Privacy Policy

Controller

The controller within the meaning of the GDPR is specified in our Legal Notice.

Our Privacy Principles

  • No tracking or analytics tools
  • No advertising or third-party cookies
  • Server location: EU (Germany)
  • No data transfer to non-EU countries
  • HTTPS encryption for all connections

Server Log Files

When you visit our website, our server automatically collects technical data:

  • Date and time of the request
  • Requested URL and referrer
  • Browser type and operating system
  • IP address (anonymized after 7 days)

Legal basis: Art. 6 (1) f GDPR (legitimate interest in security and stability). We do not use this data to identify individuals.

Cookies

We only use technically necessary session cookies for logged-in users. These cookies do not track your behavior and are deleted when you close your browser.

Registration and Customer Account

When you register, we collect the data necessary for contract performance:

  • Contact data (name, email, phone)
  • Team member phone numbers for SMS delivery
  • Billing information

Legal basis: Art. 6 (1) b GDPR (contract performance). Your data is stored for the duration of the business relationship and legally required retention periods.

SMS Delivery

For SMS delivery, we transmit the recipient's phone number and message content to mobile network operators. These providers are bound by telecommunications secrecy (German Telecommunications Act). Message content is deleted from our systems within 30 days after delivery.

Data Processing Agreement

For business customers using our service to send messages to their own customers/members, we act as a data processor. Our Data Processing Agreement governs this relationship in accordance with Art. 28 GDPR.

Your Rights

Under the GDPR, you have the following rights:

  • Right of access (Art. 15 GDPR)
  • Right to rectification (Art. 16 GDPR)
  • Right to erasure (Art. 17 GDPR)
  • Right to restriction of processing (Art. 18 GDPR)
  • Right to data portability (Art. 20 GDPR)
  • Right to object (Art. 21 GDPR)

Contact:

Supervisory Authority

You have the right to lodge a complaint with a data protection supervisory authority. The competent authority for us is:

Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg
www.baden-wuerttemberg.datenschutz.de

Last updated: January 2026