Privacy policy
As of March 2026
1. Controller
The controller under the GDPR is AcousticIndex GbR, Strelitzer Straße 19, 10115 Berlin, Germany. Contact: leo@acousticindex.com.
2. Processing Overview
This privacy policy explains how personal data is processed on the Acoustic Index platform. The platform provides a database for acoustic materials and products.
3. Legal Bases
We process personal data on the following GDPR bases:
- Art. 6(1)(a) — consent, for example when using Google OAuth.
- Art. 6(1)(b) — contract performance for platform and account features.
- Art. 6(1)(f) — legitimate interests such as security and error analysis.
4. Hosting and Infrastructure
The platform is hosted by Vercel Inc. Database and authentication services are provided by Supabase Inc. Transfers to the United States are protected through EU Standard Contractual Clauses where required.
5. Data We Process
When you visit the site, server logs may include IP address, timestamp, URL, browser and operating-system information and referrer URL. These logs are required to provide the website and are deleted after no more than 30 days.
When you create an account, we store your email address, authentication data and registration timestamp. Manufacturer accounts may also store company, product and measurement data, which can be publicly displayed where this matches the purpose of the platform.
If you contact us, we store the information you submit so we can process and respond to the request.
6. Cookies and Local Storage
The platform uses technically necessary cookies for authentication and session management. Optional analytics cookies are only used after consent.
7. Google OAuth and Recipients
If you sign in with Google, Google may provide your name, email address and profile image URL after your approval. Data may be processed by Vercel, Supabase and Google where those services are used.
8. Retention and Your Rights
Personal data is deleted when it is no longer required for the processing purpose. Account data is removed when the account is deleted, unless legal retention duties apply.
You have GDPR rights to access, rectification, erasure, restriction, portability, objection and withdrawal of consent. To exercise these rights, contact leo@acousticindex.com. You may also lodge a complaint with a data protection authority.