Privacy policy

Privadi, Martin Schröder Ernst-Kromayer-Straße 28 06112 Halle (Saale) Telefon: 0155 656 999 69 E-Mail: office@privadi.net

There is no data protection officer; the legal requirements for appointing one are not met.

PrivadiOffice deliberately separates two kinds of data.

Your own data — your account, your company details, your settings. We are responsible for this, and this policy is about it.

The data of your customers and employees that you enter into PrivadiOffice. You are responsible for this. We only store it for you and do not look into it. This is governed by the data processing agreement.

There is no access in PrivadiOffice through which we could look into our users' customer data without their release. If you need help and we have to look into your account, this is only possible if you expressly allow it in the settings, for at most 24 hours (item 7). Every such access is logged.

On a server in Germany, operated by a German hosting provider. The connection is encrypted (TLS). No transfer to countries outside the EU takes place — except for payment via Stripe, in which data may be transferred to the USA (item 12).

A data processing agreement pursuant to Art. 28 GDPR is in place with the server provider.

When the site is accessed, technical details transmitted by your browser are processed: the address requested, the time, the amount of data transferred, the referring page, browser and operating system identifiers, and the IP address. This is technically necessary to deliver the page and serves the security of operations.

The legal basis is Art. 6(1)(f) GDPR. These logs are deleted after 7 days at the latest.

We count visits to the home page ourselves. We only store the date, the page requested and — if available — the page a visitor came from.

Since 7 September 2026 we additionally store the visitor’s country, that is only the country code such as “DE”. It is determined from the IP address when the page is opened, on our own server, using a country list held there. The IP address itself is neither stored nor passed on, and no third-party service is asked. A country allows no conclusion about a person or a place. The country list comes from DB-IP (IP Geolocation by DB-IP, https://db-ip.com, licence CC BY 4.0).

Not stored: IP address, identifiers of any kind, cookies or other features that would allow a visitor to be recognised. Nothing is stored on or read from your device. No profiling takes place.

No external service such as Google Analytics is used. The legal basis is Art. 6(1)(f) GDPR.

The same count also covers the brand website privadi.com and the brokerage portal meine-reinigungsfirma.de, both operated by the same controller. The figures are held here together and are distinguished only by a prefix before the page address. Here too, no IP addresses and no identifiers are stored.

PrivadiOffice sets one technically necessary cookie: the session cookie for signing in. Without it you could not log in. It contains no advertising or analytics features.

How long it is valid is your choice when signing in. Without the “Stay signed in” checkbox, PrivadiOffice signs you out after one hour without activity. With it, the sign-in stays valid for up to 30 days and is extended with every visit. “Sign out” and deleting your browser data end it at any time; the checkbox only applies to the browser or app where you set it.

There are no advertising cookies and no third-party cookies. That is why no cookie banner appears.

Before an account is created, since 7 September 2026 you confirm your email address. When you fill in the sign-up form we initially store only: email address, name (if given), chosen language, the checksum of your password, the time of your consent to the terms and the data processing agreement together with their version, and a check value of the confirmation link. We create an account only once you click the link in the email; it is valid for 24 hours. If you do not click it, this data is deleted automatically once the period expires. The legal basis is Art. 6(1)(b) GDPR for the pre-contractual measure and Art. 6(1)(f) GDPR for our legitimate interest in preventing sign-ups with other people's or invented addresses.

For an account we process: email address, password (only as a hash, never in plain text), name, company details, address, contact details, tax number and VAT ID, bank details for printing on invoices, your settings, and the time of registration and of last use.

The legal basis is Art. 6(1)(b) GDPR — performance of the contract.

Optional, for the tax estimate: if you enter tax calculation details in the settings — legal form, your municipality's trade tax rate, joint assessment with a partner, other income, church tax rate — these are stored in your account. They serve solely to show you a rough tax figure inside the program. The calculation runs on our server; no transfer to tax authorities, tax advisers or any other third party takes place. These details are voluntary; without them the program uses standard assumptions. The legal basis is your consent under Art. 6(1)(a) GDPR, which you can withdraw at any time by clearing the fields.

Retention: for the duration of the contract. After the subscription ends, your account and content remain for another three months; during that time you can download your data, all other functions are locked. After that, account and content are deleted automatically and irreversibly — we remind you by email 14 days and one day beforehand. If you delete your account yourself, this happens immediately after your confirmation by email. Excepted are records subject to statutory retention periods — invoices issued to you must be kept for up to ten years.

Feedback from within the program: if you send us a note via the „Feedback“ item, we store your message, the type of note you chose, the time and the link to your account. The same message is also sent as an email to our mailbox; which of our addresses that is, we set ourselves. We send a short acknowledgement of receipt, without advertising, to your account's email address. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is improving the program. Your feedback is deleted once the matter is settled, at the latest after three years.

Support access (since 30 September 2026): In the settings you can give Privadi support access to your account for 24 hours. Only while this release is running can the operator (item 1) open your account, see what you see and, if necessary, also change something; your password is neither needed nor seen. You can end the release earlier at any time; access then ends immediately. For this we store the end of the release, for each support session opened its start, end and who opened it, and in the log every request with its time, the address called in the program and the type of request (viewing or changing). Content that is viewed, entered or changed in the process is not in the log. You can see the log in the settings. We delete log entries and sessions automatically after 12 months, and immediately together with your account. The legal basis is Art. 6(1)(b) GDPR (help at your request under the user agreement), and for the log Art. 6(1)(f) GDPR; our legitimate interest is making every access traceable. Insofar as we see data of your customers and employees in the process, we act as your processor under the data processing agreement.

Access for your tax office (since 30 September 2026, Avantgarde package): In the settings you can invite your tax office by email. For this we store the email address, an optional name, a checksum of the invitation link with its validity of 7 days, the checksum of the password the tax office sets itself (never in plain text), and the time of the invitation and of the last sign-in. We send the invitation from our sender office@privadi.de (item 9). The tax office signs in with its own email address and its own password and can only read your invoices and credit notes, quotes and order confirmations including PDF and XRechnung, your expenses with receipts, the cash book, the overview of income and expenses and the exports of these documents and expenses; it cannot change anything. Whether and to whom you give this access is your decision alone. In doing so you pass the data in these documents, including that of your customers, to your tax office on your own responsibility; we only provide the access. You can remove the access at any time: it then ends immediately and its sign-in data is deleted, as it is together with your account. The legal basis is Art. 6(1)(b) GDPR towards you and Art. 6(1)(f) GDPR towards the tax office; our legitimate interest is a secure access of its own, so that you do not have to pass on your password.

The brokerage portal at meine-reinigungsfirma.de and PrivadiOffice are operated by the same controller (see item 1) and have kept one shared account for businesses since 4 September 2026: you sign in to both services with the same email address and the same password. There is no redirection. Private customers of the portal have no PrivadiOffice account; we receive no data about them.

The account is held here at PrivadiOffice. When a business registers as a partner in the portal, its account is created here; the name, email address, password, company name and the time of consent to the terms, the privacy policy and the data processing agreement are transmitted. We store the password only as a hash, never in plain text. Each time you sign in to the portal, the portal passes your email address and password to PrivadiOffice for verification; changes to the password or email address made in the portal are carried out here and apply to both services.

If you sign in here with a business account that previously existed only in the portal, PrivadiOffice verifies the password with the portal and creates the shared account at that moment; the portal transmits the name and company name. A business from the portal receives the Equip plan; we ask for consent to the data processing agreement on the first visit.

The Sign in with PrivadiOffice button in the portal remains: if you click it, we confirm to the portal via a signed token (valid for 60 seconds, redeemable once) that you are signed in here; email address, name and booked plan are transmitted, not the password. Sub-accounts for staff cannot use this route.

If your business has a partner account in the portal, PrivadiOffice shows you in the overview the number of open tenders, enquiries and awarded jobs from the portal, as well as the individual enquiries and jobs. For this, PrivadiOffice queries the portal with your email address. The portal hands over the contact details of a customer from the portal (name, company, phone, email address, street) only if the customer has released them specifically for your business or you have taken on their enquiry. PrivadiOffice then displays them and, if you wish, copies them into a quote; from then on you are responsible for this data just as for your other customers (item 10). The transfer takes place between our own services; it is not a disclosure to third parties. Both services keep separate data holdings for their content. The legal basis is Article 6(1)(b) GDPR.

If you are a member of the Reinigungszentrale, your membership — areas and, where applicable, PrivadiOffice — is billed through the Stripe account of PrivadiOffice (item 12). For this purpose, PrivadiOffice and the portal synchronise the status within the same server: the portal transmits e-mail address, selected areas, customer type, language and whether you want to add or cancel PrivadiOffice; PrivadiOffice reports to the portal the payment status, the number of areas billed, the start and end of the free PrivadiOffice days, the end date of a cancellation of PrivadiOffice or of the membership and, where applicable, the link to an open invoice. The legal basis is Art. 6(1)(b) GDPR.

Modules and packages (since 07.10.2026): If you book modules or a package here and there is not yet an account with your email address in the referral portal, we create a business entry there after the first payment, using the details from your account (name, email address, company name, street, postcode, town, phone) and your booked selection; this makes you a member free of charge. The entry only becomes publicly visible once you have submitted the documents and we have approved the business. The portal and PrivadiOffice synchronise the booked selection so that both services show the same status. The legal basis is Art. 6(1)(b) GDPR.

Deletion: item 7 applies to the shared account. When your account is deleted here — at your request or automatically three months after the end of the subscription — your access, quotes, messages and data releases in the portal are deleted in the same step, and your business is no longer visible to anyone there. Your business entry and your documents are then kept in the portal for three years so that claims arising from brokered jobs can still be settled, and are then deleted automatically (details in the portal's privacy policy, item 7). Account and membership cannot be cancelled separately; if you pay for the membership via the portal, you can cancel PrivadiOffice alone there.

If you send invoices or quotes from PrivadiOffice, this runs via the outgoing mail server of your own email provider, which you enter in the settings. The message therefore comes from you, not from us. Your credentials are stored encrypted in your account.

If you do not enter a mailbox of your own, then since 29 August 2026 we send the message via our own sender office@privadi.de instead. Your company name appears as the sender and replies from your customers go to your company address. In doing so our email provider processes your customer's name and address and the attached invoice; to that extent it is our processor. We do not store the messages.

If a message sent via office@privadi.de cannot be delivered, since 23.09.2026 we evaluate the error message from the mail server or the bounce message from the receiving server (recipient, subject, reason) and report it to our own mailboxes in order to fix the problem. Addresses of your customers appear only with the provider (the part after the @). Nothing of this is stored in our database. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is reliable delivery.

Only for system messages concerning you personally — such as the link to reset your password — do we use our own sender.

If you set up a recurring invoice, the invoice is created automatically on the day you specify and — if you have set it that way — goes to the stored customer without further action. For this, a time-controlled process runs on the server once a day to check which series are due. No data is processed beyond what a manually sent invoice involves; only the trigger is the clock instead of your click. You remain responsible for the sending.

Since 29 August 2026 the program asks for the recipients before sending. The address stored with the customer is pre-filled; you can change it for this one email, add further addresses or send a copy to yourself. These addresses are used only for this delivery and are not stored — an address is changed permanently only with the customer record.

Newsletter (since 18 September 2026): We occasionally send you news about PrivadiOffice and the referral portal to the email address of your account. The legal basis is Section 7(3) of the German Unfair Competition Act (advertising for our own similar services to existing customers) in conjunction with Article 6(1)(f) GDPR. For this we store your email address, your name, the language, where the address came from and the times of entry, confirmation, last message and objection. Every message states at the bottom why it was sent and carries an unsubscribe link — one click is enough, with no login and no further questions. Your address then stays marked as unsubscribed so that it is not added back by mistake. Anyone who signs up on one of our websites first receives an email with a confirmation link; without that click we send nothing.

What you record in PrivadiOffice about your customers and employees is processed by us exclusively on your behalf and according to your instructions. A data processing agreement pursuant to Art. 28 GDPR applies between you and us, which you conclude on registration and can view at any time.

Important for you: towards your customers and employees, you are the controller. You must therefore inform them that you process their data — your own privacy policy covers this, not ours.

Since 23.08.2026 the personnel form records further details about your employees: gender, birth name and country of birth, school-leaving and vocational qualifications, type of health insurance, parental status and, where applicable, residence and work permit, degree of disability, details of private health insurance, capital-forming payments, occupational pension and a wage garnishment. The degree of disability and the health insurance details are health data, and the garnishment likewise requires special protection; you collect them as the controller and only in so far as you need them for payroll and for reporting to social security.

The program deletes details of a garnishment on its own: six years after the end of the year in which the garnishment ends or the employee leaves, whichever is later. This period corresponds to the retention obligation for the payroll account under § 41 EStG. All other details remain stored until you delete the employee.

For each employee you can file documents under „Documents“ that are generated from their master data — employment contract and personnel form. They are stored as text in your account, on the same server as your other data, and are not viewed by us. If you delete the employee, their documents are deleted along with them; you can remove individual documents at any time. How long you must retain personnel records follows the tax and social security periods that apply to you as the employer — that is your decision, not ours.

If you use time tracking, you process your employees' working hours: the start and end of each assignment, the site it is assigned to, the hours calculated from this, and every subsequent change with its time and author. The change log is not an extra but follows from your recording obligation under § 17 MiLoG. The monthly payroll preparation for your tax adviser and the labour cost preview are based on the same data; once a month has been closed, it can no longer be changed unnoticed.

You also record absences: holiday, sick leave, unpaid leave and public holidays, each with a period, the state of the request and a free-text note. If your employees report something themselves through their personal access, the entries are created there. The fact that someone was ill on particular days is health data within the meaning of Art. 9 GDPR. You collect it as the controller and only in so far as you need it for continued pay, holiday planning and your recording obligations; for us as processor, Art. 9(2)(b) GDPR applies together with the data processing agreement. Diagnoses do not belong in the note field — none of these purposes require them.

Times and absences remain stored until you delete the employee. Which retention periods apply to you — two years for the records under § 17 MiLoG, for example — follows from your own obligations as an employer.

If you record applicants (Employees → Applicants), you process data about people who do not yet work for you: their name, the job they applied for, a phone number, an e-mail address, a free note and the date of the entry. The program asks for nothing more. These entries stand on their own: they belong to no personnel file and are not used in any payroll. You collect them as the controller. How long you may keep them follows from your purpose — after a rejection, around six months is customary, because claims under § 15 AGG (the German Equal Treatment Act) can be raised and brought to court within that period. The program never deletes applicants on its own; you remove an entry with the delete button in its row. Details about health, origin, religion and the like do not belong in the note field.

Since 29 August 2026 the program records two further points in time for each invoice: when it was last printed and when it was sent to your customer by email. Both describe your own action and are not additional information about your customer; they appear in the preview panel next to the invoice list and are deleted together with the invoice.

If you change a recorded payment or undo it, the program records that too: the time, the account that was signed in, and the previous value. This is not an evaluation of your behaviour but the traceability that proper accounting principles require for corrections. These entries are deleted together with the invoice.

Since 29 August 2026 you can also record customer payments in instalments. For each payment the program stores the amount, the date received, the payment method (cash, bank, card or other), an optional note and the account that recorded it. This information relates to your customer's payment behaviour and is deleted together with the invoice. For your own expenses the program additionally stores the payment date and payment method; that concerns your business, not your customers.

Since 30 August 2026 there is a cash book. It holds your own cash transactions with date, type, amount, tax rate, purpose, receipt reference and running balance; where an entry arose from a customer payment, the invoice number is shown with it. This concerns your business; no new information about your customer is added. Note: cash entries are never changed and never deleted — a correction is added as a separate counter-entry, as German bookkeeping law requires. The cash book is deleted only together with your account.

Also since 30 August 2026 you can record that a customer owes the VAT themselves under the reverse charge rule, and store the validity of their exemption certificate. Both are tax details about your business partner that you need in order to issue a correct invoice; they are deleted together with the customer.

Incoming invoices as e-invoices (since 30 September 2026): If you upload an e-invoice (XRechnung or ZUGFeRD) under “Expenses”, only our server reads the information it contains, such as supplier, invoice number, amounts, the supplier's tax number and bank details and the invoice recipient, without passing anything to third parties, and stores the file unchanged as the receipt of the expense until you delete the expense or your account.

Customer app (since 4 September 2026, password sign-in since 5 September 2026): Your customers can sign in to a dedicated app and see their appointments, the invoices you released and news there. To sign in they enter their customer number, their email address and a password of their own choosing. The first time, they enter an email address of their choice (since 11 September 2026); we send a one-time link to exactly this address, through which they set their password. Until the click, the address is only noted with this link. With the click we store it in the app account and enter it as the customer's email address in your account; an address already stored there is kept as a second address or as a line in the note on the customer. For a forgotten password, the link only goes to the address the customer registered with. If sending such a link fails, we receive an error report with your company, the time, the customer number and the provider of the destination address (the part after the @) so that we can fix the error. For this we store the confirmed email address, the time of sign-in, the time the password was set and check values of the password, the link and the session — never the password and never the link itself. Failed attempts are counted in memory for a few minutes to prevent guessing. As the company you can open the app from your overview in the view of one of your customers; you only see data you are responsible for anyway. We do not record how often a customer opens the app or whether they looked at an invoice. You remain responsible for this data; we process it on your behalf.

Appointment messages and advertising (since 5 September 2026): When a customer books an appointment we send a message to you and an acknowledgement of receipt to the customer, both in your name (since 18 September 2026); when you confirm or decline, a message goes to the customer. When booking in the app, the customer can optionally enter a task, such as “window cleaning” (since 18 September 2026); it appears with the request under “Appointments”, in both messages and in the calendar entry. If you have connected your calendar, we write a confirmed appointment with the customer's name and contact details into that calendar. Customers with an account in the app can also receive news by email; the default is “yes” and relies on section 7(3) of the German Unfair Competition Act (advertising for your own similar services to existing customers). Every customer can switch this off in the app at any time, every message contains an unsubscribe link, and we record the time of any objection. You remain responsible for content and sending.

Withdrawal and cancellation (since 24 September 2026): If you have switched on the right of withdrawal (Appointments → Right of withdrawal), we store for each appointment when you confirmed it, whether the customer agreed when booking that work may start before the withdrawal period ends, and when a withdrawal or cancellation via “Cancel appointment” in the app was received. The name and email address the customer enters when withdrawing are used only for the legally required confirmation of receipt to them and the message to you (§ 356a BGB); they are not stored. For the confirmation email we generate a withdrawal information PDF from your company details.

Appointment reminders (since 5 September 2026): Before a confirmed appointment we send up to two reminders to your customer in your name — one week and one day beforehand, depending on your settings. The message contains the date and time as well as the appointment as an attached calendar file. A time-controlled process runs on the server once a day for this; for each appointment we record which reminder has already been sent so that nobody is contacted twice.

Cancelled appointments (since 12 September 2026): If you delete a confirmed appointment in your connected calendar, we send a cancellation to your customer in your name and remove the appointment. We look for the address in the appointment itself, then in the sign-in address of your customer's app account, then in the e-mail fields of their customer record. If your customer has an app account, we additionally store a short notice with the date and time of the cancelled appointment so that they see it the next time they open the app; it is stored until they dismiss it and is deleted together with the customer. The same applies when you delete an appointment in the program.

We do not sell data and do not pass it on for advertising purposes. Disclosure only takes place to service providers necessary for operations — currently our server provider (item 3), our e-mail provider for messages sent without your own mailbox (item 9) and, for payment, the payment service provider Stripe (item 12) — and where we are legally obliged to do so.

Back-office assistant (since 07.10.2026): If you book the back-office assistant, the person we deploy for this (our own employees or freelancers) is given access to the data of the booked functions in order to support you. That person is bound to confidentiality in writing beforehand and works according to your instructions; the data processing agreement applies to your customers' and employees' data (section 10). Without a booking, this access does not exist.

Website (since 08.10.2026): If you book the website S, M or L, we register a .de domain for it with a German hosting provider. Privadi is the holder of the domain; when the website ends, we transfer the domain to you on request. The website M includes one email mailbox, the website L includes five; the provider stores the emails in them on servers in Germany and processes them on our behalf (Art. 28 GDPR). The legal basis is Art. 6(1)(b) GDPR. The mailboxes exist for as long as the website is booked; after that, we delete them together with their content.

If you use the AI help (the „AI help“ box at the top and the „Ask AI“ button in the search bar), the question you type is transmitted to the AI service Anthropic PBC, San Francisco, USA, and answered there. Only the text you enter yourself is transmitted — no customer data, no invoices, no details from your account. The legal basis is Art. 6(1)(b) GDPR (performance of the agreed service); the transfer to the USA is covered by a data processing agreement with standard contractual clauses. The questions are not used to train AI models. Anthropic deletes questions and answers after 30 days at the latest; only if a question is flagged as violating Anthropic's usage policy are they kept for up to 2 years. If you do not want this, simply do not use the button: the help section remains available as a list, and a person answers on +49 155 656 999 69.

Privadi magazine (since 29.09.2026): For drafts of the articles in our own magazine on privadi.de and deine-reinigungsfirma.de we also use the AI service Anthropic PBC, San Francisco, USA. Only the section, our writing guidelines, the seasonal topic and the headlines of existing articles are transmitted, no data about you, your customers or your employees. For the accompanying texts of our social media posts (since 30.09.2026) we also transmit the headline, teaser and text of the finished article, likewise without data about you, your customers or your employees. We read and check every draft before publishing it manually.

Social Media add-on (since 02.10.2026, optional and paid): If you book it, we store on our server (item 3) your logo, colour, slogan, the selected platforms, your texts and headlines, your uploaded photos (we remove location and camera data), the images and accompanying texts created from them, and how many posts with AI text you created per month. Like the packages, the add-on is paid via Stripe (item 12). If you publish a post as an article, its headline, text and photo appear publicly together with your company name on mein.privadi.de and, if you switch this on, in your customer app and in the list you embed in your website using the code. Visiting these pages only involves the technical data described in item 4; they do not set cookies. The legal basis is Art. 6(1)(b) GDPR. The data remain stored until you delete a post or your account is deleted; after the add-on ends, the article pages are switched off.

Social Media (since 02.10.2026): If you let the AI write the texts in the add-on, we transmit the text you entered, your headline, your company name and the selected platforms to the AI service Anthropic PBC, San Francisco, USA. Therefore do not enter any data of your customers or employees there. The legal basis is Art. 6(1)(b) GDPR; the transfer to the USA is handled the same way as for the AI help. Without the AI tick, nothing is transmitted.

Calendar connection (since 4 September 2026, optional): If you connect your Apple Calendar (iCloud) in the settings, we store your Apple ID and the app-specific password created for it at Apple in encrypted form in your account. The server uses it to retrieve the entries of the calendar you selected from Apple Inc. and to create booked appointments there; in doing so, your customer's name, contact details and requested time end up in your calendar at Apple. Apple is your provider here, not ours — Apple's terms apply to data protection in your Apple account. If you disconnect, we delete Apple ID and password from your account immediately; the entries in your calendar remain at Apple.

Translation of documents (optional): If you enter your own DeepL key in the settings and have a document translated into German, the server transmits the line item texts and the note of this document to DeepL SE, Cologne, and replaces them in the document with the translation. The key belongs to your own DeepL account; DeepL is your provider here, not ours, and DeepL's terms apply to data protection there. Without a key, nothing is transmitted.

You pay for PrivadiOffice subscriptions (plans) and for membership of the Reinigungszentrale (meine-reinigungsfirma.de: areas and, where applicable, PrivadiOffice) via the payment service provider Stripe Payments Europe, Limited, Dublin, Ireland (“Stripe”). Both run through the same Stripe account of PrivadiOffice.

The following are processed: name, company name, e-mail address, the billing address where requested, VAT identification number if provided, payment data (card details or bank details for the SEPA direct debit) and the invoices with amounts, dates and payment status. You enter card and account details directly on a Stripe page; we neither receive nor store them. We store the identifiers of your customer and subscription account at Stripe, the type and status of the subscription, the dates of cancellation and end and, for the membership, the start and end of the free PrivadiOffice days and the end date of a cancellation of PrivadiOffice.

The purpose is billing your subscription or membership: collecting fees, billing changes, refunds and activation after payment. The legal basis is Art. 6(1)(b) GDPR. We retain invoices and accounting records, also after the contract has ended, for the statutory retention periods (Section 147 of the German Fiscal Code (AO), Section 14b of the German VAT Act (UStG)); the legal basis for this is Art. 6(1)(c) GDPR.

Stripe processes the data partly on our behalf and partly — for instance for fraud prevention and to meet its own legal obligations — under its own responsibility. In doing so, data may be transferred to Stripe, Inc. in the USA. According to Stripe, such transfers are based on the EU-U.S. Data Privacy Framework and on the standard contractual clauses of the European Commission. Details are set out in Stripe's privacy policy: https://stripe.com/de/privacy

Apple Pay and Google Pay: On Stripe's payment page you can also pay with Apple Pay or Google Pay if your device or browser offers it. If you choose one of these services, you authorise the payment there. For this, Apple or Google receive details of the payment, such as the amount and the recipient, and process them under their own responsibility; in doing so, data may also be transferred to the USA. Google may also use this data for its own analyses. The legal basis is Art. 6(1)(b) GDPR. Details are set out in the privacy policies of Apple: https://www.apple.com/legal/privacy/ and Google: https://policies.google.com/privacy

If you created your account when registering as a partner in the Reinigungszentrale and do not pay for the membership, we delete the account 30 days after registration together with the registration in the portal, provided it has no subscription and no paid invoice; the portal reminds you seven days beforehand. If we reject a registration before activation, we end the subscription, refund amounts paid via Stripe and store the time of the refund.

You have the right at any time to:

• access the data stored about you (Art. 15 GDPR)
• rectification of incorrect data (Art. 16 GDPR)
• erasure (Art. 17 GDPR)
• restriction of processing (Art. 18 GDPR)
• receive your data in a common format (Art. 20 GDPR)
• object to processing based on legitimate interests (Art. 21 GDPR)

An informal message to office@privadi.net is sufficient.

You may also lodge a complaint with a supervisory authority. The authority responsible for us is the Landesbeauftragter für den Datenschutz Sachsen-Anhalt, Otto-von-Guericke-Straße 34a, 39104 Magdeburg.

If something changes in PrivadiOffice that affects how data is handled, we update this policy in the same step and raise the date above. Logged-in users then see a marker next to the „Privacy“ entry in the software until they have opened the policy once.