As of: June 2026
Unless otherwise stated below, the provision of your personal data is neither legally nor contractually required, nor is it necessary for the conclusion of a contract. You are not obliged to provide the data. Failure to provide it has no consequences. This only applies insofar as no other indication is made in the processing operations described below.
"Personal data" means all information relating to an identified or identifiable natural person.
You can visit our website without providing any personal information about yourself.
Each time our website is accessed, usage data is transmitted to us or our web host / IT service provider by your internet browser and stored in log data (so-called server log files). This stored data includes, for example, the name of the page accessed, the date and time of the request, the IP address, the amount of data transferred and the requesting provider.
Processing is carried out on the basis of Art. 6(1)(f) GDPR based on our overriding legitimate interest in ensuring the smooth operation of our website and improving our services.
Our website is hosted by Heroku (Salesforce, Inc., Salesforce Tower, 415 Mission Street, 3rd Floor, San Francisco, CA 94105, USA). The aforementioned data is processed on the provider's servers. A data processing agreement has been concluded with the provider in accordance with Art. 28 GDPR.
Your data may be transferred to and processed in third countries outside the EU, in particular the USA. An adequacy decision by the EU Commission exists for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Where the provider is not certified under the TADPF, data transfer is additionally based on the EU Commission's standard contractual clauses.
Please feel free to contact us at any time. The controller responsible for data processing is:
If you proactively contact us via email for business purposes, we collect your personal data (name, email address, message text) only to the extent you provide. The data processing serves to handle and respond to your enquiry.
If the contact is for the purpose of carrying out pre-contractual measures (e.g. advice in the event of purchase interest, preparation of offers) or concerns a contract already concluded between you and us, this data processing is carried out on the basis of Art. 6(1)(b) GDPR.
If the contact is for other reasons, this data processing is carried out on the basis of Art. 6(1)(f) GDPR based on our overriding legitimate interest in handling and responding to your enquiry. In this case, you have the right to object at any time to the processing of personal data concerning you, based on your particular situation.
We use your email address only to process your enquiry. Your data will subsequently be deleted in compliance with statutory retention periods, unless you have agreed to further processing and use.
When using the contact form, we collect your personal data (name, email address, message text) only to the extent you provide. The data processing serves the purpose of making contact.
If the contact is for the purpose of carrying out pre-contractual measures (e.g. advice in the event of purchase interest, preparation of offers) or concerns a contract already concluded between you and us, this data processing is carried out on the basis of Art. 6(1)(b) GDPR.
If the contact is for other reasons, this data processing is carried out on the basis of Art. 6(1)(f) GDPR based on our overriding legitimate interest in handling and responding to your enquiry. In this case, you have the right to object at any time to the processing of personal data concerning you, based on your particular situation.
We use your email address only to process your enquiry. Your data will subsequently be deleted in compliance with statutory retention periods, unless you have agreed to further processing and use.
A user account is required to use certain functions, in particular the paid Pro version. During registration, we collect and process the data you provide (in particular email address, access credentials and, if applicable, name and other account data).
Processing is carried out to provide the user account and the associated functions on the basis of Art. 6(1)(b) GDPR (fulfilment of the usage contract or implementation of pre-contractual measures). The provision of the required data is necessary for the creation and use of the user account; without this data, no user account can be provided.
To provide the application and store account data, we use the infrastructure and database service Supabase. Processing is carried out on our behalf on the basis of a data processing agreement in accordance with Art. 28 GDPR.
Your data will be stored for as long as your user account exists. After deletion of the user account, your data will be deleted unless statutory retention obligations prevent this.
When you take out the paid Pro version, we process the data necessary for the establishment, substantive execution and settlement of the subscription contract (in particular account data, subscribed plan, term, billing and payment information).
Processing is carried out on the basis of Art. 6(1)(b) GDPR to fulfil the subscription contract concluded with you. Insofar as we are obliged to retain certain data (in particular invoice data) due to tax and commercial law requirements, further storage is based on Art. 6(1)(c) GDPR. The statutory retention periods in this regard are up to ten years.
To process payments in connection with the Pro version, we use the payment service provider Stripe (Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland; for users where applicable Stripe, Inc., 354 Oyster Point Boulevard, South San Francisco, CA 94080, USA).
Depending on the chosen payment method (credit card, PayPal, Klarna, Amazon Pay), the data required for payment processing (e.g. name, email address, billing and payment data, amount, payment method) is transmitted to Stripe or the respective payment service provider and processed there. Complete payment data (e.g. credit card number) is entered directly with Stripe; we ourselves do not receive complete payment instrument data.
Processing is carried out on the basis of Art. 6(1)(b) GDPR, as the data processing is necessary for the processing of the payment and thus for the fulfilment of the contract.
If you select PayPal, Klarna or Amazon Pay as payment methods, the privacy policies of the respective provider to whom you are redirected or whose service is integrated also apply.
Your data may be transferred to and processed in third countries outside the EU, in particular the USA. An adequacy decision by the EU Commission exists for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Where the respective provider is not certified under the TADPF, transmission is additionally based on the EU Commission's standard contractual clauses.
Further information on data processing by Stripe can be found at: https://stripe.com/privacy.
We use the address validation service of Google (Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland; "Google") on our website.
Data processing serves the purpose of checking your entries in our address forms in real time for input and spelling errors, and of supplementing missing data where applicable. If incorrectly entered data is detected, alternative suggestions for correcting the data are displayed. For this purpose, the address data you enter is transmitted to and stored and analysed by the provider.
Among other things, the following information may be transmitted to Google and processed there: postal addresses (country, city, postal code, street, house number), email address, telephone number.
Your data may also be transferred to the USA. An adequacy decision by the EU Commission exists for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified itself under the TADPF and thereby committed to complying with European data protection principles.
The processing of your personal data is carried out on the basis of Art. 6(1)(f) GDPR based on our overriding legitimate interest in a correct data basis for the fulfilment of our contractual obligations. You have the right to object at any time to this processing of personal data concerning you, based on your particular situation.
The data is processed separately by the provider and is not combined with other data. It is deleted by the provider as soon as the status of the entered data has been determined, but at the latest after 30 days.
Further information on Google's terms of use and privacy policy can be found at: https://cloud.google.com/maps-platform/terms and https://www.google.com/policies/privacy/.
When concluding a paid contract (Pro version), we collect and process your personal data only insofar as this is necessary for the fulfilment and processing of the contract and for the handling of your enquiries. The provision of the data is required for the conclusion of the contract. Failure to provide it means that no contract can be concluded. Processing is carried out on the basis of Art. 6(1)(b) GDPR and is necessary for the performance of a contract with you.
Your data is passed on to service providers involved in contract and payment processing, in particular the payment service provider and infrastructure and IT service providers. In all cases, we strictly comply with the legal requirements. The scope of data transmission is limited to a minimum.
Our website integrates the website badge for Google Customer Reviews from Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; "Google").
The integration serves the purpose of displaying the number and result of reviews we have received via Google so far and of advertising our participation in this programme.
In order to display the badge on our website and to show you personalised advertisements on Google, Google uses cookies. Among other things, your IP address may be processed and transmitted to Google.
Your data may be transferred to the USA. An adequacy decision by the EU Commission exists for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified itself under the TADPF and thereby committed to complying with European data protection principles.
The use of cookies or comparable technologies is carried out with your consent on the basis of § 25(1) sentence 1 TTDSG in conjunction with Art. 6(1)(a) GDPR. The processing of your personal data is carried out with your consent on the basis of Art. 6(1)(a) GDPR. You can withdraw your consent at any time without affecting the lawfulness of processing carried out on the basis of the consent prior to withdrawal.
Further information on the terms of use and privacy policy for Google Customer Reviews can be found at https://www.google.com/shopping/customerreviews/static/tos/en_US/1_01_tos.html and https://policies.google.com/privacy.
We use your email address, independently of contract processing, exclusively for our own advertising purposes for sending newsletters, provided you have expressly consented to this. Processing is carried out on the basis of Art. 6(1)(a) GDPR with your consent. You can withdraw your consent at any time without affecting the lawfulness of processing carried out on the basis of the consent prior to withdrawal. You can unsubscribe from the newsletter at any time using the corresponding link in the newsletter or by notifying us. Your email address will then be removed from the mailing list.
You have the following rights under the GDPR:
Right to object (Art. 21 GDPR): Insofar as we process data on the basis of Art. 6(1)(f) GDPR (legitimate interest), you have the right to object at any time to the processing of personal data concerning you, based on your particular situation. Where your data is processed for direct marketing purposes, you can object to the processing at any time without giving reasons.
To exercise your rights, an informal notification to the contact details stated above under "Controller" is sufficient.
Right to lodge a complaint with a supervisory authority (Art. 77 GDPR): Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a data protection supervisory authority if you consider that the processing of your data infringes the GDPR. The competent supervisory authority for the controller is the State Commissioner for Data Protection of Lower Saxony.
We take appropriate technical and organisational security measures to protect your data against accidental or deliberate manipulation, loss, destruction or access by unauthorised persons. We use SSL or TLS encryption to secure data transmission. You can recognise an SSL/TLS-encrypted connection by, among other things, the string "https://" in the address bar of your browser.
This privacy policy is currently valid and dated June 2026. The further development of our website and offerings or changes in legal or regulatory requirements may make it necessary to amend this privacy policy.
Last updated: June 2026