The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is any data with which you can be personally identified.
We do not use any third-party analytics or tracking services (for example Google Analytics), do not create usage profiles and do not set any cookies for analytics purposes.
Using software operated by ourselves on our server, we evaluate how often our pages are accessed and how often the individual advertising banners are displayed and clicked. Only the page or advertising banner concerned and the time are recorded; the figures are evaluated in aggregated form per day and month. We do not store any IP addresses or identifiers, do not set any cookies and do not store anything in your browser. It is not possible to link the data to persons or accounts, and the data is not passed on to third parties. The purpose is to know the reach of our pages and to bill and evaluate the advertising spaces. The entries are deleted after 24 months.
No personal data is processed for these statistics. Insofar as data such as your IP address is technically processed when a page is accessed, this is done on the basis of Art. 6(1)(f) GDPR and not for the statistics.
We integrate advertising banners from partners on this website. In doing so, we refrain from integrating tracking scripts or externally loaded advertising iframes from third-party providers. The banners used are static images hosted on our own server.
When you click on such a banner, you will be redirected directly to the partner (e.g., Awin) via a hyperlink. Only through this active click do you leave our website and reach the third-party provider's platform, which may set its own cookies for commission accounting purposes from that point onwards. The legal basis for this is Art. 6 Para. 1 lit. f GDPR (legitimate interest in the monetization of the free service).
We offer our users the option to take out a paid subscription. This subscription suppresses the display of all advertising banners.
When a subscription is concluded, we process the data necessary for the fulfillment of the contract (billing data, payment status). In this case, no transmission of data for advertising purposes takes place.
For the use of the REST API with the ETRM API add-on, we store for each access key the name you assigned, a short identifying part, the permission (read or write) and the times of creation, last use and, where applicable, revocation. We do not store the key itself, only a check value (hash). The legal basis is Art. 6(1)(b) GDPR (performance of a contract).
For payment processing we use Stripe Payments Europe, Limited, One Wilton Park, Wilton Place, Dublin 2, D02 FX04, Ireland (“Stripe”). When you take out a subscription, you enter your payment details directly with Stripe; Stripe processes in particular your name, email address, means of payment and billing address. From Stripe we only receive a customer number, the selected product and the status of the subscription; we do not store complete payment details. The legal basis is Art. 6(1)(b) GDPR. Stripe may also transfer data to the USA; this is based on the EU-US Data Privacy Framework and the standard contractual clauses of the EU Commission.
Further information can be found in Stripe's privacy policy: stripe.com/privacy
We deliver fonts, styles and scripts from our own server. No connections to third parties are established for this when you visit our pages. Exceptions are payment processing via Stripe (section 4) and videos in the help, which are only loaded after your click (section 7).
We only use technically necessary cookies, for example for signing in (session), protection against forged form requests (CSRF) and the selected language. The legal basis is Section 25(2) No. 2 TDDDG in conjunction with Art. 6(1)(f) GDPR. Consent is not required for this, which is why we do not show a cookie banner.
Your browser stores your colour scheme setting locally; it is not transmitted to third parties.
In the help we embed tutorial videos from YouTube, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Opening a help page does not connect to YouTube: only a preview image from our own server is shown.
Only when you click 'Play video' does your browser load the player in the privacy-enhanced mode from youtube-nocookie.com. In particular, your IP address, the page visited and technical information about your browser are transmitted to YouTube; YouTube may use cookies or similar technologies. The legal basis is your consent given by the click (Art. 6 (1) (a) GDPR, Section 25 (1) TDDDG). A transfer to the USA is possible; Google is certified under the EU-US Data Privacy Framework.
Further information can be found in Google's privacy policy: policies.google.com/privacy
To protect your account and project data against misuse, we log security-relevant events: sign-ins and failed sign-in attempts, changes to your password and two-factor authentication, memberships and roles in groups, the creation and revocation of API keys, exports of project data and the deletion of the account. We store the time, the type of event, the account concerned, the IP address and a shortened description of the browser; for failed sign-ins, the email address entered is stored only in shortened form. Passwords, codes and keys are never logged.
The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in the security of the service and in detecting and investigating misuse. IP addresses are shortened after 90 days and entries are deleted after 12 months. You can see your own recent sign-ins on your account page.
You have the right to access the data stored about you, to data portability and to erasure (Art. 15, 17 and 20 GDPR). On your account page you can download a file (JSON) with the data of your account at any time via “Download my data”, and you can delete your account yourself via “Delete account”.
When you delete your account, running subscriptions are cancelled at the end of the paid period, and your email address, your name, linked sign-ins, two-factor authentication, API keys, group memberships and open invitations are removed. Your contributions to shared projects remain available to the other members but are no longer assigned to any person. We or Stripe retain billing data only where statutory retention obligations apply. For any other requests, you can reach us using the contact details in the legal disclosure.