Privacy Policy
We take the protection of your personal data seriously. This Privacy Policy informs you about the nature, scope, and purpose of the processing of personal data when using this website and our services, in accordance with the General Data Protection Regulation (GDPR).
1. Controller
The controller within the meaning of the GDPR is:
szsolutions
Owner: Dr. David Szczesny
Friedrichstr. 155
10117 Berlin
Germany
E-mail: contact@szsolutions.de
2. Server logs & hosting
When you access our website, certain technical information is automatically processed by the server (e.g. IP address, date and time of access, requested URLs, referrer URL, browser type and operating system). This information is stored in server log files.
Processing is based on Art. 6(1)(f) GDPR, reflecting our legitimate interest in providing a secure and stable website and protecting against misuse or attacks. Log files are generally stored only for a limited period, unless longer storage is required for security or evidentiary purposes.
3. Cookies & analytics
We use cookies and similar technologies on our website. These may include technically necessary cookies (e.g. to provide login functionality, session management or to store your privacy preferences) as well as, where you have consented, optional cookies for statistical and analytics purposes.
The use of technically necessary cookies is based on Art. 6(1)(b) GDPR (performance of a contract or pre-contractual measures) and Art. 6(1)(f) GDPR (our legitimate interest in a stable and secure operation of the website).
Optional cookies and analytics tools are only used on the basis of your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time with effect for the future via the cookie settings on this website.
For detailed information about the cookies we use, their categories (essential, functional, analytics, marketing) and your options to manage or withdraw consent, please refer to our Cookie Policy.
4. Registration, user account & use of the platform
When you create a user account or use our premium features, we process the data you provide (e.g. e-mail address, login data, profile or account information, subscription and payment status) in order to provide access to your account, forecasts and other platform features. The legal basis is Art. 6(1)(b) GDPR (performance of a contract). Where we process data for fraud prevention, IT security or to improve our services, this is based on Art. 6(1)(f) GDPR (legitimate interests).
5. Payment processing (e.g. Stripe)
For processing payments related to paid services, we use payment service providers (e.g. Stripe). During the payment process, the data required for the transaction (such as name, e-mail address, billing address, payment method, bank or card details, transaction-related information) is transmitted directly to the respective payment service provider. The legal basis is Art. 6(1)(b) GDPR (performance of a contract) and, where applicable, Art. 6(1)(f) GDPR (our legitimate interest in secure and efficient payment processing).
The payment service provider processes the data under its own responsibility. Please refer to the respective provider's privacy policy for further details.
6. Recipients of data & third-country transfers
We only disclose personal data to third parties where this is necessary for the performance of a contract, for the provision of our services (e.g. hosting providers, payment service providers, analytics or e-mail service providers), due to a legal obligation or based on our legitimate interests and permitted under the law. Where processors act on our behalf, we conclude data processing agreements in accordance with Art. 28 GDPR.
If data is transferred to countries outside the EU/EEA, we ensure an adequate level of data protection, for example by means of adequacy decisions of the European Commission or the use of standard contractual clauses.
7. Storage period
We store personal data only for as long as necessary for the respective purposes of processing or as required by statutory retention periods (in particular under commercial and tax law). After that, the data is deleted or anonymised. Criteria for determining the storage period include the duration of contractual relationships, statutory limitation periods and our legitimate interests in defending or asserting legal claims.
8. Your rights
Subject to the legal requirements, you have the right to access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR), data portability (Art. 20 GDPR) and the right to object to the processing of your personal data (Art. 21 GDPR). Where processing is based on your consent (Art. 6(1)(a) GDPR), you may withdraw this consent at any time with effect for the future.
You also have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or the place of the alleged infringement.
9. Changes to this Privacy Policy
We may update this Privacy Policy from time to time, in particular if our data processing activities or the applicable legal framework change. The current version is always available on this website.