Who is responsible
Max Nowack, Schillerstr. 1, 37120 Bovenden, Germany.
[email protected] — see the
imprint.
What we store, and why
When you submit the form we store your email address, the time you submitted it and the IP address and browser identifier the submission came from. When you click the confirmation link we store the time and IP address of that click. We also store a referral code for you and, if you arrived through somebody else's link, which code brought you.
The address is used to send you two emails: one to confirm the address is really yours, and one when your workspace is ready. Nothing else. No newsletter, no sales sequence, never sold, never shared for anyone else's purposes.
The IP addresses and the browser identifier exist for one reason: German law requires us to be able to evidence that you asked for these emails, and without that record we could not. Apart from the server logs below, they are the only data about you that this site keeps.
Server logs
Like any web server, ours records the requests it answers: the time, the page requested, the response, the browser identifier, and the IP address the request came from. This is how a server is operated and debugged, and it happens whether or not you ever fill in the form.
Legal basis is our legitimate interest in running the site securely and correctly, Article 6 (1) (f) GDPR. These logs are not combined with the signup data, are not used to build a profile, are not analysed for reach or behaviour, and are kept only as long as operating the service requires.
Legal basis
Your consent, Article 6 (1) (a) GDPR, given when you submit the form and confirmed when you click the link in the first email. You can withdraw it at any time with effect for the future; withdrawing does not affect what was lawful before.
How long
Until you withdraw. One click on the unsubscribe link in any email we send deletes your address, both IP addresses, the browser identifier and every other detail that identifies you — immediately, with no waiting period and nothing to ask for.
One thing survives, and you should know about it: an empty record stays in place recording that somebody once referred the people you referred. It holds no address, no IP address and no way back to you. It exists because deleting it outright would silently take places in the queue away from people who have nothing to do with your decision to leave.
Who else sees it
Brevo (Sendinblue SAS, 17 rue Salneuve, 75017 Paris, France) sends our email. It processes your address on our instructions and under a data processing agreement. Brevo is established in France; where it relies on sub-processors outside the European Union, it does so under the safeguards set out in that agreement.
Hetzner Online GmbH (Industriestr. 25, 91710 Gunzenhausen, Germany) runs the servers this site and the signup service are on, in its Nuremberg data centre. Processing takes place in Germany, on our instructions, under a data processing agreement. Nothing leaves the EU here.
Nobody else. There is no analytics provider, no tag manager, no CDN and no advertising network involved, and the fonts you are reading are served from this domain rather than from someone else's.
Cookies, and the thing that is not a cookie
This site sets no cookies. It does store your referral code in your browser's local storage, so that it can show you where you stand without asking for your address again. That value never goes to anyone but us, is not used to recognise you anywhere else, and clearing your browser data removes it.
Your rights
You have the right to access your data (Art. 15 GDPR), to have it corrected (Art. 16), erased (Art. 17) or restricted (Art. 18), to receive it in a portable form (Art. 20), and to object to its processing (Art. 21). Write to [email protected] — or use the unsubscribe link, which does the erasing for you.
You also have the right to complain to a supervisory authority. The one responsible for us is:
Die Landesbeauftragte für den Datenschutz Niedersachsen
Prinzenstraße 5, 30159 Hannover, Germany
lfd.niedersachsen.de
Is any of this required to use the site
No. You are not obliged to give us an address, and nothing on this site is withheld from you if you do not. There is no automated decision-making and no profiling.