This statement says what data this website collects, what it is used for and how long it stays. It describes what the application actually does — not what would be customary.

Responsible is the entity named in the legal notice. For information and requests concerning your data, an email to the address given there is enough.

The principle

This site embeds no advertising networks, measures no user behaviour and sets no cookies that would require consent. That is why there is no consent banner: there would be nothing to consent to.

When simply visiting

The hosting provider (Hostpoint AG, Switzerland) keeps server logs. They contain the IP address, the time and size of the request, the address called up and the browser identification. They serve operation and the defence against attacks and are not combined with other data.

One single item is stored in the browser: your choice between light and dark appearance. It lies in your browser’s local storage, is never transmitted and can be deleted there.

With the contact form

Transmitted are your name, email address, optionally a phone number and subject, and your message. In addition the IP address is stored — solely to fend off automated submissions. It is deleted automatically after 90 days; the enquiry itself stays as long as it is needed for business.

In the customer area

Anyone given an account provides a name, an email address and a password they set themselves. The password is stored only as a hash and cannot be read. The customer area also holds the data of the business relationship: projects, requests including attachments, invoices, contracts and documents made available. They are accessible only to the customer concerned.

When buying in the shop

Name, address and email address are collected for the invoice and the delivery. Payment details are not entered here: you pay on the payment provider’s page, and it only reports back whether and for what amount payment was made. Card numbers are never known here.

With the licence check

Software that requires a licence checks in at regular intervals. Transmitted are the licence key, an identifier of the installation (the domain for web applications, a device identifier for programs) and the program version. No content, no files and no data of your own users.

Who else receives data

• Hostpoint AG, Switzerland — operation of the web server, the database and mail delivery.
• Stripe and PayPal — only when a payment goes through those services. They receive the details needed to process it and also process data in the United States. The basis is Art. 17 para. 1 lit. a revFADP: the processing is necessary to perform the contract.

Beyond that, data is not passed on, not sold and not used for advertising. It is disclosed to authorities only where there is a duty to do so.

How long

Business records — invoices, contracts, accounting entries — are kept for ten years; Art. 958f CO requires that. Enquiries stay as long as they are being handled and referring back to them makes sense. IP addresses from the contact form are deleted after 90 days. What is no longer needed and is subject to no retention duty is removed.

Your rights

You may at any time ask what data about you is processed, request its correction or deletion and demand its release in a common format (Art. 25 ff. revFADP). An email to the address in the legal notice is enough. If you are not satisfied with the answer, the way to the Federal Data Protection and Information Commissioner is open to you.

No automated individual decision-making takes place and no profile is built about you.

Changes

If what the application does changes, this statement changes with it. The version published here is the one that applies.

This is a translation. In case of doubt the German version applies.