Privacy

1. Who is responsible

Controller: Supaapps GmbH
Bundesallee 187, 10717 Berlin, Germany
Represented by: Nawwar Elnarsh
E-mail: info@supaapps.com
Phone: +49 151 257 99 120

Supactivations is a brand of Supaapps GmbH. For any question about your data, write to the address above.

2. The short version

You can use this site without telling us who you are. Our server records technical access data so the site can run. With your consent we use Google Analytics to see how the site is used. If you book a call, Google Calendar processes the details you enter. If you e-mail or call us, we use what you send to answer you. We don’t sell your data and we don’t use it for advertising.

3. Hosting and server log files

This website runs at [hosting provider, address]. When you open a page, the server automatically records browser type and version, operating system, referrer URL, host name of the accessing device, time of the request and IP address. We need this data to deliver the site securely and to find errors. Legal basis is Art. 6(1)(f) GDPR (our legitimate interest in a working, secure website). Log files are deleted after 14 days unless needed to investigate an attack. We have a data processing agreement with the host under Art. 28 GDPR.

4. Fonts

All fonts are served from our own server. No connection to third parties is made.

5. Encryption

The site uses TLS encryption, shown by “https://” and the lock symbol in your browser. Data you send to us can’t be read by third parties in transit.

6. Contact by e-mail or phone

If you contact us, we process your request, including your name, contact details and message, to answer it and to handle any project that follows. Legal basis is Art. 6(1)(b) GDPR when your request relates to a contract or pre-contract steps, and Art. 6(1)(f) GDPR otherwise (our interest in answering enquiries). We delete the data once it’s no longer needed, unless statutory retention periods apply (usually 6 or 10 years under German commercial and tax law).

7. Booking a call (Google Calendar)

You can book a call with us through a Google Calendar appointment page. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. When you book, Google processes the details you enter (name, e-mail address, chosen time and any notes) and sends us the booking. If a video link is added, Google Meet may process further data during the call. The booking page only opens when you click the button. Legal basis is Art. 6(1)(b) GDPR (arranging a meeting at your request). Data may be transferred to Google LLC in the USA. Google is certified under the EU-US Data Privacy Framework, and Standard Contractual Clauses also apply. More: policies.google.com/privacy.

8. Web analytics (Google Analytics 4)

With your consent, we use Google Analytics 4, a service of Google Ireland Limited (address above), to understand how visitors use the site, for example which pages are read and how people find us. Google Analytics sets cookies (such as _ga and _ga_<ID>) and processes usage data, device and browser information and approximate location. Google Analytics 4 does not store IP addresses for users in the EU. Google signals and advertising features are switched off. We keep analytics data for 14 months.

Legal basis is your consent under Art. 6(1)(a) GDPR and § 25(1) TDDDG. Google Analytics only loads after you agree in the cookie banner. You can withdraw consent at any time with future effect under “Cookie settings” at the bottom of every page. Data may be transferred to Google LLC in the USA, which is certified under the EU-US Data Privacy Framework. We have a data processing agreement with Google.

9. Cookies and consent

Your cookie choice is stored in your browser’s local storage (§ 25(2) TDDDG). Your language choice is stored in a cookie called lang, which is also technically necessary. All other cookies, including analytics, are only set with your consent. You can change your choice at any time under “Cookie settings” or delete cookies in your browser.

10. Your rights

You have the right to access your data (Art. 15 GDPR), to rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). If we process data based on your consent, you can withdraw it at any time with future effect (Art. 7(3)).

Right to object (Art. 21 GDPR): where we process your data based on legitimate interest (Art. 6(1)(f)), you can object at any time for reasons arising from your particular situation. We will then stop, unless we can show compelling legitimate grounds.

You can also complain to a data protection supervisory authority. The authority responsible for us is the Berlin Commissioner for Data Protection and Freedom of Information (Berliner Beauftragte für Datenschutz und Informationsfreiheit), Alt-Moabit 59–61, 10555 Berlin.

11. How long we keep data

We keep personal data only as long as we need it for its purpose or as long as the law requires. After that it is deleted.

12. Changes

We update this policy when the site or the law changes. The current version is always on this page.