In principle, we only process personal data of our users to the extent necessary to provide a functional website and our content and services. As a rule, the processing of personal data of our users only takes place after the user has given consent. An exception applies in cases where prior consent cannot be obtained for factual reasons and the processing of the data is permitted by law.
Legal Bases
Where we obtain consent from the data subject for processing of personal data, Art. 6 (1) (a) GDPR serves as the legal basis. When processing personal data necessary for the performance of a contract to which the data subject is party, Art. 6 (1) (b) GDPR serves as the legal basis. Where processing of personal data is required to comply with a legal obligation, Art. 6 (1) (c) GDPR serves as the legal basis. If processing is necessary to safeguard a legitimate interest of our company or a third party, and the interests, fundamental rights and freedoms of the data subject do not override the former interest, Art. 6 (1) (f) GDPR serves as the legal basis.
3. Hosting and Data Storage
The yourapps.studio platform is hosted on servers in Germany. The customer and usage data of the platform is processed there. We do not transfer data to countries outside the EU/EEA; such a transfer can only occur where a customer itself connects a service outside the EU (see below).
We use data processing agreements (DPA) pursuant to Art. 28 GDPR with our hosting providers.
Where a customer connects its own accounts with third-party services (e.g. an AI model provider or a payment provider for its shop), the platform transmits the data required for this on the customer's behalf to the service it has chosen. We protect the data we process with state-of-the-art technical and organisational measures, in particular encryption in transit, access restrictions and the separation of data per organisation.
4. Provision of the Website and Creation of Log Files
Each time our website is accessed, our system automatically records data and information from the computer system of the requesting device. The following data is collected:
Information about the browser type and version used
The user's operating system
The user's internet service provider
The user's IP address (anonymized)
Date and time of access
Websites from which the user's system reaches our website
Websites accessed by the user's system via our website
The data is also stored in our system's log files. This data is not stored together with other personal data of the user. The legal basis for storing this data is Art. 6 (1) (f) GDPR.
5. Use of Cookies
Our website uses cookies. Cookies are text files stored in or by the internet browser on the user's computer system. We use technically necessary cookies required for the provision of platform functionality (e.g. authentication, session management).
For cookies that are not technically necessary, we obtain your consent pursuant to § 25 (1) TTDSG in conjunction with Art. 6 (1) (a) GDPR.
6. Registration and User Account
When registering for the yourapps.studio platform, the following data is collected:
First and last name
Email address
Password (stored encrypted)
Organization / company name
Optional: phone number, address, additional profile data
This data is processed for contract execution and performance pursuant to Art. 6 (1) (b) GDPR. The data is stored for the duration of the contractual relationship and until the expiry of statutory retention periods (in particular § 257 HGB, § 147 AO).
7. Payment Processing
For a paid subscription we collect billing details (company name, billing address, billing email address, VAT ID where applicable) and issue our invoices from them. We process payments through the payment service provider Mollie B.V., Keizersgracht 126, 1015 CW Amsterdam, Netherlands. For card payments you enter the card details directly on Mollie's payment page; we do not receive them. For SEPA direct debit you enter account holder and IBAN with us; we pass them on to Mollie and store only the last four digits of the IBAN and the evidence of the mandate granted (time, mandate reference, wording of the mandate).
We transmit to Mollie the details needed for collection (name or company, email address, amount, payment reference, and for direct debit the account holder and IBAN) and receive the status of the payment from Mollie. Mollie processes payment data as a licensed payment institution under its own responsibility and privacy notice (https://www.mollie.com/privacy); processing takes place within the EU. The legal basis is Art. 6 (1) (b) GDPR (contract performance). We store invoices and billing-related data for the statutory retention periods (up to ten years, § 147 AO, § 257 HGB).
8. Email Communication
If you contact us by email, your email address and the information contained in the email will be stored for the purpose of processing your request and for possible follow-up questions. The legal basis for the processing is Art. 6 (1) (b) GDPR (initiation/performance of a contract) or Art. 6 (1) (f) GDPR (legitimate interest in processing your request). We delete the request once it has been dealt with and no statutory retention duty prevents this.
9. Web Analytics
We may use web analytics services (e.g. self-hosted Matomo) to evaluate and improve the use of our website. These services use cookies or similar technologies. IP addresses are truncated (anonymized) before being stored.
Processing takes place on the basis of your consent pursuant to Art. 6 (1) (a) GDPR. You may withdraw your consent at any time via the cookie settings.
10. Your Rights as a Data Subject
You have the following rights at any time with regard to personal data concerning you:
Right of access (Art. 15 GDPR)
Right to rectification of inaccurate data (Art. 16 GDPR)
Right to erasure (Art. 17 GDPR)
Right to restriction of processing (Art. 18 GDPR)
Right to data portability (Art. 20 GDPR)
Right to object to processing (Art. 21 GDPR)
Right to withdraw consent with effect for the future (Art. 7 (3) GDPR)
To exercise your rights, please contact us by email at [email protected].
We answer your request without undue delay and at the latest within one month of receipt (Art. 12 (3) GDPR).
11. Right to Complain to a Supervisory Authority
You have the right to lodge a complaint with a data protection supervisory authority about our processing of your personal data. The competent supervisory authority is:
The State Commissioner for Data Protection and Freedom of Information Baden-Württemberg