Privacy policy
Sample text. This privacy policy is placeholder content and is not legal advice. Replace it with a reviewed version that reflects your actual data flows before publishing.
1. Controller
The controller for data processing on this website is Muster GmbH, Musterstraße 1, 12345 Musterstadt, Germany, email [email protected]. Further details are in the legal notice.
2. Overview
We process personal data only to the extent necessary to provide the website and our application. Depending on the case, the legal basis is the performance of a contract (Art. 6 (1) (b) GDPR), our legitimate interest in a secure, functioning service (Art. 6 (1) (f) GDPR), or your consent (Art. 6 (1) (a) GDPR).
3. Hosting and application (Supabase)
Our application runs on Supabase infrastructure. Data stored there is isolated per account using row-level security. Technically necessary data such as IP address, time of access and account identifier is processed to provide and secure the service.
4. Payment processing (Stripe)
Once paid features are available, payment processing is handled entirely by Stripe. Payment data such as card numbers is processed exclusively by Stripe and is neither seen nor stored by us.
5. Server log files
When you access the website, information is automatically collected in server log files that your browser transmits: browser type and version, operating system, referrer URL, hostname of the accessing device, time of the server request and IP address. This data is not merged with other data sources and serves technical provision and security.
6. Cookies and tracking
We do not use third-party advertising or tracking cookies. Only technically necessary local storage is used, for example to keep you signed in and to remember your chosen language. No consent is required for this.
7. Contacting us
If you contact us by email, we process your details in order to handle your request. We do not pass this data on without your consent and delete it once it is no longer required and no statutory retention obligations apply.
8. Your rights
Within the scope of the applicable statutory provisions, you have the right at any time to:
- access to your stored personal data (Art. 15 GDPR),
- rectification of inaccurate data (Art. 16 GDPR),
- erasure of the data we hold about you (Art. 17 GDPR),
- restriction of processing (Art. 18 GDPR),
- data portability (Art. 20 GDPR), and
- objection to processing (Art. 21 GDPR).
You may withdraw any consent you have given at any time with effect for the future. An informal email to [email protected] is sufficient.
9. Right to lodge a complaint
You have the right to lodge a complaint with a data protection supervisory authority, in particular in the member state of your residence, place of work or the place of the alleged infringement.
10. SSL/TLS encryption
For security reasons this site uses SSL/TLS encryption. You can recognise an encrypted connection by the “https://” in your browser’s address bar.