Privacy Policy

How we handle personal data on getbroccoli.com. Built EU-first: we collect as little as we can, and analytics run only with your consent.

This policy is a draft covering the website. The controller's full legal details and the named list of processors will be published here before launch.

1. Controller

The controller responsible for data processing on this website is the team building Broccoli, contactable at privacy@getbroccoli.com. Full provider details will appear in our Imprint.

2. Scope

This policy covers our website at getbroccoli.com. Broccoli the product is source-available software you run on your own infrastructure; when you self-host it, you are the controller for the data it processes, and this policy does not apply to that deployment.

3. What we collect and why

For Slack directory imports into Broccoli, see our separate Slack privacy policy.

  • Server logs. When you visit, our hosting provider processes technical data (IP address, browser, timestamp, requested page) to deliver the site securely. Legal basis: our legitimate interest in a working, secure website (Art. 6 (1)(f) GDPR).
  • Newsletter. If you subscribe, we process your email address to send occasional product updates. Legal basis: your consent (Art. 6 (1)(a) GDPR). You can unsubscribe at any time via the link in every email.
  • Analytics. With your consent, we use product analytics to understand how the site is used and improve it. These cookies are off by default and set only after you opt in. Legal basis: your consent (Art. 6 (1)(a) GDPR and § 25 (1) TTDSG). Manage this any time via Cookie settings in the footer.

4. Cookies and consent

We set only strictly necessary cookies without asking. Anything beyond that (analytics) runs solely with your consent, which you give through our consent banner and can withdraw at any time from the Cookie settings link in the footer.

5. Recipients and processors

We share data only with processors acting on our behalf under a data processing agreement (Art. 28 GDPR) — our hosting, email, and analytics providers. The specific providers will be named here before launch. We do not sell personal data.

6. International transfers

Where a processor is outside the EU/EEA, transfers are safeguarded by an adequacy decision or EU Standard Contractual Clauses.

7. Retention

We keep personal data only as long as needed for the purpose it was collected, or as required by law. Newsletter data is kept until you unsubscribe.

8. Your rights

Under the GDPR you have the right to access, rectification, erasure, restriction, data portability, and objection, and the right to withdraw consent at any time. To exercise these, contact privacy@getbroccoli.com. You also have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR).

9. Changes

We may update this policy as the site or our tools change. The current version always lives on this page.