Privacy policy

1. Controller

Christian Hermann & Martina Hermann GbR, An Rainen 3, 72525 Münsingen, Germany; apps@bitbeans.de.

2. Website delivery through Cloudflare

We use Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA, to deliver and protect this website. Technical access data includes IP address, time, requested URL, HTTP status and browser or device information. The legal basis is Article 6(1)(f) GDPR; our legitimate interest is the secure and reliable operation of the website.

3. International transfers

Processing in the United States cannot be ruled out. Cloudflare relies on its EU-US Data Privacy Framework certification and, where this does not apply, on EU Standard Contractual Clauses with supplementary measures.

4. Email and form contact

We process the name, email address, selected app and message sent by email or contact form to answer your request. Cloudflare handles the form and sends us the message by email. The IP address is used only to limit abusive submissions and is not saved with the message. The legal basis is Article 6(1)(b) GDPR for contractual matters and otherwise Article 6(1)(f) GDPR. Correspondence is kept only while needed to answer or meet legal obligations.

5. Web analytics with Umami

We use Umami to measure reach. The software runs exclusively on a server we operate (analytics.bitbeans.de) in a data center of our hosting provider OVHcloud in Frankfurt am Main, Germany. OVHcloud acts as a processor and exclusively within the EU; the measurement data is not transferred to third countries, not shared with third parties and not combined across websites.

We process the page visited, the referrer, the country of origin, device type, screen size, browser and operating system. We also count clicks on the App Store and Google Play buttons; only the store and the app concerned are transmitted, nothing about you personally. Umami sets no cookies and places no identifier on your device; visits are distinguished by a daily rotating, non-reversible hash value, and the IP address itself is not stored. No user profiles are created and no link to accounts is made.

The legal basis is Article 6(1)(f) GDPR; our legitimate interest is the statistical evaluation of website use in order to improve what we offer. The measurement data is deleted after 14 months. If your browser sends the “Do Not Track” signal, the visit is not measured. You may also object to the measurement informally at any time at apps@bitbeans.de. The measurement is not required to use the website and has no effect on content or features.

6. Cookies and external content

We use no cookies for audience measurement or advertising and embed no advertising scripts. Any remaining visitor identifier from the previous hosting provider is deleted on the next visit. Cloudflare may use technically necessary security cookies, including __cf_bm for bot detection and cf_clearance for completed security checks; access to the device that is strictly necessary for this purpose is based on Section 25(2)(2) TDDDG. Fonts and images are served locally. External services are contacted only when you open a link.

7. Retention and rights

Data is retained only for as long as required for delivery, security, correspondence or statutory obligations; analytics data is deleted after 14 months. You may request access, correction, deletion, restriction, portability or object to processing. You may also complain to a data protection authority.

8. Apps

Each app has a separate privacy notice describing its specific processing.