Privacy policy

1. Controller

The controller for data processing on this website is:

Joel Köster Themeln 1, 27639 Wurster Nordseeküste, Germany Email: support@getboth.app

No data protection officer has been appointed; there is no legal obligation to do so.

2. Server log files and hosting

This website is hosted by Google Firebase Hosting (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). When you visit it, the hosting provider processes technical access data that your browser transmits: IP address, date and time, the page requested, the referring URL, browser and operating system.

The legal basis is Art. 6(1)(f) GDPR; the legitimate interest lies in secure and stable operation. Access data is deleted after a few months.

3. Cookies and consent

This website can only be used once you have accepted all cookies. Until you do, only technically necessary storage is used and no analytics or marketing service is loaded.

Non-necessary storage is based on your consent under Art. 6(1)(a) GDPR. You can withdraw it at any time with effect for the future via "Cookie settings" in the footer; the website is then no longer usable, but the legal pages remain accessible.

Details are set out in the cookie policy.

4. Beta registration

When you register as a beta tester we process your email address, the language of the form, the time of registration and a shortened version of your IP address as proof of consent.

Registration uses a double opt-in: it only becomes active once you open the link in our confirmation email. Until then nothing is used to contact you.

Legal basis is your consent under Art. 6(1)(a) GDPR, together with Section 7(2) no. 3 UWG for advertising by email. You can withdraw it at any time by writing to support@getboth.app; we then delete your address.

The data is stored in Google Cloud Firestore, operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

5. Account deletion

To delete an account we process the email address you enter and a confirmation token, so that only the holder of the address can trigger the deletion.

Once confirmed, the account and its data are deleted. What remains is a record of the deletion in which the email address appears only as an irreversible hash - it documents that we complied with the request without preserving the deleted address.

Legal basis is Art. 6(1)(c) in conjunction with Art. 17 GDPR.

6. Sending email

Confirmation emails are sent via a service provider. Your address and the content of the message are processed there for the purpose of delivery only.

7. Your rights

Under the GDPR you have the following rights:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object (Art. 21 GDPR)
• Right to withdraw consent at any time (Art. 7(3) GDPR)

8. Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority. The competent authority for the operator is: The State Commissioner for Data Protection of Lower Saxony (Der Landesbeauftragte für den Datenschutz Niedersachsen), Prinzenstraße 5, 30159 Hannover, Germany

9. Changes to this policy

This policy will be adjusted whenever the underlying processing changes - in particular when the closed beta becomes a public version.