Your data and Preb

Last updated: October 13, 2026
Version: 1.1

This page is for people who were contacted by a recruiter who used Preb, or who believe their contact details were found through Preb. It explains what Preb is, who is responsible for your data, and how to ask us to stop.

What Preb is

Preb is a tool for recruiting teams, run by Kranz & Gupta, Indiepal GbR in Bonn, Germany. A recruiter uploads a list of people they would like to reach, for example candidates or hiring managers, and Preb finds and verifies a work email address, a personal email address or a phone number for each of them, together with public professional information such as job title and employer. Preb obtains this information on the recruiter's instruction from specialist business contact data providers. Preb has no database of people of its own and does not sell your data.

Who is responsible for your data

The company that uploaded your details and asked for them to be enriched is responsible for that processing under data protection law. It decides why it wants to contact you and must have a lawful basis for doing so. Preb acts on that company's instructions as its processor.

If you know which company contacted you, you can send your request directly to them. You can also send it to us, and we will help.

What you can ask for

• Tell me who processed my data. We will tell you which of our customers processed your details, where we can, or forward your request to them.
• Show me what you hold. You can ask for a copy of the data about you that is stored in Preb.
• Correct or delete it. You can ask for your data to be corrected or deleted.
• Stop processing me through Preb. You can put your email address, phone number and LinkedIn profile URL on our suppression list yourself, see below. Preb will then delete the results we hold about you in every customer's workspace, will not show or export them again, and will not look you up again for any customer in the future. Your details stay on the list only as a one-way hash, so we can recognise them without storing the values themselves, together with a masked form such as a***@example.com that lets us see what was suppressed.

These rights follow from the General Data Protection Regulation for everyone, wherever you live. Residents of California and other US states with privacy laws have comparable rights, which we honour in the same way.

How to ask us to stop

Use our form at app.preb.co/opt-out. You do not need an account. Enter the email address a recruiter may have used to find you, and if you like a phone number and your LinkedIn profile URL. We send a confirmation link to that address. As soon as you open it and confirm, the address is on our suppression list, the results we hold about it are deleted and we never look it up again. The link works once and stays valid for 24 hours.

Phone numbers and LinkedIn profiles cannot be confirmed with a link, so a member of our team checks them within 5 business days before they are added. You receive an email as soon as your request is confirmed.

For everything else, for example a copy of your data, a correction, or forwarding your request to the company that contacted you, email hello@preb.co from the address in question, or write to Kranz & Gupta, Indiepal GbR, Brunnenstr. 11, 53123 Bonn, Germany. Tell us what you would like us to do and, if you know it, the name of the company that contacted you. We may ask you to confirm that the identifiers belong to you, for example by replying from the email address in question. We do not ask for identity documents.

What happens next

A request sent through the form takes effect the moment you confirm it. For requests by email we confirm receipt within 5 business days and complete your request within one month. Residents of the United States receive a reply within 45 days. If a request is complex, we may need longer and will tell you why.

If you asked to be suppressed, your results are removed from the Preb application at once and from backup copies within 30 days. Our data providers process the same request under their own policies; we forward it to them where the data came from them.

What we keep after a suppression

The hashed and masked identifiers on the suppression list, and a record of your request (the date, the masked identifiers, what you told us and the outcome), which we keep for three years as proof that we handled it. We do not keep the email address itself once your request is confirmed, and a request that is not confirmed within 24 hours is deleted. If a customer typed your name or employer into their own list, that row stays visible to that customer only, marked as suppressed and without any contact details, because it is the customer's own record. Ask the customer to delete it, or ask us to forward your request.

Questions and complaints

Write to hello@preb.co. You can also complain to a data protection supervisory authority. The authority responsible for Preb is the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen, Kavalleriestraße 2-4, 40213 Düsseldorf, Germany, www.ldi.nrw.de. Our full Privacy Policy explains everything else we do with personal data.