Privacy Policy

Datenschutzerklärung — how we handle personal data on this site, in line with the EU General Data Protection Regulation (GDPR / DSGVO) and the German Federal Data Protection Act (BDSG).

Controller
Scope of this policy
Server log files
Forms on this website
Newsletter
Cookies, analytics and fonts
Hosting
Your rights
Right to lodge a complaint
Changes to this policy

1 · Controller

The controller responsible for the processing of personal data on this website within the meaning of Art. 4 (7) GDPR is:

Drebes Management UG (haftungsbeschränkt)
Tal 44
80331 München, Germany
Email: mat@handedover.ai

biowissen and handedover are brands operated by Drebes Management UG (haftungsbeschränkt). You can reach the controller for any data protection request at the email address above.

2 · Scope of this policy

This policy applies to www.handedover.ai (hereinafter "the website"), including the pages baseline, won deal, transition, transition check and business case, and to data we receive when you contact us by email. It does not cover third-party services we link to, such as LinkedIn.

3 · Server log files

When you visit this website, our hosting provider automatically processes information that your browser transmits, in so-called server log files. The following data may be processed:

IP address
Date and time of the request
URL requested and HTTP status code
Referrer URL
Browser and operating system
Approximate region (derived from IP)

Purpose: ensuring the technical operation, security, and stability of the site.
Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in operating a secure website).
Storage period: the hosting provider retains request logs for a limited period for security and operations and then deletes them. We do not receive or store these logs ourselves.

4 · Forms on this website

The website has four kinds of form: the contact form ("Get in touch"), the enquiry form for the first handover, the registration and the optional result form of the handover baseline, and the transition check. If you use one of them, we process the data you enter: name, work email, company, optionally a telephone number, and the answers you give (for example how many deals you close in a year, who receives the account, what breaks today).

How the data travels: the form sends your entries to a small server function on our hosting provider, which forwards them as an email to mat@biowissen.ai. The email is delivered through the email service Resend (Resend, Inc., USA). We keep your enquiry in our mailbox; the website itself stores nothing in a database.

The baseline and the transition check: the CSV files you drop on the baseline page are read and computed in your browser only. No file, no row and no account name is transmitted to us. What leaves your browser is limited to the registration details you type (name, company, work email, telephone number if given) and, only if you click send under your result, the verdict and the aggregate numbers. The ten answers of the transition check stay in your browser unless you choose to send the result.

Legal basis: Art. 6 (1) (b) GDPR (pre-contractual measures at your request) and, where applicable, Art. 6 (1) (f) GDPR (legitimate interest in answering enquiries).
Storage period: as long as necessary to handle your enquiry, after which we delete the data unless statutory retention obligations apply (commercial or tax law, typically six to ten years).

We do not run a newsletter at present, and this website has no sign-up for one. Should we start one, we will add a section here, use a double opt-in procedure and rely on your consent (Art. 6 (1) (a) GDPR) before sending anything.

6 · Cookies, analytics and fonts

This website sets no tracking cookies and shows no cookie banner, because it does not need one. Only strictly technical cookies that may be set by your browser or by basic hosting are used.

Web analytics: we use Vercel Web Analytics and Vercel Speed Insights, provided by our hosting provider (see section 7). The script is loaded from our own domain, sets no cookies and uses no cross-site identifiers. Vercel derives a short-lived visitor identifier from the request that cannot be traced back to you and is not linked across days. We see aggregate numbers: page views, referrers, country, device type and loading performance, and which of a handful of buttons were clicked (for example that a baseline was started or a result was shown). No form entries, no file contents and no account names are sent to analytics.
Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in understanding how the website is used and whether it loads well). No information is stored on your device for this purpose.

Fonts: the typefaces on this website are delivered from our own domain. No font is loaded from Google or any other third party, so no request for a font leaves our hosting.

7 · Hosting

The website is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. Vercel delivers the pages from a global content delivery network, so a request may be served from a location outside the EU. Vercel's data processing agreement, including the EU standard contractual clauses, forms part of its terms of service, and Vercel is certified under the EU-US Data Privacy Framework.

Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in providing this website reliably).

8 · Your rights as a data subject

You have the following rights under the GDPR concerning the personal data we process about you:

Right of access (Art. 15 GDPR)
Right to rectification (Art. 16 GDPR)
Right to erasure ("right to be forgotten", Art. 17 GDPR)
Right to restriction of processing (Art. 18 GDPR)
Right to data portability (Art. 20 GDPR)
Right to object (Art. 21 GDPR), in particular against processing based on legitimate interest
Right to withdraw consent (Art. 7 (3) GDPR), with effect for the future

To exercise any of these rights, contact us at mat@handedover.ai.

9 · Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The competent authority for our registered office in Bavaria is:

Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 18, 91522 Ansbach, Germany
www.lda.bayern.de

You may also contact the authority of your habitual residence or place of work.

10 · Changes to this policy

We may update this policy as our service or the legal landscape changes. The current version is always available at this URL, with the date of the last change below.

Last updated: 20 September 2026.