Privacy at Warteheld

Controller

The controller responsible for processing personal data within the meaning of the General Data Protection Regulation (GDPR) is:

In short

warteheld.de presents a planned tool for appointment-based businesses. Through the form you can sign up for a closed pilot. For that I store your email address and, if you enter it, the name of your business. There is no account, no analytics scripts, no advertising and no profiling. Fonts and code are served from the site’s own server.

When you visit the site

When you open the site, your browser sends details without which it cannot be delivered: IP address, date and time, the requested address, the previously visited page (referrer) and the browser identifier.

The site is hosted by Netlify. Cloudflare sits in front of it: it encrypts the connection, fends off attacks and caches content. To block automated access, Cloudflare may set a technically necessary cookie (cf_clearance) (Section 25(2) no. 2 TDDDG). I do not analyse any logs containing IP addresses myself.

The legal basis is Art. 6(1)(f) GDPR. My legitimate interest: delivering the site securely and reliably. How long the providers keep their logs is governed by their terms.

Netlify, Inc.

101 2nd Street, San Francisco, CA 94105, USA

Data may be transferred to the USA. Netlify, Inc. is certified under the EU-U.S. Data Privacy Framework; the legal basis is the European Commission’s adequacy decision (Art. 45 GDPR).

Provider’s privacy policy

Cloudflare, Inc.

101 Townsend St., San Francisco, CA 94107, USA

Data may be transferred to the USA. Cloudflare, Inc. is certified under the EU-U.S. Data Privacy Framework; the legal basis is the European Commission’s adequacy decision (Art. 45 GDPR).

Provider’s privacy policy

Signing up for the pilot

In the form you enter your email address and, optionally, the name of your business, and confirm your consent. These details, the time and the version of the consent text are stored. Netlify receives the form and stores the submission; a notification with your details goes to my mailbox at goneo. I only use the details to send you information about the closed pilot.

The legal basis is your consent (Art. 6(1)(a) GDPR). You can withdraw it at any time; a short message to the address above is enough. Processing up to that point remains lawful.

Netlify, Inc.

101 2nd Street, San Francisco, CA 94105, USA

Data may be transferred to the USA. Netlify, Inc. is certified under the EU-U.S. Data Privacy Framework; the legal basis is the European Commission’s adequacy decision (Art. 45 GDPR).

Provider’s privacy policy

goneo Internet GmbH

Dresdener Straße 18, 32423 Minden, Germany

Provider’s privacy policy

Retention

I delete your details at Netlify and in my mailbox as soon as you withdraw your consent, at the latest when I end the pilot project.

Your rights

You have the right of access to your data (Art. 15 GDPR), to rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). You can object to processing based on legitimate interests (Art. 21). An email to the address above is enough.

You can also lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), for example in the country where you live.