Privacy Policy Updated

Data Protection and Privacy Policy

Last Updated: 07 January 2026

This Privacy Policy is provided in English for transparency and ease of understanding. A German version is available upon request.

Below you will find our data protection information, which applies to our website page https://smartmeister.app/ (technically independent from the landing page website on smartmeister.app/deeplearning/), in accordance with § 5 of the German Digital Services Act (Digitale-Dienste-Gesetz – DDG), § 25 of the German Telecommunications-Telemedia Data Protection Act (Telekommunikation-Telemedien-Datenschutz-Gesetz – TTDSG), and Articles 13, 14, and 21 of the General Data Protection Regulation (GDPR).

We inform you about the processing of your personal data by us and the rights and claims to which you are entitled on the basis of data protection regulations. For contact details of the responsible party (data controller), please see Section 15 below.

_________________________________________________________________

1. Sources and Data for the Processing of Personal Data

We receive and process personal data that we obtain through the use of our website.

This may include the following types of data:

  • Usage data (pages visited, interest in content, access times)
  • Meta/communication data (device information, IP addresses)

We may also process other data comparable to the categories mentioned above.

Data is also stored in server log files, which are collected and automatically stored by the provider and mostly transmitted to us by your browser. These are:

  • Referrer URL
  • Host name of the accessing computer
  • Date and time of the server request
  • Name of the requested file
  • Page from which the corresponding file was requested
  • Web browser and operating system used
  • (Full) IP address of the requesting computer
  • Amount of data transferred

We may process other data comparable to the categories mentioned above.

The legal basis for the temporary storage of this data or the log files is Art. 6 para. 1 lit. f) GDPR. We collect the listed data to ensure a smooth connection to the website and to enable users to use our website comfortably. The log file is used to evaluate system security and stability and for administrative purposes.

_________________________________________________________________

2. Hosting

We use the following hosting provider for our website:

GitHub Inc. 88 Colin P Kelly Jr St San Francisco, CA 94107 United States

Contact:

  • Email: support@github.com
  • Website: https://www.github.com/

GitHub processes Personal Data in compliance with the GDPR, ensuring a lawful basis for each processing activity. As the company GitHub Inc. is a US company, we would like to point out that data transfer to the USA cannot be completely ruled out. GitHub Inc. provides data protection by design and default, in compliance with EU GDPR laws.

We use the following hosting services: infrastructure and platform services, computing capacity, storage space, security services, and technical maintenance services for the purpose of operating the online offering. The current website is static, therefore we currently process no data through this online website. Should we process data in the future, we would do so on the basis of our legitimate interest in accordance with Art. 6 para. 1 lit. f) GDPR in conjunction with Art. 28 GDPR in order to be able to provide you with an efficient and secure online offer.

The hosting provider collects data about every access to the server on which this service is located (so-called server log files). The logged data includes the name of the website accessed, the file, the date and time of access, the amount of data transferred, notification of successful access, browser type and version, the user's operating system, referrer URL (the previously visited page), IP address, and the requesting provider. This log file information is stored for security reasons (e.g., to investigate misuse or fraud) for a maximum period of 90 days and then deleted. Data that needs to be stored for further evidence purposes is excluded from deletion.

The privacy policy of the hosting provider can be found here: https://docs.github.com/en/site-policy/privacy-policies/github-general-privacy-statement

_________________________________________________________________

3. Purpose of Processing and Legal Basis

When we process personal data, we process this data in accordance with the provisions of the European General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG). Where necessary, we process your data beyond the actual fulfilment of the contract to protect our legitimate interests or those of third parties.

We collect the data listed above to ensure a smooth connection to the website and to enable convenient use by users. The log file is used to evaluate system security and stability and for administrative purposes. We also store your data for technical security reasons, in particular to defend against attempts to attack our web server.

Examples in this context:

  • Provision of the online offer, its functions and content
  • Responding to contact requests and communicating with users
  • Reviewing and optimizing procedures for needs analysis and direct customer contact
  • Assertion of legal claims and defence in legal disputes
  • Ensuring IT security and IT operations
  • Measures for business management and further development of services and products

The lawfulness of the processing of personal data for specific purposes (e.g., transfer of data to third parties) is based on your consent, provided that you have given us your consent in accordance with Art. 6 para. 1 lit. a) GDPR. Consent that has been given can be revoked at any time.

We would like to point out that the revocation only takes effect for the future. Processing that took place before the revocation is not affected.

We are also subject to legal requirements. Insofar as data is processed in connection with this, this is done exclusively on the basis of legal regulations.

_________________________________________________________________

4. Relevant Legal Basis

  • Consent, Art. 6 (1) (a) and Art. 7 GDPR
  • To fulfill our services and carry out contractual measures as well as respond to inquiries, Art. 6 (1) (b) GDPR
  • To fulfill legal obligations, Art. 6 (1) (c) GDPR
  • In the event that vital interests of the data subject or another natural person require the processing of personal data, Art. 6 para. 1 lit. d GDPR
  • For the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller, Art. 6 para. 1 lit. e GDPR
  • To protect legitimate interests, Art. 6 para. 1 lit. f GDPR

The processing of data for purposes other than those for which it was collected is governed by the provisions of Art. 6 para. 4 GDPR. The processing of special categories of data (in accordance with Art. 9 para. 1 GDPR) is governed by the provisions of Art. 9 para. 2 GDPR.

_________________________________________________________________

5. Data Transfer

Within the company, only those departments that need your data to fulfil our contractual and legal obligations will receive it. Processors employed or temporarily hired by us (Art. 28 GDPR) may also receive data for the purposes mentioned above. These are companies in the categories of IT services, telecommunications, consulting, and sales and marketing.

When transferring data to recipients outside the company, please note that we only pass on your data if this is permitted or required by law, if we have your consent, or if we are authorized to provide information. Recipients of personal data in this context may include public authorities and institutions (e.g., public prosecutors, police, supervisory authorities) if there is a legal or official obligation to do so.

_________________________________________________________________

6. Data Transfer to Third Countries

Data will only be transferred to third countries or abroad if this is required by law, if you have given us your consent, or if this is necessary for the execution of our services. If required by law, we will inform you separately about further details.

The EU-U.S. Data Privacy Framework can now be used as the legal basis for data transfers to US companies. The US companies we use are predominantly companies that are DPF-certified. If a US company we use is not DPF-certified, we will, where possible, ensure that an adequate level of data protection in accordance with European data protection law is maintained by means of appropriate contracts (e.g., EU standard contractual clauses). You will be informed of this separately in the privacy policy.

_________________________________________________________________

7. Use of Cookies and External Services

This website does not use cookies that are stored by your browser on your device. However, we use external services that may access information from your device (such as your IP address) when loading content from third-party servers. In accordance with § 25 of the German Telecommunications-Telemedia Data Protection Act (TTDSG), we obtain your consent before loading these services via our consent banner.

a. Google APIs

We use Google APIs on our website. The data controller responsible for processing your information depends on your usual place of residence, unless otherwise specified in the privacy policy of a specific service:

Google Ireland Limited, with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland, for users of Google services who are resident in the European Economic Area or Switzerland.

Processing may also take place in a third country (USA) for which no adequacy decision has been made by the European Commission. Therefore, the level of protection required by the GDPR cannot be fully guaranteed during transmission, as it cannot be ruled out that authorities in the third country may have access to the data collected. The transfer of personal data is carried out exclusively on the basis of your consent in accordance with Art. 6 para. 1 lit. a GDPR and § 25 TTDSG.

We use Google APIs to load additional Google services on the website. The following data may be collected: IP address, browser type, operating system, and referrer URL.

You can withdraw your consent at any time by changing the settings via our consent banner or by contacting us at the email address provided in Section 15.

Further information can be found in Google's privacy policy at: https://policies.google.com/privacy

b. Gstatic

We use the Gstatic service provided by Google on our website. The data controller responsible for processing your information depends on your usual place of residence:

Google Ireland Limited, with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland, for users of Google services who are resident in the European Economic Area or Switzerland.

Processing may take place in a third country (USA) for which no adequacy decision has been made by the European Commission. Therefore, the level of protection required by the GDPR cannot be fully guaranteed during the transfer. The legal basis for the transfer of your personal data is your consent in accordance with Art. 6 para. 1 lit. a GDPR and § 25 TTDSG.

Gstatic is a service used by Google to retrieve static content in order to reduce bandwidth usage and improve loading times.

You can withdraw your consent at any time by changing the settings via our consent banner or by contacting us at the email address provided in Section 15.

For more information, please refer to Google's privacy policy at: https://policies.google.com/privacy

c. Google Fonts

We integrate fonts (“Google Fonts”) into our website to ensure a uniform appearance. The data controller responsible for processing your information depends on your usual place of residence:

Google Ireland Limited, with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland, for users of Google services who are resident in the European Economic Area or Switzerland.

When you access our website and consent to the loading of Google Fonts via our consent banner, your browser establishes a connection to Google’s servers. This enables Google to receive information that our website has been accessed from your IP address.

Google collects the following data:

  • Browser type and version
  • Operating system
  • Referrer URL (the website visited)
  • IP address
  • Screen resolution
  • Language settings

Privacy policy: https://policies.google.com/privacy

Opt-out: https://adssettings.google.com/authenticated

_________________________________________________________________

8. Waiting List / Launch List Registration

We offer you the opportunity to register for our waiting list or launch notification on our website. If you register, we will collect personal data from you.

a. Use of Brevo

We use the service Brevo (formerly Sendinblue) to manage our waiting list and send notifications. The provider is Sendinblue GmbH, Köpenicker Straße 126, 10179 Berlin, Germany.

b. Double Opt-In and Data Collection

To ensure that the registration was actually made by the owner of the email address, we use the so-called & “double opt-in”; procedure. After your initial registration, you will receive an email asking you to confirm your subscription by clicking a link. Only after this confirmation will your data be added to our list.

The following data is processed during this process:

  • Email address (mandatory)
  • Date and time of registration and confirmation
  • IP address of the accessing system

c. Purpose and Legal Basis

The processing of your data is carried out for the purpose of informing you about the launch of our app and related updates. The legal basis for this processing is your explicit consent in accordance with Art. 6 para. 1 lit. a GDPR.

d. Data Processing Agreement

We have concluded a data processing agreement (DPA) with Sendinblue GmbH, in which we oblige the provider to protect our customers' data and not to pass it on to third parties.

e. Withdrawal and Deletion

You can withdraw your consent to receive these notifications at any time with effect for the future. To do so, you can use the “unsubscribe”; link at the bottom of each email or contact us at the email address provided in Section 15. Your data will then be deleted promptly, provided there are no legal retention obligations.

_________________________________________________________________

9. Plugins for Social Media

 

We do not use social media plugins on our website. If our website contains icons from social media providers (e.g., LinkedIn, Facebook, Instagram), we only use these for passive linking to the pages of the respective providers.

_________________________________________________________________

10. Contact via Email Enquiries

If you send us inquiries via email, your details from your email, including the contact details you provided there, will be stored by us for the purpose of processing the inquiry and in the event of follow-up questions.

The provision of an email address and your name is required for contact purposes. This data will not be passed on without your consent.

We process your data on the legal basis of our legitimate interest in responding to your inquiries in accordance with Art. 6 para. 1 lit. f) GDPR and, if applicable, Art. 6 para. 1 lit. b) GDPR, provided that your inquiry is aimed at concluding a contract.

After processing your request, your data will be deleted unless there are legal obligations to retain it. You can object to the processing of your data at any time in the case of Art. 6 para. 1 lit. f) GDPR by contacting us at the email address provided in Section 15. 

_________________________________________________________________

11. Duration of Storage of Personal Data

To the extent permitted by law, we process and store your personal data, in particular for as long as this is necessary to fulfill the respective purposes and there are no legal retention obligations that prevent deletion.

If the data is not deleted because it is required for other and legally permissible purposes, its processing will be restricted. This means that the data will be blocked and not processed for other purposes. This applies in particular to data that must be retained for commercial or tax reasons.

Due to legal requirements, books, records, management reports, accounting documents, and documents relevant for taxation pursuant to Sections 147 (1) of the German Fiscal Code (AO) and Sections 257 (1) No. 1 and 4, (4) of the German Commercial Code (HGB) are retained for 10 years.

A six-year retention period applies to commercial letters in accordance with Section 257 (1) No. 2 and 3, (4) HGB.

_________________________________________________________________

12. Your Rights

We would like to inform you of your rights as a data subject vis-à-vis the controller with regard to the processing of your personal data in accordance with the General Data Protection Regulation:

a. Right of Information

Pursuant to Art. 15 GDPR, to request information about your personal data processed by us.

b. Right to Rectification

Pursuant to Art. 16 GDPR, to request the immediate rectification of inaccurate personal data stored by us or the completion of your personal data.

c. Right to Erasure

Pursuant to Art. 17 GDPR, to request the erasure of your personal data stored by us, unless the processing is necessary for the exercise of the right of freedom of expression and information, for the fulfillment of a legal obligation, for reasons of public interest or for the assertion, exercise or defense of legal claims.

d. Right to Restriction of Processing

Pursuant to Art. 18 GDPR, to request the restriction of the processing of your personal data, insofar as the accuracy of the data is disputed by you, the processing is unlawful, but you refuse to have it deleted and we no longer need the data, but you need it to assert, exercise or defend legal claims, or you have objected to the processing pursuant to Art. 21 GDPR.

e. Right to Data Portability

Pursuant to Art. 20 GDPR, you have the right to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request its transfer to another controller, provided that this is technically feasible.

f. Right to Lodge a Complaint

You can lodge a complaint with a supervisory authority in accordance with Art. 77 GDPR. As a rule, you can contact the supervisory authority of the federal state in which we are based or, if applicable, your usual place of residence or workplace.

g. Right of Withdrawal

You can withdraw your consent already given in accordance with Art. 7 para. 3 GDPR. You also have the right to withdraw your consent to the processing of data at any time with effect for the future. In the event of withdrawal, we will delete the data concerned immediately, unless further processing can be based on a legal basis for processing without consent. The withdrawal of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the withdrawal.

h. Right to Object

You may, for reasons arising from your particular situation, object at any time to the processing of personal data concerning you that is carried out on the basis of Article 6(1)(e) GDPR (data processing in the public interest) and Article 6(1)(f) of the General Data Protection Regulation (data processing based on a balancing of interests). This also includes profiling based on this provision within the meaning of Article 4 No. 4 GDPR.

If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing is necessary for the establishment, exercise, or defense of legal claims. The objection can be made informally and should be addressed to the contact details provided in Section 15.

_________________________________________________________________

13. Obligation to Make Data Available

When using the Internet or our website, you only need to provide personal data that is necessary for use or that we are legally obliged to collect. Without this data, meaningful use may be restricted or impossible.

_________________________________________________________________

14. External Links

Should links to other websites exist, we have no influence or control over the linked content and the data protection provisions there. We recommend that you check the privacy policies of these websites when you visit them to determine whether and to what extent personal data is collected, processed, used, or made available to third parties.

Privacy Policy Updated

Data Protection and Privacy Policy

Last Updated: 07 January 2026

This Privacy Policy is provided in English for transparency and ease of understanding. A German version is available upon request.

Below you will find our data protection information, which applies to our website page https://smartmeister.app/ (technically independent from the landing page website on smartmeister.app/deeplearning/), in accordance with § 5 of the German Digital Services Act (Digitale-Dienste-Gesetz – DDG), § 25 of the German Telecommunications-Telemedia Data Protection Act (Telekommunikation-Telemedien-Datenschutz-Gesetz – TTDSG), and Articles 13, 14, and 21 of the General Data Protection Regulation (GDPR).

We inform you about the processing of your personal data by us and the rights and claims to which you are entitled on the basis of data protection regulations. For contact details of the responsible party (data controller), please see Section 15 below.

_________________________________________________________________

1. Sources and Data for the Processing of Personal Data

We receive and process personal data that we obtain through the use of our website.

This may include the following types of data:

  • Usage data (pages visited, interest in content, access times)
  • Meta/communication data (device information, IP addresses)

We may also process other data comparable to the categories mentioned above.

Data is also stored in server log files, which are collected and automatically stored by the provider and mostly transmitted to us by your browser. These are:

  • Referrer URL
  • Host name of the accessing computer
  • Date and time of the server request
  • Name of the requested file
  • Page from which the corresponding file was requested
  • Web browser and operating system used
  • (Full) IP address of the requesting computer
  • Amount of data transferred

We may process other data comparable to the categories mentioned above.

The legal basis for the temporary storage of this data or the log files is Art. 6 para. 1 lit. f) GDPR. We collect the listed data to ensure a smooth connection to the website and to enable users to use our website comfortably. The log file is used to evaluate system security and stability and for administrative purposes.

_________________________________________________________________

2. Hosting

We use the following hosting provider for our website:

GitHub Inc. 88 Colin P Kelly Jr St San Francisco, CA 94107 United States

Contact:

  • Email: support@github.com
  • Website: https://www.github.com/

GitHub processes Personal Data in compliance with the GDPR, ensuring a lawful basis for each processing activity. As the company GitHub Inc. is a US company, we would like to point out that data transfer to the USA cannot be completely ruled out. GitHub Inc. provides data protection by design and default, in compliance with EU GDPR laws.

We use the following hosting services: infrastructure and platform services, computing capacity, storage space, security services, and technical maintenance services for the purpose of operating the online offering. The current website is static, therefore we currently process no data through this online website. Should we process data in the future, we would do so on the basis of our legitimate interest in accordance with Art. 6 para. 1 lit. f) GDPR in conjunction with Art. 28 GDPR in order to be able to provide you with an efficient and secure online offer.

The hosting provider collects data about every access to the server on which this service is located (so-called server log files). The logged data includes the name of the website accessed, the file, the date and time of access, the amount of data transferred, notification of successful access, browser type and version, the user's operating system, referrer URL (the previously visited page), IP address, and the requesting provider. This log file information is stored for security reasons (e.g., to investigate misuse or fraud) for a maximum period of 90 days and then deleted. Data that needs to be stored for further evidence purposes is excluded from deletion.

The privacy policy of the hosting provider can be found here: https://docs.github.com/en/site-policy/privacy-policies/github-general-privacy-statement

_________________________________________________________________

3. Purpose of Processing and Legal Basis

When we process personal data, we process this data in accordance with the provisions of the European General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG). Where necessary, we process your data beyond the actual fulfilment of the contract to protect our legitimate interests or those of third parties.

We collect the data listed above to ensure a smooth connection to the website and to enable convenient use by users. The log file is used to evaluate system security and stability and for administrative purposes. We also store your data for technical security reasons, in particular to defend against attempts to attack our web server.

Examples in this context:

  • Provision of the online offer, its functions and content
  • Responding to contact requests and communicating with users
  • Reviewing and optimizing procedures for needs analysis and direct customer contact
  • Assertion of legal claims and defence in legal disputes
  • Ensuring IT security and IT operations
  • Measures for business management and further development of services and products

The lawfulness of the processing of personal data for specific purposes (e.g., transfer of data to third parties) is based on your consent, provided that you have given us your consent in accordance with Art. 6 para. 1 lit. a) GDPR. Consent that has been given can be revoked at any time.

We would like to point out that the revocation only takes effect for the future. Processing that took place before the revocation is not affected.

We are also subject to legal requirements. Insofar as data is processed in connection with this, this is done exclusively on the basis of legal regulations.

_________________________________________________________________

4. Relevant Legal Basis

  • Consent, Art. 6 (1) (a) and Art. 7 GDPR
  • To fulfill our services and carry out contractual measures as well as respond to inquiries, Art. 6 (1) (b) GDPR
  • To fulfill legal obligations, Art. 6 (1) (c) GDPR
  • In the event that vital interests of the data subject or another natural person require the processing of personal data, Art. 6 para. 1 lit. d GDPR
  • For the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller, Art. 6 para. 1 lit. e GDPR
  • To protect legitimate interests, Art. 6 para. 1 lit. f GDPR

The processing of data for purposes other than those for which it was collected is governed by the provisions of Art. 6 para. 4 GDPR. The processing of special categories of data (in accordance with Art. 9 para. 1 GDPR) is governed by the provisions of Art. 9 para. 2 GDPR.

_________________________________________________________________

5. Data Transfer

Within the company, only those departments that need your data to fulfil our contractual and legal obligations will receive it. Processors employed or temporarily hired by us (Art. 28 GDPR) may also receive data for the purposes mentioned above. These are companies in the categories of IT services, telecommunications, consulting, and sales and marketing.

When transferring data to recipients outside the company, please note that we only pass on your data if this is permitted or required by law, if we have your consent, or if we are authorized to provide information. Recipients of personal data in this context may include public authorities and institutions (e.g., public prosecutors, police, supervisory authorities) if there is a legal or official obligation to do so.

_________________________________________________________________

6. Data Transfer to Third Countries

Data will only be transferred to third countries or abroad if this is required by law, if you have given us your consent, or if this is necessary for the execution of our services. If required by law, we will inform you separately about further details.

The EU-U.S. Data Privacy Framework can now be used as the legal basis for data transfers to US companies. The US companies we use are predominantly companies that are DPF-certified. If a US company we use is not DPF-certified, we will, where possible, ensure that an adequate level of data protection in accordance with European data protection law is maintained by means of appropriate contracts (e.g., EU standard contractual clauses). You will be informed of this separately in the privacy policy.

_________________________________________________________________

7. Use of Cookies and External Services

This website does not use cookies that are stored by your browser on your device. However, we use external services that may access information from your device (such as your IP address) when loading content from third-party servers. In accordance with § 25 of the German Telecommunications-Telemedia Data Protection Act (TTDSG), we obtain your consent before loading these services via our consent banner.

a. Google APIs

We use Google APIs on our website. The data controller responsible for processing your information depends on your usual place of residence, unless otherwise specified in the privacy policy of a specific service:

Google Ireland Limited, with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland, for users of Google services who are resident in the European Economic Area or Switzerland.

Processing may also take place in a third country (USA) for which no adequacy decision has been made by the European Commission. Therefore, the level of protection required by the GDPR cannot be fully guaranteed during transmission, as it cannot be ruled out that authorities in the third country may have access to the data collected. The transfer of personal data is carried out exclusively on the basis of your consent in accordance with Art. 6 para. 1 lit. a GDPR and § 25 TTDSG.

We use Google APIs to load additional Google services on the website. The following data may be collected: IP address, browser type, operating system, and referrer URL.

You can withdraw your consent at any time by changing the settings via our consent banner or by contacting us at the email address provided in Section 15.

Further information can be found in Google's privacy policy at: https://policies.google.com/privacy

b. Gstatic

We use the Gstatic service provided by Google on our website. The data controller responsible for processing your information depends on your usual place of residence:

Google Ireland Limited, with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland, for users of Google services who are resident in the European Economic Area or Switzerland.

Processing may take place in a third country (USA) for which no adequacy decision has been made by the European Commission. Therefore, the level of protection required by the GDPR cannot be fully guaranteed during the transfer. The legal basis for the transfer of your personal data is your consent in accordance with Art. 6 para. 1 lit. a GDPR and § 25 TTDSG.

Gstatic is a service used by Google to retrieve static content in order to reduce bandwidth usage and improve loading times.

You can withdraw your consent at any time by changing the settings via our consent banner or by contacting us at the email address provided in Section 15.

For more information, please refer to Google's privacy policy at: https://policies.google.com/privacy

c. Google Fonts

We integrate fonts (“Google Fonts”) into our website to ensure a uniform appearance. The data controller responsible for processing your information depends on your usual place of residence:

Google Ireland Limited, with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland, for users of Google services who are resident in the European Economic Area or Switzerland.

When you access our website and consent to the loading of Google Fonts via our consent banner, your browser establishes a connection to Google’s servers. This enables Google to receive information that our website has been accessed from your IP address.

Google collects the following data:

  • Browser type and version
  • Operating system
  • Referrer URL (the website visited)
  • IP address
  • Screen resolution
  • Language settings

Privacy policy: https://policies.google.com/privacy

Opt-out: https://adssettings.google.com/authenticated

_________________________________________________________________

8. Waiting List / Launch List Registration

We offer you the opportunity to register for our waiting list or launch notification on our website. If you register, we will collect personal data from you.

a. Use of Brevo

We use the service Brevo (formerly Sendinblue) to manage our waiting list and send notifications. The provider is Sendinblue GmbH, Köpenicker Straße 126, 10179 Berlin, Germany.

b. Double Opt-In and Data Collection

To ensure that the registration was actually made by the owner of the email address, we use the so-called & “double opt-in”; procedure. After your initial registration, you will receive an email asking you to confirm your subscription by clicking a link. Only after this confirmation will your data be added to our list.

The following data is processed during this process:

  • Email address (mandatory)
  • Date and time of registration and confirmation
  • IP address of the accessing system

c. Purpose and Legal Basis

The processing of your data is carried out for the purpose of informing you about the launch of our app and related updates. The legal basis for this processing is your explicit consent in accordance with Art. 6 para. 1 lit. a GDPR.

d. Data Processing Agreement

We have concluded a data processing agreement (DPA) with Sendinblue GmbH, in which we oblige the provider to protect our customers' data and not to pass it on to third parties.

e. Withdrawal and Deletion

You can withdraw your consent to receive these notifications at any time with effect for the future. To do so, you can use the “unsubscribe”; link at the bottom of each email or contact us at the email address provided in Section 15. Your data will then be deleted promptly, provided there are no legal retention obligations.

_________________________________________________________________

9. Plugins for Social Media

 

We do not use social media plugins on our website. If our website contains icons from social media providers (e.g., LinkedIn, Facebook, Instagram), we only use these for passive linking to the pages of the respective providers.

_________________________________________________________________

10. Contact via Email Enquiries

If you send us inquiries via email, your details from your email, including the contact details you provided there, will be stored by us for the purpose of processing the inquiry and in the event of follow-up questions.

The provision of an email address and your name is required for contact purposes. This data will not be passed on without your consent.

We process your data on the legal basis of our legitimate interest in responding to your inquiries in accordance with Art. 6 para. 1 lit. f) GDPR and, if applicable, Art. 6 para. 1 lit. b) GDPR, provided that your inquiry is aimed at concluding a contract.

After processing your request, your data will be deleted unless there are legal obligations to retain it. You can object to the processing of your data at any time in the case of Art. 6 para. 1 lit. f) GDPR by contacting us at the email address provided in Section 15. 

_________________________________________________________________

11. Duration of Storage of Personal Data

To the extent permitted by law, we process and store your personal data, in particular for as long as this is necessary to fulfill the respective purposes and there are no legal retention obligations that prevent deletion.

If the data is not deleted because it is required for other and legally permissible purposes, its processing will be restricted. This means that the data will be blocked and not processed for other purposes. This applies in particular to data that must be retained for commercial or tax reasons.

Due to legal requirements, books, records, management reports, accounting documents, and documents relevant for taxation pursuant to Sections 147 (1) of the German Fiscal Code (AO) and Sections 257 (1) No. 1 and 4, (4) of the German Commercial Code (HGB) are retained for 10 years.

A six-year retention period applies to commercial letters in accordance with Section 257 (1) No. 2 and 3, (4) HGB.

_________________________________________________________________

12. Your Rights

We would like to inform you of your rights as a data subject vis-à-vis the controller with regard to the processing of your personal data in accordance with the General Data Protection Regulation:

a. Right of Information

Pursuant to Art. 15 GDPR, to request information about your personal data processed by us.

b. Right to Rectification

Pursuant to Art. 16 GDPR, to request the immediate rectification of inaccurate personal data stored by us or the completion of your personal data.

c. Right to Erasure

Pursuant to Art. 17 GDPR, to request the erasure of your personal data stored by us, unless the processing is necessary for the exercise of the right of freedom of expression and information, for the fulfillment of a legal obligation, for reasons of public interest or for the assertion, exercise or defense of legal claims.

d. Right to Restriction of Processing

Pursuant to Art. 18 GDPR, to request the restriction of the processing of your personal data, insofar as the accuracy of the data is disputed by you, the processing is unlawful, but you refuse to have it deleted and we no longer need the data, but you need it to assert, exercise or defend legal claims, or you have objected to the processing pursuant to Art. 21 GDPR.

e. Right to Data Portability

Pursuant to Art. 20 GDPR, you have the right to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request its transfer to another controller, provided that this is technically feasible.

f. Right to Lodge a Complaint

You can lodge a complaint with a supervisory authority in accordance with Art. 77 GDPR. As a rule, you can contact the supervisory authority of the federal state in which we are based or, if applicable, your usual place of residence or workplace.

g. Right of Withdrawal

You can withdraw your consent already given in accordance with Art. 7 para. 3 GDPR. You also have the right to withdraw your consent to the processing of data at any time with effect for the future. In the event of withdrawal, we will delete the data concerned immediately, unless further processing can be based on a legal basis for processing without consent. The withdrawal of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the withdrawal.

h. Right to Object

You may, for reasons arising from your particular situation, object at any time to the processing of personal data concerning you that is carried out on the basis of Article 6(1)(e) GDPR (data processing in the public interest) and Article 6(1)(f) of the General Data Protection Regulation (data processing based on a balancing of interests). This also includes profiling based on this provision within the meaning of Article 4 No. 4 GDPR.

If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing is necessary for the establishment, exercise, or defense of legal claims. The objection can be made informally and should be addressed to the contact details provided in Section 15.

_________________________________________________________________

13. Obligation to Make Data Available

When using the Internet or our website, you only need to provide personal data that is necessary for use or that we are legally obliged to collect. Without this data, meaningful use may be restricted or impossible.

_________________________________________________________________

14. External Links

Should links to other websites exist, we have no influence or control over the linked content and the data protection provisions there. We recommend that you check the privacy policies of these websites when you visit them to determine whether and to what extent personal data is collected, processed, used, or made available to third parties.


15. Responsible Party for Data Processing

The responsible party for data processing within the meaning of the General Data Protection Regulation (GDPR) is:

K. Mang Dönhoffstr. 10 10318 Berlin Germany

Email: smstr-support@gmail.com

If you have any questions about data protection or wish to exercise your rights as a data subject, please contact us using the above details.

_________________________________________________________________

End of Privacy Policy

Free Email Signature Generator