Legal
This privacy policy explains what personal data we collect, how we use it, and what rights you have regarding your data. Personal data means any information that can be used to identify you personally.
We process your data solely on the basis of applicable law (GDPR, TTDSG, TMG). For any further questions about data protection, please contact us (see section 2).
The controller for data processing on this website is:
This website is hosted by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany ("Hetzner").
Hetzner processes technical connection data (including IP addresses, access times) exclusively on our behalf under a data processing agreement (Art. 28 GDPR). The legal basis is Art. 6(1)(f) GDPR (legitimate interest in reliable website operation).
Hetzner's privacy policy: https://www.hetzner.com/de/rechtliches/datenschutz
We retain personal data only for as long as necessary for the respective processing purpose. After that, data is deleted unless statutory retention obligations (particularly tax and commercial law: generally 6–10 years) apply.
We process personal data on the following legal bases:
Where processing is based on your consent, you may withdraw that consent at any time with effect for the future. The lawfulness of processing carried out before the withdrawal is not affected.
For security reasons this website uses SSL/TLS encryption. You can recognise an encrypted connection by "https://" in your browser's address bar. Data you transmit to us cannot be read by third parties.
We hereby object to the use of contact data published as part of the site notice obligation for the purpose of sending unsolicited advertising or informational material. We reserve the right to take legal action in the event of unsolicited sending of advertising information, for example through spam e-mails.
When you visit this website, our host automatically collects the following data in server log files transmitted by your browser:
This data is not merged with other data sources. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in technically error-free website operation).
Our website uses only technically necessary cookies: session cookies for login state and a CSRF token to protect against cross-site request forgery. These cookies are deleted at the end of the session or on logout, or expire automatically after a short period.
The legal basis is Art. 6(1)(f) GDPR (legitimate interest in secure application operation). We do not use tracking or advertising cookies.
When you send us an enquiry via the contact form, we store your details (name, e-mail address, subject, message) for the purpose of handling your request and any follow-up questions. The data is not passed on without your consent.
The legal basis is Art. 6(1)(b) GDPR where the request relates to a contract or pre-contractual measures; otherwise Art. 6(1)(f) GDPR (legitimate interest in effectively handling enquiries).
If you contact us by e-mail or telephone, we store your enquiry including all personal data arising from it for the purpose of handling it. The data is not passed on without your consent.
The legal basis is Art. 6(1)(b) GDPR (contractual/pre-contractual), Art. 6(1)(f) GDPR (legitimate interest), or Art. 6(1)(a) GDPR (consent) where applicable.
When you submit an application for a pricing adjustment (Poverty Mode) or a partnership, we process the data you provide (name, e-mail, description of your situation, and any uploaded documents) solely for the purpose of evaluating and processing your application.
Uploaded supporting documents are deleted after the review is complete. The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures).
To use the platform you can create an account. We collect your name and e-mail address, which are used to provide platform features and for account-related communications.
Data is retained for as long as your account is active. Upon deletion of your account, your data is deleted without delay unless statutory retention obligations apply. The legal basis is Art. 6(1)(b) GDPR.
You may register using your Google account. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google transmits your name and e-mail address to us for account creation.
The legal basis is Art. 6(1)(f) GDPR (legitimate interest in a simple registration process). Google holds EU-US Data Privacy Framework (DPF) certification. Google's privacy policy: https://policies.google.com/privacy
When you make a purchase we process the data necessary to fulfil the contract (name, e-mail, payment information). Payment processing is handled by an external payment service provider which processes your payment data on its PCI-DSS-certified systems. We do not receive complete payment data (e.g. full card numbers).
The legal basis is Art. 6(1)(b) GDPR. Invoice-relevant data is retained in accordance with statutory retention periods (10 years).
This website uses Google Fonts and Font Awesome in locally installed versions. No connection to external servers of Google or Fonticons takes place; no data is transmitted to third parties.
You have the following rights at any time:
To exercise your rights please contact us (section 2). We will respond within one month.
You have the right to lodge a complaint with a supervisory authority — in particular in the Member State of your habitual residence, your place of work or the place of the alleged infringement — if you consider that the processing of your personal data infringes the GDPR (Art. 77 GDPR).