction data you upload or create
  • Communications: information you provide when contacting support or responding to surveys

3.2 Information Collected Automatically

When you access our Service, we automatically collect:

  • Device information: IP address, browser type and version, operating system
  • Usage data: pages visited, features used, time spent, click patterns
  • Log data: access times, error logs, and referring URLs

4. How We Use Your Information

We use collected information to:

  • Provide, maintain, and improve our feasibility study platform
  • Create and manage your user account
  • Process subscriptions and payments
  • Send service-related notifications and support responses
  • Analyze usage patterns to improve our Service
  • Detect, prevent, and address technical issues and security threats
  • Comply with legal obligations
  • Send promotional communications (only with your consent)

5. Legal Basis for Processing (GDPR)

Under the General Data Protection Regulation (GDPR), we process your personal data based on:

  • Contract Performance (Art. 6(1)(b)): Processing necessary to provide our services and fulfill our contractual obligations
  • Consent (Art. 6(1)(a)): Where you have given explicit consent, such as for marketing communications
  • Legitimate Interests (Art. 6(1)(f)): Processing necessary for our legitimate business interests, such as improving services and ensuring security
  • Legal Obligation (Art. 6(1)(c)): Processing necessary to comply with legal requirements

6. Data Sharing and Disclosure

We may share your information with:

  • Service Providers: Third-party vendors who assist in operating our platform, including payment processors, cloud infrastructure providers, and email service providers
  • Legal Requirements: When required by law, court order, or governmental authority
  • Business Transfers: In connection with a merger, acquisition, or sale of assets
  • With Your Consent: When you have given explicit permission

We do not sell your personal data to third parties.

7. Payment Processing

Payment processing for our subscription services is handled by a third-party payment processor. When you subscribe:

  • Your payment information is collected directly by our payment processor
  • We do not store your full credit card details on our servers
  • The payment processor's privacy policy applies to the payment data they collect

8. International Data Transfers

Your data is primarily stored and processed within the European Economic Area (EEA). Some of our service providers are based outside the EEA and may access data in connection with providing their services.

Where such transfers occur, we ensure appropriate safeguards are in place, including EU Standard Contractual Clauses (SCCs) and Data Processing Agreements (DPAs) with all service providers.

9. Cookies and Tracking Technologies

We use only essential cookies required for the platform to function, such as authentication and security tokens. These cookies are strictly necessary and do not require consent under GDPR.

We do not use third-party analytics cookies or tracking technologies.

10. Data Retention

We retain your personal data for as long as necessary to:

  • Provide our services while your account is active
  • Comply with legal obligations (e.g., tax records as required by German law)
  • Resolve disputes and enforce agreements

After account deletion, we will delete or anonymize your data within 90 days, except where retention is required by law.

11. Your Rights Under GDPR

You have the following rights regarding your personal data:

  • Right of Access (Art. 15): Request a copy of your personal data
  • Right to Rectification (Art. 16): Correct inaccurate or incomplete data
  • Right to Erasure (Art. 17): Request deletion of your data
  • Right to Restriction (Art. 18): Restrict processing of your data
  • Right to Data Portability (Art. 20): Receive your data in a structured, machine-readable format
  • Right to Object (Art. 21): Object to processing based on legitimate interests
  • Right to Withdraw Consent: Withdraw consent at any time
  • Right to Lodge a Complaint: File a complaint with a supervisory authority

To exercise your rights, contact us at: [email protected]

Supervisory Authority:
Berliner Beauftragte fuer Datenschutz und Informationsfreiheit
Friedrichstr. 219
10969 Berlin
www.datenschutz-berlin.de

12. Data Security

We implement appropriate technical and organizational measures to protect your data, including:

  • Encryption of data in transit (TLS/SSL) and at rest
  • Access controls and authentication mechanisms
  • Regular security assessments
  • Employee training on data protection

13. Children's Privacy

Our Service is not intended for individuals under 18 years of age. We do not knowingly collect personal data from children. If we become aware of such collection, we will delete the data promptly.

14. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our website with a new "Last Updated" date and, for significant changes, by email notification.

15. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, please contact us:

D3Companion GmbH (operating as Projected)
Bundesallee 187
10717 Berlin, Germany
Email: [email protected]
Phone: +49 (0) 30 86 32 12 28