Privacy notice
Last updated: 4 November 2026
1. Scope and controller
This privacy notice covers proleniq.de, including its German and English pages and account functions. The controller is SIRAT SOLUTIONS GmbH, Martin-Luther-King-Straße 40, 63452 Hanau, Germany. For privacy enquiries, contact info@sirat-solutions.de.
2. Hosting and website access
The website and the email mailbox used for enquiries are operated with ALL-INKL.COM – Neue Medien Münnich, proprietor René Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany. The provider processes the data needed to deliver and securely operate these services.
Your IP address and technical request data are transmitted to the web server to deliver pages and images. These data may include the requested file, date and time, browser information and, where applicable, the referring page. Processing is based on Article 6(1)(f) GDPR. Our legitimate interest is the reliable and secure operation of the website.
The optional access logs available in the hosting account and the access statistics based on them are disabled. Independently of this, ALL-INKL maintains administrative security logs with full IP addresses to detect and prevent cyberattacks. According to the provider information used for this hosting arrangement, these logs are deleted within seven days. We cannot access them.
3. Contact by email
If you use the email address provided, we process your sender address, message content and any accompanying information to handle your enquiry. Article 6(1)(b) GDPR applies to enquiries concerning a potential contract; other enquiries are processed under Article 6(1)(f) GDPR. Enquiries are retained only for as long as needed to handle them, subject to statutory obligations and the establishment, exercise or defence of legal claims.
4. User accounts with Firebase Authentication
We use Firebase Authentication, a Google service, for registration, email verification, sign-in, password resets and account deletion. The data processed includes the email address, encrypted password or authentication data, user ID, verification status, IP address, user agent and technical security and sign-in data. Processing is necessary to provide and secure the Proleniq account under Article 6(1)(b) GDPR and to prevent abuse and attacks under Article 6(1)(f) GDPR.
Google processes the data as a technical service provider. According to the provider, Firebase Authentication operates exclusively from data centres in the United States. Google’s contractual data protection and transfer provisions apply to transfers to the United States. Further information is available in Privacy and Security in Firebase and the Firebase Data Processing and Security Terms.
Google states that Firebase Authentication retains logged IP addresses for a few weeks. Other authentication information is stored until the account is deleted; after deletion is initiated, Google states that it is removed from live systems and backups within up to 180 days unless a legal obligation requires longer retention.
5. Master profile with Cloud Firestore
Signed-in users with a verified email address can create a private professional master profile. We process the profile and contact information they voluntarily enter, including their name, professional title, city and country, optional phone number and profile links, professional summary, availability, work preferences, projects, skills, professional experience, education, certificates and language skills. Project records may contain client, role, task, result, method and technology information. Do not enter trade secrets, health data or other particularly sensitive information.
Profile data is stored under the technical user ID in Google Cloud Firestore. The Proleniq default database is located in the Google Cloud region europe-west3 (Frankfurt). It is used to provide and edit the private master profile and to prepare later document features that the user explicitly triggers. The legal basis is Article 6(1)(b) GDPR. The profile is not public and is not automatically shared with clients or recruiters. Security rules restrict access to the relevant signed-in and verified user account.
Data is generally retained until individual records or the user account are deleted. When an account is deleted, the application first initiates deletion of the associated profile data. Technical backups and statutory retention requirements may delay final removal. Google processes the data as a technical service provider under the privacy and transfer terms applicable to Firebase.
6. Local résumé import
Signed-in and verified users can select a text-based PDF or DOCX file to create a draft for the master profile. The original file is read exclusively in the user’s browser using locally hosted software libraries. It is not transmitted to Proleniq, Google or another analysis provider for text extraction and is not stored as a document on the server. Scanned PDFs and images are not processed in this version, and no AI analysis is performed.
The recognised text and derived drafts remain in the browser’s working memory while they are reviewed. Users must review the results and explicitly choose whether each profile section should be ignored, added or replaced. Only then are the selected details stored as profile data in Cloud Firestore. Section 5 applies to the purpose, legal basis, recipients and deletion of those stored details. The original file remains unaffected.
Automatic document recognition can misclassify or omit information. Only use documents you are entitled to process and remove trade secrets, health information and other particularly sensitive or unnecessary details before importing them.
7. Browser storage and other website features
This website does not use analytics or advertising tools or tracking cookies. Firebase stores the authentication state in the browser so that an account can remain signed in. Signing out ends the active session. Users should sign out after using a shared device. The language preference can be stored as an account setting in the master profile.
There is currently no server-side document upload, AI processing, newsletter subscription or payment processing. The résumé import described in section 6 processes the selected file locally in the browser.
The legal notice links to the contact form on the corporate website sirat-solutions.de. The form is not embedded in Proleniq. The corporate website’s privacy notice applies to that form.
8. Recipients and transmission
The people responsible for handling enquiries, ALL-INKL as hosting and email provider, and Google as the provider of Firebase Authentication and Cloud Firestore receive access as necessary. Data may also be disclosed to competent bodies to meet legal obligations or pursue legal claims. The website is accessible over HTTPS. This does not automatically provide end-to-end encryption for ordinary email.
9. Your rights
Subject to the applicable legal requirements, you may request access, rectification, erasure, restriction of processing and data portability (Articles 15–20 GDPR). Where processing is based on consent, you may withdraw that consent at any time with effect for the future.
Right to object: You may object to processing based on Article 6(1)(f) GDPR on grounds relating to your particular situation, under Article 21 GDPR. Contact info@sirat-solutions.de to exercise this right.
You may lodge a complaint with a data protection supervisory authority (Article 77 GDPR). The supervisory authority for our registered office is the Hessian Commissioner for Data Protection and Freedom of Information.
There is no automated decision-making, including profiling, within the meaning of Article 22 GDPR.